
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
len kontrola
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
len kontrola
Logfile of random's system information tool 1.08 (written by random/random)
Run by Kubino at 2010-09-26 15:59:44
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 67 GB (67%) free of 100 GB
Total RAM: 3327 MB (82% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:59:46, on 26. 9. 2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Winamp\winamp.exe
D:\mozila stiahnuté\RSIT.exe
C:\Program Files\trend micro\Kubino.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.maxiwe.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.maxiwe.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.maxiwe.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.maxiwe.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [Uninstall Adobe Download Manager] "C:\WINDOWS\system32\rundll32.exe" "C:\Program Files\NOS\bin\getPlus_Helper_3004.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1noarp
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DriverScanner] "C:\Program Files\Uniblue\DriverScanner\launcher.exe" delay 20000
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AODService - Unknown owner - C:\Program Files\AMD\OverDrive\AODAssist.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
--
End of file - 6842 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-03 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-05-03 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-10-09 33677312]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-03 98304]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2010-01-14 37888]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall Adobe Download Manager"=C:\Program Files\NOS\bin\getPlus_Helper_3004.dll [2010-09-01 66112]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-06-01 94208]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-04-11 319792]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DriverScanner"=C:\Program Files\Uniblue\DriverScanner\launcher.exe delay 20000 []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-03 159744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"D:\HRY\Activision\Call of Duty - World at War\CoDWaWmp.exe"="D:\HRY\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"D:\HRY\Activision\Call of Duty - World at War\CoDWaW.exe"="D:\HRY\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\HRY\Ubisoft\Far Cry 2\bin\FarCry2.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2"
"D:\HRY\Ubisoft\Far Cry 2\bin\FC2Launcher.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"
"D:\HRY\Ubisoft\Far Cry 2\bin\FC2Editor.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editor"
"D:\HRY\Valve\hl.exe"="D:\HRY\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"D:\HRY\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="D:\HRY\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"D:\HRY\Microsoft Games\Motocross Madness 2\MCM2.EXE"="D:\HRY\Microsoft Games\Motocross Madness 2\MCM2.EXE:*:Enabled:Microsoft® Motocross Madness 2"
"D:\HRY\MotoGP 08\Launcher.exe"="D:\HRY\MotoGP 08\Launcher.exe:*:Enabled:MotoGP 08"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"D:\HRY\Valve\hlds.exe"="D:\HRY\Valve\hlds.exe:*:Enabled:HLDS Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2010-09-26 15:59:44 ----D---- C:\rsit
2010-09-26 14:48:08 ----D---- C:\Program Files\NOS
2010-09-24 11:35:20 ----A---- C:\WINDOWS\system32\npptNT2.sys
2010-09-24 11:25:03 ----D---- C:\Program Files\NCsoft
2010-09-21 22:32:39 ----D---- C:\Documents and Settings\Kubino\Data aplikací\Uniblue
2010-09-15 20:38:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-09-15 20:38:53 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-09-15 20:38:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-09-15 20:38:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-09-15 20:38:25 ----HDC---- C:\WINDOWS\$NtUninstallKB982802$
2010-09-15 20:38:03 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-09-15 20:37:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
======List of files/folders modified in the last 1 months======
2010-09-26 15:59:46 ----D---- C:\WINDOWS\Prefetch
2010-09-26 15:59:45 ----D---- C:\Program Files\trend micro
2010-09-26 14:48:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2010-09-26 14:48:08 ----RD---- C:\Program Files
2010-09-26 14:13:53 ----D---- C:\Documents and Settings\Kubino\Data aplikací\uTorrent
2010-09-26 14:11:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-09-25 20:51:48 ----D---- C:\WINDOWS\Temp
2010-09-24 22:23:40 ----D---- C:\Documents and Settings\Kubino\Data aplikací\Skype
2010-09-24 22:22:21 ----D---- C:\Documents and Settings\Kubino\Data aplikací\skypePM
