prosím o kontrolu

[out_of_space]

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll nvata.sys
kernel: MBR read successfully
user & kernel MBR OK

[vyosek]

Takze nesrovnalosti v logach z mbr a gmeru delal ten StarForce - vyuzival rootkit techniky

StarForce muzete dat zpatky

Jelikoz byly problemy s tim odinstalovani Deamona, tak doporucuji kompletni preinstalovani

Jak se chova PC, muzeme uklizet po utilitach

[out_of_space]

Daemon jsem přeinstaloval, jinak PC vypadá v pořádku

[vyosek]

Odinstalujte Combofix

• Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
• Napiste ComboFix /Uninstall
• Stisknete Enter
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Havet se usadila v bodech obnoveni - smazte je dle navodu kolegy riffa http://www.viry.cz/forum/viewtopic.php?f=11&t=47040

MBAM muzete odinstalovat nebo nechat na obcasny sken - v pripade nalezu velmi doporucuji dat sem log na posouzeni, at si neodstrelite neco legitimniho

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Vlozte novy log ze RSIT

[out_of_space]

Vše provedeno

log z RSIT:

Logfile of random's system information tool 1.08 (written by random/random)
Run by James at 2010-10-03 21:25:44
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 21 GB (21%) free of 100 GB
Total RAM: 3070 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:27:53, on 3.10.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\SYSTEM32\astsrv.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\GIGABYTE\Gamer HUD\HUD.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\James\Plocha\RSIT.exe
C:\Program Files\trend micro\James.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O2 - BHO: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GrooveShellExtensions.dll
O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O3 - Toolbar: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll
O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - Startup: GIGABYTE Gamer HUD.lnk = C:\Program Files\GIGABYTE\Gamer HUD\HUD.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 4387342375
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\WINDOWS\SYSTEM32\astsrv.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - D:\hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 10592 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Automatic troubleshooting.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-05-12 50376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2010-01-17 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]
ZoneAlarm Toolbar - C:\Program Files\ZoneAlarm\tbZone.dll [2010-05-09 2517088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GrooveShellExtensions.dll [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Security Engine Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2010-05-18 591336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2010-01-17 520192]
{66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - ZoneAlarm Toolbar - C:\Program Files\ZoneAlarm\tbZone.dll [2010-05-09 2517088]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2010-05-18 591336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nTrayFw"=C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe [2005-12-21 270336]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2010-05-20 1043968]
"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2010-05-18 730600]
"nwiz"=nwiz.exe /installquiet []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-07-08 86016]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-07-08 13762560]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