2010-09-24 15:43:19 ----D---- C:\WINDOWS\system32\config
2010-09-24 11:35:20 ----D---- C:\WINDOWS\system32
2010-09-24 11:24:54 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-24 11:18:04 ----A---- C:\WINDOWS\NeroDigital.ini
2010-09-21 22:45:12 ----D---- C:\WINDOWS
2010-09-21 22:38:49 ----D---- C:\Program Files\Reganam
2010-09-21 22:37:06 ----SHD---- C:\WINDOWS\Installer
2010-09-21 22:36:58 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-21 22:36:57 ----D---- C:\Program Files\VIA
2010-09-21 22:36:54 ----D---- C:\WINDOWS\system32\drivers
2010-09-21 22:32:43 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-19 18:35:48 ----D---- C:\Program Files\Google
2010-09-17 14:00:57 ----D---- C:\Program Files\Mozilla Firefox
2010-09-17 11:32:20 ----HD---- C:\WINDOWS\inf
2010-09-17 01:39:31 ----D---- C:\WINDOWS\Help
2010-09-15 21:01:56 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-15 20:38:56 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-15 20:38:55 ----A---- C:\WINDOWS\imsins.BAK
2010-09-15 20:38:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-09-15 20:37:09 ----A---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 a347bus;a347bus; C:\WINDOWS\system32\DRIVERS\a347bus.sys [2004-04-30 160640]
R0 a347scsi;a347scsi; C:\WINDOWS\System32\Drivers\a347scsi.sys [2004-04-30 5248]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-31 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-06-03 691696]
R1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-03 4605952]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-08-19 100368]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-07-27 44032]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-09-30 1418368]
S3 catchme;catchme; \??\C:\DOCUME~1\Kubino\LOCALS~1\Temp\catchme.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-06-25 25280]
S3 npkcrypt;npkcrypt; \??\D:\HRY\lineage2 low rate\system\npkcrypt.sys []
S3 npkycryp;npkycryp; \??\D:\HRY\Lineage II\system\npkycryp.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-03 602112]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 AODService;AODService; C:\Program Files\AMD\OverDrive\AODAssist.exe [2009-05-05 124256]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-17 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-06-22 208896]
S3 nosGetPlusHelper;getPlus(R) Helper 3004; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Run by Kubino at 2010-09-26 15:59:44
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 67 GB (67%) free of 100 GB
Total RAM: 3327 MB (82% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:59:46, on 26. 9. 2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Winamp\winamp.exe
D:\mozila stiahnuté\RSIT.exe
C:\Program Files\trend micro\Kubino.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.maxiwe.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.maxiwe.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.maxiwe.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.maxiwe.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [Uninstall Adobe Download Manager] "C:\WINDOWS\system32\rundll32.exe" "C:\Program Files\NOS\bin\getPlus_Helper_3004.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1noarp
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DriverScanner] "C:\Program Files\Uniblue\DriverScanner\launcher.exe" delay 20000
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AODService - Unknown owner - C:\Program Files\AMD\OverDrive\AODAssist.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
--
End of file - 6842 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-03 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-05-03 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-10-09 33677312]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-03 98304]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2010-01-14 37888]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall Adobe Download Manager"=C:\Program Files\NOS\bin\getPlus_Helper_3004.dll [2010-09-01 66112]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-06-01 94208]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-04-11 319792]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DriverScanner"=C:\Program Files\Uniblue\DriverScanner\launcher.exe delay 20000 []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-03 159744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"D:\HRY\Activision\Call of Duty - World at War\CoDWaWmp.exe"="D:\HRY\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"D:\HRY\Activision\Call of Duty - World at War\CoDWaW.exe"="D:\HRY\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\HRY\Ubisoft\Far Cry 2\bin\FarCry2.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2"
"D:\HRY\Ubisoft\Far Cry 2\bin\FC2Launcher.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"
"D:\HRY\Ubisoft\Far Cry 2\bin\FC2Editor.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editor"
"D:\HRY\Valve\hl.exe"="D:\HRY\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"D:\HRY\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="D:\HRY\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"D:\HRY\Microsoft Games\Motocross Madness 2\MCM2.EXE"="D:\HRY\Microsoft Games\Motocross Madness 2\MCM2.EXE:*:Enabled:Microsoft® Motocross Madness 2"
"D:\HRY\MotoGP 08\Launcher.exe"="D:\HRY\MotoGP 08\Launcher.exe:*:Enabled:MotoGP 08"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"D:\HRY\Valve\hlds.exe"="D:\HRY\Valve\hlds.exe:*:Enabled:HLDS Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2010-09-26 15:59:44 ----D---- C:\rsit
2010-09-26 14:48:08 ----D---- C:\Program Files\NOS
2010-09-24 11:35:20 ----A---- C:\WINDOWS\system32\npptNT2.sys
2010-09-24 11:25:03 ----D---- C:\Program Files\NCsoft
2010-09-21 22:32:39 ----D---- C:\Documents and Settings\Kubino\Data aplikací\Uniblue
2010-09-15 20:38:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-09-15 20:38:53 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-09-15 20:38:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-09-15 20:38:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-09-15 20:38:25 ----HDC---- C:\WINDOWS\$NtUninstallKB982802$
2010-09-15 20:38:03 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-09-15 20:37:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
======List of files/folders modified in the last 1 months======
2010-09-26 15:59:46 ----D---- C:\WINDOWS\Prefetch
2010-09-26 15:59:45 ----D---- C:\Program Files\trend micro
2010-09-26 14:48:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2010-09-26 14:48:08 ----RD---- C:\Program Files
2010-09-26 14:13:53 ----D---- C:\Documents and Settings\Kubino\Data aplikací\uTorrent
2010-09-26 14:11:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-09-25 20:51:48 ----D---- C:\WINDOWS\Temp
2010-09-24 22:23:40 ----D---- C:\Documents and Settings\Kubino\Data aplikací\Skype
2010-09-24 22:22:21 ----D---- C:\Documents and Settings\Kubino\Data aplikací\skypePM
2010-09-24 15:43:19 ----D---- C:\WINDOWS\system32\config
2010-09-24 11:35:20 ----D---- C:\WINDOWS\system32
2010-09-24 11:24:54 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-24 11:18:04 ----A---- C:\WINDOWS\NeroDigital.ini
2010-09-21 22:45:12 ----D---- C:\WINDOWS
2010-09-21 22:38:49 ----D---- C:\Program Files\Reganam
2010-09-21 22:37:06 ----SHD---- C:\WINDOWS\Installer
2010-09-21 22:36:58 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-21 22:36:57 ----D---- C:\Program Files\VIA
2010-09-21 22:36:54 ----D---- C:\WINDOWS\system32\drivers
2010-09-21 22:32:43 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-19 18:35:48 ----D---- C:\Program Files\Google
2010-09-17 14:00:57 ----D---- C:\Program Files\Mozilla Firefox
2010-09-17 11:32:20 ----HD---- C:\WINDOWS\inf
2010-09-17 01:39:31 ----D---- C:\WINDOWS\Help
2010-09-15 21:01:56 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-15 20:38:56 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-15 20:38:55 ----A---- C:\WINDOWS\imsins.BAK
2010-09-15 20:38:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-09-15 20:37:09 ----A---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 a347bus;a347bus; C:\WINDOWS\system32\DRIVERS\a347bus.sys [2004-04-30 160640]
R0 a347scsi;a347scsi; C:\WINDOWS\System32\Drivers\a347scsi.sys [2004-04-30 5248]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-31 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-06-03 691696]
R1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-03 4605952]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-08-19 100368]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-07-27 44032]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-09-30 1418368]
S3 catchme;catchme; \??\C:\DOCUME~1\Kubino\LOCALS~1\Temp\catchme.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-06-25 25280]
S3 npkcrypt;npkcrypt; \??\D:\HRY\lineage2 low rate\system\npkcrypt.sys []
S3 npkycryp;npkycryp; \??\D:\HRY\Lineage II\system\npkycryp.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-03 602112]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 AODService;AODService; C:\Program Files\AMD\OverDrive\AODAssist.exe [2009-05-05 124256]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-17 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-06-22 208896]
S3 nosGetPlusHelper;getPlus(R) Helper 3004; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Re: len kontrola
Zdravim a pekny den preji
Stahnete na plochu CKScanner
Tuhle adresu znate http://www.maxiwe.com
Jsou s PC nejake problemy 