C:\Documents and Settings\James\Nabídka Start\Programy\Po spuštění
GIGABYTE Gamer HUD.lnk - C:\Program Files\GIGABYTE\Gamer HUD\HUD.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WBSrv]
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll [2010-06-07 214320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GrooveShellExtensions.dll [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=0
"SynchronousUserGroupPolicy"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSMBalloonTip"=1
"NoDriveTypeAutoRun"=323
"MemCheckBoxInRunDlg"=0
"NoAutoTrayNotify"=0
"NoResolveTrack"=0
"NoResolveSearch"=1
"NoWelcomeScreen"=1
"NoRecentDocsNetHood"=1
"NoDesktopCleanupWizard"=1
"NoSharedDocuments"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoStrCmpLogical"=1
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"D:\hry\Painkiller Overdose\Bin\Overdose.exe"="D:\hry\Painkiller Overdose\Bin\Overdose.exe:*:Enabled:Painkiller Overdose"
"D:\hry\Painkiller Overdose\Bin\OverdoseEditor.exe"="D:\hry\Painkiller Overdose\Bin\OverdoseEditor.exe:*:Enabled:Painkiller Overdose Editor"
"D:\hry\Painkiller Overdose\Bin\OverdoseServer.exe"="D:\hry\Painkiller Overdose\Bin\OverdoseServer.exe:*:Enabled:Painkiller Overdose Console Server"
"D:\hry\Heroes of Might and Magic V\bin\H5_Game.exe"="D:\hry\Heroes of Might and Magic V\bin\H5_Game.exe:*:Enabled:Heroes of Might and Magic V"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\hry\Prince of Persia\Prince of Persia.exe"="D:\hry\Prince of Persia\Prince of Persia.exe:*:Enabled:Prince of Persia Dx"
"D:\hry\Prince of Persia\PrinceOfPersia_Launcher.exe"="D:\hry\Prince of Persia\PrinceOfPersia_Launcher.exe:*:Enabled:Prince of Persia Update"
"D:\hry\racedriver GRID\GRID.exe"="D:\hry\racedriver GRID\GRID.exe:*:Enabled:GRID"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\hry\Warcraft 3\Warcraft III\Warcraft III.exe"="D:\hry\Warcraft 3\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"D:\hry\hellgate\Launcher.exe"="D:\hry\hellgate\Launcher.exe:*:Enabled:Hellgate: London"
"D:\hry\hawx\H.A.W.X\HAWX.exe"="D:\hry\hawx\H.A.W.X\HAWX.exe:*:Disabled:HAWX"
"D:\hry\left4dead\left4dead.exe"="D:\hry\left4dead\left4dead.exe:*:Enabled:left4dead"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"D:\hry\Dragon Age\bin_ship\daorigins.exe"="D:\hry\Dragon Age\bin_ship\daorigins.exe:*:Enabled:Dragon Age Origins Game"
"D:\hry\Dragon Age\DAOriginsLauncher.exe"="D:\hry\Dragon Age\DAOriginsLauncher.exe:*:Enabled:Dragon Age Origins Launcher"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"D:\hry\COD4\iw3mp.exe"="D:\hry\COD4\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"D:\hry\Sins of a Solar Empire\Sins of a Solar Empire.exe"="D:\hry\Sins of a Solar Empire\Sins of a Solar Empire.exe:*:Enabled:Sins of a Solar Empire"
"D:\hry\dirt2\dirt2_game.exe"="D:\hry\dirt2\dirt2_game.exe:*:Enabled:DiRT2"
"D:\hry\avatar\bin\Avatar.exe"="D:\hry\avatar\bin\Avatar.exe:*:Enabled:James Cameron's AVATAR(tm): THE GAME"
"D:\hry\avatar\bin\AvatarLauncher.exe"="D:\hry\avatar\bin\AvatarLauncher.exe:*:Enabled:Updater"
"D:\hry\Dragon Age\bin_ship\daupdatersvc.service.exe"="D:\hry\Dragon Age\bin_ship\daupdatersvc.service.exe:*:Enabled:Dragon Age Origins Updater"
"D:\hry\assassins creed\AssassinsCreed_Dx9.exe"="D:\hry\assassins creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"D:\hry\assassins creed\AssassinsCreed_Dx10.exe"="D:\hry\assassins creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
"D:\hry\assassins creed\AssassinsCreed_Launcher.exe"="D:\hry\assassins creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
"D:\hry\bf bc2\BFBC2Updater.exe"="D:\hry\bf bc2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"D:\hry\gta4\Rockstar Games Social Club\RGSCLauncher.exe"="D:\hry\gta4\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"D:\hry\gta4\Grand Theft Auto IV\LaunchGTAIV.exe"="D:\hry\gta4\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"D:\hry\Mass Effect 2\Binaries\MassEffect2.exe"="D:\hry\Mass Effect 2\Binaries\MassEffect2.exe:*:Enabled:Mass Effect 2 Hra"
"D:\hry\Mass Effect 2\MassEffect2Launcher.exe"="D:\hry\Mass Effect 2\MassEffect2Launcher.exe:*:Enabled:Mass Effect 2 Spustit"
"D:\hry\Alpha protocol\Binaries\APGame.exe"="D:\hry\Alpha protocol\Binaries\APGame.exe:*:Enabled:Alpha Protocol"
"C:\WINDOWS\system32\ZoneLabs\vsmon.exe"="C:\WINDOWS\system32\ZoneLabs\vsmon.exe:*:Enabled:vsmon"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Mozilla Firefox"
"D:\hry\singularity\Binaries\Singularity.exe"="D:\hry\singularity\Binaries\Singularity.exe:*:Enabled:Singularity"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-10-03 21:25:44 ----D---- C:\rsit
2010-10-03 21:17:51 ----A---- C:\WINDOWS\ntbtlog.txt
2010-10-03 20:47:05 ----RD---- C:\32788R22FWJFW
2010-10-02 12:49:29 ----SHD---- C:\RECYCLER