- Spustte a kliknete na Search for files
- Po dokonceni skenu kliknete na Save List to File a nasledne OK
- Na plose se Vam vytvori log s nazvem ckfiles.txt, jeho obsah mi sem vlozte




Re: len kontrola
tiež prajem dobrý deň 
1., stránku uvedenú hore nepoznám...
2., mám dojem že v PC je neaký vir ktorý mi spomaluje net
po polhodine spusteného programu neuveriteľne dlhý log

1., stránku uvedenú hore nepoznám...
2., mám dojem že v PC je neaký vir ktorý mi spomaluje net
po polhodine spusteného programu neuveriteľne dlhý log
Kód: Vybrat vše
CKScanner - Additional Security Risks - These are not necessarily bad
scanner sequence 3.MN.11
----- EOF -----
Re: len kontrola




- Vyskoci na Vas okenko, do ktereho zkopirujte text nize
Kód: Vybrat vše
services.msc
- Kliknete na OK
- Najdete sluzby nize
- Služba Google Update
Java Quick Starter
NBService - U kazde provedte toto
- Klik na ni pravym mysidlem a zvolit Vlastnosti
- Nyní klik na Zastavit
- Typ spousteni nastavit na Zakazano
- Potvrdte kliknutim na OK

- HJT najdete zde C:\Program Files\trend micro\Kubino.exe
- Otevre se Vam okno, kliknete na Do a system scan only
- V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
- R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.maxiwe.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.maxiwe.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.maxiwe.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.maxiwe.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip - Kliknete na Fix checked (vlevo dole)
- HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo

- Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
- Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize
Kód: Vybrat vše
:services catchme :reg [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"=- "Adobe Reader Speed Launcher"=- "Adobe ARM"=- "NeroFilterCheck"=- "WinampAgent"=- "DivXUpdate"=- "KernelFaultCheck"=- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Uninstall Adobe Download Manager"=- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=- "uTorrent"=- "DriverScanner"=- :files C:\DOCUME~1\Kubino\LOCALS~1\Temp C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job %windir%\system32\*.tmp.dll /s %windir%\system32\SET*.tmp /s %windir%\*.tmp /s :commands [RESETHOSTS] [EMPTYTEMP] [EMPTYFLASH] [CLEARALLRESTOREPOINTS]
- Kliknete na cervene tlacitko MoveIt!
- Sem pote dejte obsah okna Results (pod zelenou carou)
- Pokud budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles
Re: len kontrola
tu je log
Kód: Vybrat vše
All processes killed
========== SERVICES/DRIVERS ==========
Service catchme stopped successfully!
Service catchme deleted successfully!
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NeroFilterCheck deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WinampAgent deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DivXUpdate deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall Adobe Download Manager not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DriverScanner deleted successfully.
========== FILES ==========
C:\DOCUME~1\Kubino\LOCALS~1\Temp\{ECD61B2A-69B5-4C0D-834F-05BA07ACFE80}\{BDA825AD-D60B-4935-9590-B0F1AC2E0D22} folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\{ECD61B2A-69B5-4C0D-834F-05BA07ACFE80} folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-9 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-8 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-7 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-6 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-5 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-4 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-3 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-2 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-11 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-10 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp-1 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\plugtmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\OIS\temp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\OIS\cacheFiles folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\OIS folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\msohtmlclip1\01 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\msohtmlclip1 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\is-2MGDH.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\hsperfdata_Kubino folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\FA.dir folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divFF.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divFE.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divFD.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divFC.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divFB.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divFA.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF9.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF8.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF7.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF6.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF5.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF4.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF3.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF2.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF1.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF0.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divF.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divEF.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divEE.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divED.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divEC.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divEB.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divEA.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE9.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE8.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE7.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE6.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE5.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE4.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE3.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE2.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE1.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE0.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divE.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divDF.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divDE.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divDD.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divDC.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divDB.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divDA.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD9.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD8.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD7.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD6.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD5.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD4.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD3.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD2.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD1.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD0.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divD.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divCF.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divCE.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divCD.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divCC.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divCB.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divCA.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC9.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC8.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC7.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC6.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC5.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC4.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC3.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC2.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC1.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC0.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divC.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divBF.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divBE.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divBD.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divBC.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divBB.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divBA.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB9.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB8.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB7.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB6.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB5.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB4.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB3.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB2.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB1.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB0.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divB.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divAF.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divAE.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divAD.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divAC.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divAB.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divAA.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA9.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA8.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA7.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA6.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA5.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA4.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA3.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA2.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA1.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA0.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\divA.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div9F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div9E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div9D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div9C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div9B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div9A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div99.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div98.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div97.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div96.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div95.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div94.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div93.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div92.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div91.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div90.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div9.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div8F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div8E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div8D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div8C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div8B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div8A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div89.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div88.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div87.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div86.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div85.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div84.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div83.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div82.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div81.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div80.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div8.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div7F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div7E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div7D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div7C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div7B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div7A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div79.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div78.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div77.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div76.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div75.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div74.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div73.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div72.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div71.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div70.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div7.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div6F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div6E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div6D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div6C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div6B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div6A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div69.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div68.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div67.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div66.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div65.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div64.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div63.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div62.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div61.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div60.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div6.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div5F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div5E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div5D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div5C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div5B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div5A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div59.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div58.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div57.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div56.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div55.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div54.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div53.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div52.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div51.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div50.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div5.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div4F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div4E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div4D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div4C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div4B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div4A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div49.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div48.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div47.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div46.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div45.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div44.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div43.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div42.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div41.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div40.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div4.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div3F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div3E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div3D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div3C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div3B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div3A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div39.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div38.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div37.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div36.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div35.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div34.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div33.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div32.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div31.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div30.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div3.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div2F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div2E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div2D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div2C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div2B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div2A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div29.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div28.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div27.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div26.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div25.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div24.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div23.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div22.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div21.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div20.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div2.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div1F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div1E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div1D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div1C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div1B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div1A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div19.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div18.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div17.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div16.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div15.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div14.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div13.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div12.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div11F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div11E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div11D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div11C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div11B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div11A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div119.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div118.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div117.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div116.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div115.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div114.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div113.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div112.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div111.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div110.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div11.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div10F.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div10E.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div10D.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div10C.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div10B.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div10A.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div109.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div108.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div107.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div106.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div105.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div104.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div103.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div102.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div101.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div100.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\div10.tmp folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\ct1601497\searchplugin folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\ct1601497\META-INF folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\ct1601497\lib folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\ct1601497\defaults folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\ct1601497\components folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\ct1601497\chrome folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\ct1601497 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\comtypes_cache\ds_track_install-26 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\comtypes_cache\ds_move_serial-26 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\comtypes_cache\driverscanner-26 folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp\comtypes_cache folder moved successfully.
C:\DOCUME~1\Kubino\LOCALS~1\Temp folder moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1B1.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP26A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP296.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP347.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP370.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP47.tmp folder moved successfully.
C:\WINDOWS\Temp\is135.tmp moved successfully.
C:\WINDOWS\Temp\is137.tmp moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Kubino
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 162481721 bytes
->Java cache emptied: 17930091 bytes
->FireFox cache emptied: 111853886 bytes
->Flash cache emptied: 50693 bytes
User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 32902 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 41552050 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 319.00 mb
Restore points cleared and new OTM Restore Point set!
OTM by OldTimer - Version 3.1.16.1 log created on 09272010_231934
Files moved on Reboot...
Registry entries deleted on Reboot...
Re: len kontrola



Re: len kontrola
sory to som nevedel
PC sa mi zdá v pohode
uvidím čo to povie po čase 

PC sa mi zdá v pohode


Re: len kontrola

- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC




- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte

Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy

Re: len kontrola
tak sme sa nakoniec dohodli 
tu je slubovaný log
Logfile of random's system information tool 1.08 (written by random/random)
Run by Kubino at 2010-09-28 19:12:50
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 76 GB (76%) free of 100 GB
Total RAM: 3327 MB (82% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:12:52, on 28. 9. 2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\msiexec.exe
D:\mozila stiahnuté\RSIT.exe
C:\Program Files\trend micro\Kubino.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: 78.46.57.211 l2authd.lineage2.com
O1 - Hosts: 78.46.57.211 l2testauthd.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AODService - Unknown owner - C:\Program Files\AMD\OverDrive\AODAssist.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
--
End of file - 4565 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-03 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-05-03 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-10-09 33677312]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-03 98304]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-04-11 319792]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-03 159744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"D:\HRY\Activision\Call of Duty - World at War\CoDWaWmp.exe"="D:\HRY\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"D:\HRY\Activision\Call of Duty - World at War\CoDWaW.exe"="D:\HRY\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\HRY\Ubisoft\Far Cry 2\bin\FarCry2.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2"
"D:\HRY\Ubisoft\Far Cry 2\bin\FC2Launcher.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"
"D:\HRY\Ubisoft\Far Cry 2\bin\FC2Editor.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editor"
"D:\HRY\Valve\hl.exe"="D:\HRY\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"D:\HRY\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="D:\HRY\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"D:\HRY\Microsoft Games\Motocross Madness 2\MCM2.EXE"="D:\HRY\Microsoft Games\Motocross Madness 2\MCM2.EXE:*:Enabled:Microsoft® Motocross Madness 2"
"D:\HRY\MotoGP 08\Launcher.exe"="D:\HRY\MotoGP 08\Launcher.exe:*:Enabled:MotoGP 08"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"D:\HRY\Valve\hlds.exe"="D:\HRY\Valve\hlds.exe:*:Enabled:HLDS Launcher"
"D:\HRY\MotoGP2\motogp2.exe"="D:\HRY\MotoGP2\motogp2.exe:*:Enabled:motogp2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2010-09-28 19:12:50 ----D---- C:\rsit
2010-09-28 19:05:21 ----D---- C:\Program Files\CCleaner
2010-09-28 00:00:39 ----A---- C:\WINDOWS\system32\npptNT2.sys
2010-09-21 22:32:39 ----D---- C:\Documents and Settings\Kubino\Data aplikací\Uniblue
2010-09-15 20:38:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-09-15 20:38:53 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-09-15 20:38:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-09-15 20:38:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-09-15 20:38:25 ----HDC---- C:\WINDOWS\$NtUninstallKB982802$
2010-09-15 20:38:03 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-09-15 20:37:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
======List of files/folders modified in the last 1 months======
2010-09-28 19:12:52 ----D---- C:\Program Files\trend micro
2010-09-28 19:12:25 ----D---- C:\Documents and Settings\Kubino\Data aplikací\uTorrent
2010-09-28 19:10:47 ----RD---- C:\Program Files
2010-09-28 19:10:47 ----D---- C:\WINDOWS\Prefetch
2010-09-28 19:10:28 ----D---- C:\Program Files\3GPplayer2010
2010-09-28 19:10:17 ----HD---- C:\WINDOWS\inf
2010-09-28 19:10:17 ----D---- C:\WINDOWS\system32\drivers
2010-09-28 19:10:17 ----D---- C:\WINDOWS
2010-09-28 19:10:16 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-28 19:10:09 ----SHD---- C:\WINDOWS\Installer
2010-09-28 19:07:36 ----D---- C:\WINDOWS\Minidump
2010-09-28 19:07:36 ----D---- C:\WINDOWS\Debug
2010-09-28 19:06:12 ----D---- C:\WINDOWS\system32
2010-09-28 19:06:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-28 19:02:17 ----D---- C:\WINDOWS\Temp
2010-09-28 19:01:25 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-09-28 18:58:31 ----D---- C:\Documents and Settings\Kubino\Data aplikací\Skype
2010-09-28 18:52:09 ----D---- C:\Documents and Settings\Kubino\Data aplikací\skypePM
2010-09-27 23:52:05 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-27 23:51:03 ----A---- C:\WINDOWS\NeroDigital.ini
2010-09-27 23:20:36 ----D---- C:\WINDOWS\system32\Restore
2010-09-27 23:19:54 ----D---- C:\WINDOWS\system32\drivers\etc
2010-09-27 23:19:42 ----SD---- C:\WINDOWS\Tasks
2010-09-27 13:08:28 ----D---- C:\Program Files\Mozilla Firefox
2010-09-24 15:43:19 ----D---- C:\WINDOWS\system32\config
2010-09-21 22:38:49 ----D---- C:\Program Files\Reganam
2010-09-21 22:36:58 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-21 22:36:57 ----D---- C:\Program Files\VIA
2010-09-19 18:35:48 ----D---- C:\Program Files\Google
2010-09-17 01:39:31 ----D---- C:\WINDOWS\Help
2010-09-15 20:38:56 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-15 20:38:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-09-15 20:37:09 ----A---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-31 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-06-03 691696]
R1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-03 4605952]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-08-19 100368]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-07-27 44032]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-09-30 1418368]
R4 a347bus;a347bus; C:\WINDOWS\system32\DRIVERS\a347bus.sys []
R4 a347scsi;a347scsi; C:\WINDOWS\System32\Drivers\a347scsi.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-06-25 25280]
S3 npkcrypt;npkcrypt; \??\D:\HRY\lineage2 low rate\system\npkcrypt.sys []
S3 npkycryp;npkycryp; \??\D:\HRY\Lineage II\system\npkycryp.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-03 602112]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 AODService;AODService; C:\Program Files\AMD\OverDrive\AODAssist.exe [2009-05-05 124256]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-17 136176]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
S4 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-06-22 208896]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------