2010-10-02 10:48:15 ----D---- C:\Documents and Settings\James\Data aplikací\Malwarebytes
2010-10-02 10:48:07 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-10-02 10:48:05 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-10-02 10:48:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-10-02 10:48:05 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-10-02 08:54:35 ----A---- C:\Boot.bak
2010-10-02 08:54:29 ----RASHD---- C:\cmdcons
2010-10-01 13:31:55 ----D---- C:\Program Files\trend micro
2010-09-29 08:32:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$
2010-09-26 20:15:54 ----A---- C:\WINDOWS\system32\wbsys.dll
2010-09-23 18:53:26 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\{9A4E21A0-83F7-4E3F-8A2D-BA379A5A8EBB}
2010-09-19 10:34:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-09-19 00:21:36 ----D---- C:\Program Files\NexusFont
2010-09-17 07:47:48 ----A---- C:\WINDOWS\system32\MRT.exe
2010-09-16 15:58:58 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-09-16 15:58:18 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-09-16 15:58:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-09-15 22:57:12 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-09-15 22:57:05 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-09-15 22:56:59 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-09-15 22:56:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-09-15 22:56:46 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-09-15 22:56:34 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-09-15 22:56:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-09-15 22:56:23 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-09-15 22:56:16 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-09-15 22:56:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-09-15 22:56:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-09-15 22:55:59 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-09-15 22:55:51 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-09-15 22:55:44 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-09-15 22:55:38 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-09-15 22:55:31 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-09-15 22:55:25 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-09-15 22:55:18 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-09-15 22:55:13 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-09-15 22:55:06 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-09-15 22:54:59 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-09-15 22:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-09-15 22:54:45 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-09-15 22:54:37 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-09-15 22:54:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-09-15 22:54:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-09-15 22:54:17 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-09-15 22:54:10 ----HDC---- C:\WINDOWS\$NtUninstallKB982802$
2010-09-15 22:54:03 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-09-15 22:51:34 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-09-15 22:51:27 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-09-15 22:51:21 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-09-15 22:51:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2160329$
2010-09-15 22:51:04 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-09-15 22:50:58 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2010-09-15 22:50:53 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-09-15 22:50:48 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-09-15 22:50:42 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-09-15 22:50:37 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-09-15 22:50:31 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-09-15 22:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2010-09-15 22:50:12 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-09-15 22:49:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-09-15 22:49:51 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-09-15 22:49:42 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-09-15 22:49:36 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-09-15 22:49:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-09-15 22:49:22 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-09-15 22:49:17 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-09-15 22:49:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-09-15 22:49:06 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-09-15 22:49:00 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-09-15 22:48:55 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-09-15 22:48:49 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-09-15 22:48:38 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-09-15 22:37:32 ----D---- C:\Documents and Settings\James\Data aplikací\CheckPoint