tu je slubovaný log
Logfile of random's system information tool 1.08 (written by random/random)
Run by Kubino at 2010-09-28 19:12:50
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 76 GB (76%) free of 100 GB
Total RAM: 3327 MB (82% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:12:52, on 28. 9. 2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\msiexec.exe
D:\mozila stiahnuté\RSIT.exe
C:\Program Files\trend micro\Kubino.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: 78.46.57.211 l2authd.lineage2.com
O1 - Hosts: 78.46.57.211 l2testauthd.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AODService - Unknown owner - C:\Program Files\AMD\OverDrive\AODAssist.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
--
End of file - 4565 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-03 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-05-03 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-10-09 33677312]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-03 98304]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-04-11 319792]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-03 159744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"D:\HRY\Activision\Call of Duty - World at War\CoDWaWmp.exe"="D:\HRY\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"D:\HRY\Activision\Call of Duty - World at War\CoDWaW.exe"="D:\HRY\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\HRY\Ubisoft\Far Cry 2\bin\FarCry2.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2"
"D:\HRY\Ubisoft\Far Cry 2\bin\FC2Launcher.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"
"D:\HRY\Ubisoft\Far Cry 2\bin\FC2Editor.exe"="D:\HRY\Ubisoft\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editor"
"D:\HRY\Valve\hl.exe"="D:\HRY\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"D:\HRY\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="D:\HRY\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"D:\HRY\Microsoft Games\Motocross Madness 2\MCM2.EXE"="D:\HRY\Microsoft Games\Motocross Madness 2\MCM2.EXE:*:Enabled:Microsoft® Motocross Madness 2"
"D:\HRY\MotoGP 08\Launcher.exe"="D:\HRY\MotoGP 08\Launcher.exe:*:Enabled:MotoGP 08"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"D:\HRY\Valve\hlds.exe"="D:\HRY\Valve\hlds.exe:*:Enabled:HLDS Launcher"
"D:\HRY\MotoGP2\motogp2.exe"="D:\HRY\MotoGP2\motogp2.exe:*:Enabled:motogp2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2010-09-28 19:12:50 ----D---- C:\rsit
2010-09-28 19:05:21 ----D---- C:\Program Files\CCleaner
2010-09-28 00:00:39 ----A---- C:\WINDOWS\system32\npptNT2.sys
2010-09-21 22:32:39 ----D---- C:\Documents and Settings\Kubino\Data aplikací\Uniblue
2010-09-15 20:38:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-09-15 20:38:53 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-09-15 20:38:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-09-15 20:38:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-09-15 20:38:25 ----HDC---- C:\WINDOWS\$NtUninstallKB982802$
2010-09-15 20:38:03 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-09-15 20:37:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
======List of files/folders modified in the last 1 months======
2010-09-28 19:12:52 ----D---- C:\Program Files\trend micro
2010-09-28 19:12:25 ----D---- C:\Documents and Settings\Kubino\Data aplikací\uTorrent
2010-09-28 19:10:47 ----RD---- C:\Program Files
2010-09-28 19:10:47 ----D---- C:\WINDOWS\Prefetch
2010-09-28 19:10:28 ----D---- C:\Program Files\3GPplayer2010
2010-09-28 19:10:17 ----HD---- C:\WINDOWS\inf
2010-09-28 19:10:17 ----D---- C:\WINDOWS\system32\drivers
2010-09-28 19:10:17 ----D---- C:\WINDOWS
2010-09-28 19:10:16 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-28 19:10:09 ----SHD---- C:\WINDOWS\Installer
2010-09-28 19:07:36 ----D---- C:\WINDOWS\Minidump
2010-09-28 19:07:36 ----D---- C:\WINDOWS\Debug
2010-09-28 19:06:12 ----D---- C:\WINDOWS\system32
2010-09-28 19:06:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-28 19:02:17 ----D---- C:\WINDOWS\Temp
2010-09-28 19:01:25 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-09-28 18:58:31 ----D---- C:\Documents and Settings\Kubino\Data aplikací\Skype
2010-09-28 18:52:09 ----D---- C:\Documents and Settings\Kubino\Data aplikací\skypePM
2010-09-27 23:52:05 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-27 23:51:03 ----A---- C:\WINDOWS\NeroDigital.ini
2010-09-27 23:20:36 ----D---- C:\WINDOWS\system32\Restore
2010-09-27 23:19:54 ----D---- C:\WINDOWS\system32\drivers\etc
2010-09-27 23:19:42 ----SD---- C:\WINDOWS\Tasks
2010-09-27 13:08:28 ----D---- C:\Program Files\Mozilla Firefox
2010-09-24 15:43:19 ----D---- C:\WINDOWS\system32\config
2010-09-21 22:38:49 ----D---- C:\Program Files\Reganam
2010-09-21 22:36:58 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-21 22:36:57 ----D---- C:\Program Files\VIA
2010-09-19 18:35:48 ----D---- C:\Program Files\Google
2010-09-17 01:39:31 ----D---- C:\WINDOWS\Help
2010-09-15 20:38:56 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-15 20:38:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-09-15 20:37:09 ----A---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-31 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-06-03 691696]
R1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-03 4605952]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-08-19 100368]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-07-27 44032]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-09-30 1418368]
R4 a347bus;a347bus; C:\WINDOWS\system32\DRIVERS\a347bus.sys []
R4 a347scsi;a347scsi; C:\WINDOWS\System32\Drivers\a347scsi.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-06-25 25280]
S3 npkcrypt;npkcrypt; \??\D:\HRY\lineage2 low rate\system\npkcrypt.sys []
S3 npkycryp;npkycryp; \??\D:\HRY\Lineage II\system\npkycryp.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-03 602112]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 AODService;AODService; C:\Program Files\AMD\OverDrive\AODAssist.exe [2009-05-05 124256]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-17 136176]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
S4 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-06-22 208896]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Re: len kontrola

- HJT najdete zde C:\Program Files\trend micro\Kubino.exe
- Otevre se Vam okno, kliknete na Do a system scan only
- V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
- O1 - Hosts: 78.46.57.211 l2authd.lineage2.com
O1 - Hosts: 78.46.57.211 l2testauthd.com - Kliknete na Fix checked (vlevo dole)
- HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo

- Aktualizaci najdete zde (pod tlacitkem "Ke stazeni") http://www.microsoft.com/cze/windows/internet-explorer/
- Doporucuji vsak pouzivat alternativni prohlizece - vice zde http://www.viry.cz/forum/viewtopic.php?f=19&t=6116



Re: len kontrola
IE som použil len na stiahnutie mozily....
PS klinta používam na posielanie dát dávam si pozor na to čo stahujem
takze v hosts- som fixnul tie dve IP-adresy myslel som že sa nenalogujem do databáze ale šlo mi to aj bez nich takže teraz by to malo už byť všetko? ak áno dakujem pekne hádam budete mať za každého komu pomožete jeden pekný deň
PS klinta používam na posielanie dát dávam si pozor na to čo stahujem
takze v hosts- som fixnul tie dve IP-adresy myslel som že sa nenalogujem do databáze ale šlo mi to aj bez nich takže teraz by to malo už byť všetko? ak áno dakujem pekne hádam budete mať za každého komu pomožete jeden pekný deň

Re: len kontrola
Nemate zac, rad jsem pomohl
Zase nekdy 