2010-09-15 22:36:54 ----D---- C:\Program Files\ZoneAlarm
2010-09-15 22:36:54 ----D---- C:\Program Files\Conduit
2010-09-15 22:35:38 ----D---- C:\Program Files\CheckPoint
2010-09-15 22:35:36 ----A---- C:\WINDOWS\system32\vsregexp.dll
2010-09-15 22:35:35 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2010-09-15 22:35:35 ----A---- C:\WINDOWS\system32\zlcomm.dll
2010-09-15 22:35:33 ----A---- C:\WINDOWS\system32\vswmi.dll
2010-09-15 22:35:32 ----A---- C:\WINDOWS\system32\zpeng25.dll
2010-09-15 22:35:32 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2010-09-15 22:35:31 ----A---- C:\WINDOWS\system32\vsdatant.sys
2010-09-15 22:35:12 ----A---- C:\WINDOWS\system32\vsutil.dll
2010-09-15 22:35:12 ----A---- C:\WINDOWS\system32\vsinit.dll
2010-09-15 19:51:07 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-09-13 21:44:44 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-09-13 21:44:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-09-13 21:44:33 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-09-13 21:44:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-09-13 21:44:04 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-09-13 21:43:59 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-09-13 21:43:55 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-09-13 21:43:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-09-13 21:43:38 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-09-13 21:41:30 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-09-13 21:41:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-09-13 21:41:21 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-09-13 21:41:14 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-09-13 21:41:08 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-09-13 21:41:03 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-09-13 21:40:59 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2010-09-13 21:40:43 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2010-09-13 21:40:38 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-09-13 21:40:29 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-09-13 19:57:21 ----D---- C:\Documents and Settings\James\Data aplikací\CBS Interactive
2010-09-13 19:33:55 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2010-09-13 18:21:57 ----D---- C:\Program Files\ImageShack Uploader
2010-09-13 17:03:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-09-13 17:03:30 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-09-13 17:03:23 ----D---- C:\WINDOWS\ie8updates
2010-09-13 17:03:17 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-09-13 17:00:55 ----D---- C:\Program Files\MSXML 4.0
2010-09-13 17:00:37 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2010-09-13 17:00:24 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-09-13 16:47:41 ----D---- C:\Program Files\NOS
2010-09-13 16:47:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2010-09-13 16:34:49 ----D---- C:\WINDOWS\system32\NtmsData
2010-09-13 16:34:14 ----D---- C:\Documents and Settings\James\Data aplikací\Avira
2010-09-13 16:32:31 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2010-09-13 16:32:30 ----D---- C:\Program Files\Avira
2010-09-13 16:32:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2010-09-13 16:32:30 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2010-09-13 16:32:30 ----A---- C:\WINDOWS\system32\drivers\avgntmgr.sys
2010-09-13 16:32:30 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2010-09-13 16:32:30 ----A---- C:\WINDOWS\system32\drivers\avgntdd.sys
2010-09-13 16:19:40 ----D---- C:\WINDOWS\system32\PreInstall
2010-09-13 16:19:38 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-09-13 16:19:38 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-13 16:19:36 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-09-13 16:16:42 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-09-13 16:16:42 ----A---- C:\WINDOWS\system32\wups2.dll
2010-09-13 16:16:42 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2010-09-13 16:16:42 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2010-09-13 16:16:42 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2010-09-13 15:35:38 ----D---- C:\Documents and Settings\James\Data aplikací\Mozilla
2010-09-13 15:33:56 ----D---- C:\Program Files\Mozilla Firefox
2010-09-13 14:07:15 ----D---- C:\Documents and Settings\James\Data aplikací\Motive
2010-09-13 14:06:54 ----D---- C:\Program Files\Common Files\Motive
2010-09-13 14:06:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Motive
2010-09-04 12:01:28 ----D---- C:\Program Files\directx

======List of files/folders modified in the last 1 months======

2010-10-03 21:26:08 ----D---- C:\WINDOWS\Prefetch
2010-10-03 21:25:55 ----D---- C:\WINDOWS\Internet Logs
2010-10-03 21:22:57 ----D---- C:\WINDOWS\Temp
2010-10-03 21:21:04 ----D---- C:\WINDOWS\system32\CatRoot2
2010-10-03 21:18:52 ----D---- C:\WINDOWS\system32
2010-10-03 21:18:52 ----AD---- C:\WINDOWS
2010-10-03 21:16:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-10-03 21:04:40 ----D---- C:\WINDOWS\Debug
2010-10-03 20:55:57 ----SHD---- C:\System Volume Information
2010-10-03 20:55:57 ----D---- C:\WINDOWS\system32\Restore
2010-10-03 20:28:01 ----D---- C:\Program Files\DAEMON Tools Lite
2010-10-03 20:27:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2010-10-03 19:18:51 ----D---- C:\WINDOWS\system32\drivers
2010-10-03 18:28:11 ----D---- C:\Documents and Settings
2010-10-03 17:43:36 ----D---- C:\WINDOWS\Registration
2010-10-03 07:44:26 ----D---- C:\WINDOWS\Microsoft.NET
2010-10-03 07:44:10 ----RSD---- C:\WINDOWS\assembly
2010-10-02 15:41:34 ----SHD---- C:\WINDOWS\Installer
2010-10-02 15:41:34 ----D---- C:\Config.Msi
2010-10-02 15:40:56 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-02 15:40:36 ----D---- C:\WINDOWS\WinSxS
2010-10-02 10:48:05 ----RD---- C:\Program Files
2010-10-02 10:39:02 ----A---- C:\WINDOWS\system.ini
2010-10-02 10:38:40 ----D---- C:\WINDOWS\system32\drivers\etc
2010-10-02 10:36:17 ----D---- C:\WINDOWS\system32\config
2010-10-02 10:30:33 ----D---- C:\WINDOWS\AppPatch
2010-10-02 10:30:32 ----D---- C:\Program Files\Common Files
2010-10-02 08:54:36 ----RASH---- C:\boot.ini
2010-09-29 20:17:47 ----D---- C:\pracovní
2010-09-29 18:39:11 ----AC---- C:\WINDOWS\NeroDigital.ini
2010-09-29 08:32:36 ----HD---- C:\WINDOWS\inf
2010-09-28 18:05:04 ----AC---- C:\WINDOWS\win.ini
2010-09-26 21:26:19 ----D---- C:\Program Files\Apophysis 7x
2010-09-26 20:15:53 ----D---- C:\Program Files\Stardock
2010-09-19 20:51:56 ----D---- C:\WINDOWS\system32\en-us
2010-09-19 20:51:53 ----D---- C:\Program Files\Microsoft.NET
2010-09-18 00:15:30 ----D---- C:\Documents and Settings\James\Data aplikací\Bioshock2
2010-09-17 10:46:07 ----D---- C:\WINDOWS\Help
2010-09-17 10:45:28 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-17 10:45:10 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-09-17 10:44:57 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-09-17 10:44:01 ----D---- C:\NVIDIA
2010-09-17 09:15:57 ----D---- C:\Program Files\NVIDIA Corporation
2010-09-15 22:51:49 ----D---- C:\Program Files\Internet Explorer
2010-09-15 22:49:37 ----D---- C:\Program Files\Outlook Express
2010-09-15 22:37:32 ----D---- C:\WINDOWS\system32\ZoneLabs
2010-09-15 21:14:50 ----D---- C:\WINDOWS\system32\DirectX
2010-09-15 21:07:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-14 19:45:40 ----SD---- C:\WINDOWS\Tasks
2010-09-14 19:36:34 ----D---- C:\WINDOWS\system32\wbem
2010-09-13 21:44:13 ----D---- C:\WINDOWS\system32\CatRoot
2010-09-13 21:40:40 ----D---- C:\Program Files\Movie Maker
2010-09-13 19:37:20 ----D---- C:\WINDOWS\Network Diagnostic
2010-09-13 16:47:43 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-09-13 16:34:49 ----D---- C:\WINDOWS\repair
2010-09-13 16:16:46 ----D---- C:\WINDOWS\SoftwareDistribution
2010-09-13 15:15:07 ----SD---- C:\Documents and Settings\James\Data aplikací\Microsoft
2010-09-12 20:43:30 ----D---- C:\Documents and Settings\James\Data aplikací\vlc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-04-25 100736]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2008-11-20 43872]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-10-03 691696]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2006-10-18 12664]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2010-03-01 124784]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 NVTCP;NVIDIA TCP/IP Protocol Driver; C:\WINDOWS\System32\DRIVERS\NVTcp.sys [2006-04-15 101888]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2010-05-13 532224]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-08-16 279712]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2010-02-16 60936]
R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-08-16 25888]
R2 nxsIO32;NextSensor Kernel I/O Driver; \??\C:\WINDOWS\System32\DRIVERS\nxsIO32.sys []
R3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 c65013264;C-Media CM6501 Like Sound UDAX Interface; C:\WINDOWS\system32\drivers\c6501.sys [2007-07-10 1310720]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-07-08 7967712]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-04-15 34176]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-04-15 13056]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys []
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 abzv386c;abzv386c; C:\WINDOWS\system32\drivers\abzv386c.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 ultradfg;ultradfg; C:\WINDOWS\System32\DRIVERS\ultradfg.sys [2008-11-13 24576]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-01-15 29184]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-04-01 267432]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
R2 astcc;AST Service; C:\WINDOWS\SYSTEM32\astsrv.exe [2008-05-07 57344]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe [2005-12-21 139264]
R2 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2005-09-23 20543]
R2 IswSvc;ZoneAlarm Toolbar IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2010-05-18 493032]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2005-12-21 127035]
R2 nSvcLog;ForceWare user log service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2005-12-21 61503]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-07-08 168004]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-06-09 66872]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2009-10-30 1021256]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2010-05-20 2437176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater; D:\hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-12-15 25832]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-08-17 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-20 136120]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-09-20 382248]
S3 nosGetPlusHelper;getPlus(R) Helper 3004; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2009-11-29 435016]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[vyosek]

Kliknete na Start a pote Spustit, pripadne pouzijte klavesou zkratku Win+R

• Vyskoci na Vas okenko, do ktereho zkopirujte text nize

• Kód: Vybrat vše

  services.msc

• Kliknete na OK
• Najdete sluzby nize
• Google Updater Service
  Nero BackItUp Scheduler 3
• U kazde provedte toto
  • Klik na ni pravym mysidlem a zvolit Vlastnosti
  • Nyní klik na Zastavit
  • Typ spousteni nastavit na Zakazano
  • Potvrdte kliknutim na OK

Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy

Jinak log vypada v poradku

[out_of_space]

Děkuji za pomoc

[vyosek]

Nemate zac, rad jsem pomohl Zase nekdy