po rekonstrukcii pc prosim o kontrolu 2.cast pokracovanie

[radoslav]

Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x9 -removeonly
REALTEK Gigabit and Fast Ethernet NIC Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94FB906A-CF42-4128-A509-D353026A607E}\Setup.exe" -l0x1b REMOVE
Security Update for Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Skype™ 4.2-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Smart To-Do List 1.3 Trial-->C:\Program Files\Smart To-Do List\Uninstall.exe
Sony Ericsson PC Suite 6.011.00-->"C:\Program Files\InstallShield Installation Information\{2FFE93F0-BB72-4E52-8761-354D1AAA9387}\ISAdmin.exe" -runfromtemp -l0x0009 -removeonly
StrongDC++ 2.41-->"C:\Program Files\StrongDC++\uninstall.exe"
The KMPlayer (remove only)-->"C:\Program Files\The KMPlayer\uninstall.exe"
Wallery-->MsiExec.exe /I{faf0b65c-072b-4f7e-bd05-6a56f28d4233}
WinRAR-->C:\Program Files\WinRAR\uninstall.exe

======Security center information======

AV: avast! Antivirus

======System event log======

Computer Name: PENTAGON-4157CD
Event Code: 7000
Message: Spustenie služby Parallel port driver zlyhalo kvôli nasledujúcej chybe:
Služba sa nedá spustit, pretože je vypnutá, alebo nemá priradené žiadne zapnuté zariadenia.


Record Number: 152
Source Name: Service Control Manager
Time Written: 20070731000059.000000+120
Event Type: error
User:

Computer Name: PENTAGON-4157CD
Event Code: 20
Message: Ovládac tlaciarne EPSON SX110 Series pre Windows NT x86 Version-3 sa pridal alebo aktualizoval. Súbory:- E_FMAIFBE.DLL, E_FUICFBE.DLL, E_FVIFFBE.VIF, E_FHLDRFBE.CHM, E_FDSPFBE.DLL, E_FJBCFBE.DLL, E_FCONFBE.DLL, E_FAUDFBE.DLL, E_FAREFBE.DLL, E_FREDFBE.DLL, E_FUIRFBE.DLL, E_FUI1FBE.DLL, E_FUIXFBE.DLL, E_FUIXFBE.XML, E_FCF0FBE.CFG, E_FCF0FBE.DEV, E_FGRCFBE.DLL, E_FPRUFBE.DLL, E_FPREFBE.EXE, E_FPI1FBE.DAT, E_FLMWFBE.DLL, E_FLC1FBE.LMC, E_FLC2FBE.LMC, EPSET32.DLL, E_FHM0FBE.DLL, E_FMW0FBE.DLL, E_FHT0FBE.DLL, E_FSR0FBE.DLL, E_FHBRFBE.DLL, E_FHUTFBE.DLL, E_FHUTFBE.EXE, E_FHSRFBE.DLL, E_FBA6FBE.DLL, E_FBL6FBE.DLL, E_FBIDFBE.LMD, E_FBAPFBE.DLL, EBAPI4.DLL, EBPBIDI.DLL, E_FINSFBE.EXE, E_FINSFBE.DAT, E_FINSFBE.DLL, E_FARNFBE.EXE, E_FASKFBE.DLL, E_FAMTFBE.EXE, E_FAIRFBE.DLL, E_FAPRFBE.DLL, E_FATIFBE.EXE, E_FABRFBE.DLL, E_FASRFBE.DLL, E_FBCSFBE.EXE, E_FAIFFBE.DAT, E_FGEPFBE.DLL, E_FASOFBE.DLL, E_S40RP7.EXE, E_S40ST7.EXE, E_FHLIAFBE.CHM, EREGISTR.EXE, EREGISTR.CFG, E_DUPA30.EXE, E_DUPA3E.DLL.

Record Number: 54
Source Name: Print
Time Written: 20101024220512.000000+120
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: PENTAGON-4157CD
Event Code: 60055
Message: Inštalátor systému Windows pri inštalácii zistil nezávažnú chybu. Dalšie informácie sú v súbore setuperr.log, ktorý sa nachádza v adresári Windows.
Record Number: 5
Source Name: Setup
Time Written: 20101024211952.000000+120
Event Type: error
User:

Computer Name: PENTAGON-4157CD
Event Code: 10005
Message: Server DCOM zistil chybu %1058 pri pokuse spustit službu SENS s argumentmi
potrebnú na spustenie servera:
{D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

Record Number: 4
Source Name: DCOM
Time Written: 20101024211525.000000+120
Event Type: error
User: NT AUTHORITY\SYSTEM

Computer Name: PENTAGON-4157CD
Event Code: 10005
Message: Server DCOM zistil chybu %1058 pri pokuse spustit službu SENS s argumentmi
potrebnú na spustenie servera:
{D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

Record Number: 3
Source Name: DCOM
Time Written: 20101024211525.000000+120
Event Type: error
User: NT AUTHORITY\SYSTEM

=====Application event log=====

Computer Name: PENTAGON-4157CD
Event Code: 5603
Message: Poskytovatel OffProv11 bol zaregistrovaný v priestore názvov Root\MSAPPS11 služby WMI, neurcil však vlastnost HostingModel. Tento poskytovatel sa spustí pomocou konta LocalSystem. Toto konto je privilegované a poskytovatel môže zaprícinit narušenie zabezpecenia, ak správne nezosobní požiadavky používatelov. Uistite, že správanie poskytovatela bolo z hladiska zabezpecenia skontrolované a aktualizujte vlastnost HostingModel registrácie poskytovatela na konto s najnižšími možnými oprávneniami, ktoré negatívne neovplyvnia požadovanú funkcnost.

Record Number: 20
Source Name: WinMgmt
Time Written: 20101024211302.000000+120
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: PENTAGON-4157CD
Event Code: 5603
Message: Poskytovatel OffProv10 bol zaregistrovaný v priestore názvov Root\MSAPPS10 služby WMI, neurcil však vlastnost HostingModel. Tento poskytovatel sa spustí pomocou konta LocalSystem. Toto konto je privilegované a poskytovatel môže zaprícinit narušenie zabezpecenia, ak správne nezosobní požiadavky používatelov. Uistite, že správanie poskytovatela bolo z hladiska zabezpecenia skontrolované a aktualizujte vlastnost HostingModel registrácie poskytovatela na konto s najnižšími možnými oprávneniami, ktoré negatívne neovplyvnia požadovanú funkcnost.

Record Number: 19
Source Name: WinMgmt
Time Written: 20101024211301.000000+120
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: PENTAGON-4157CD
Event Code: 5603
Message: Poskytovatel OffProv10 bol zaregistrovaný v priestore názvov Root\MSAPPS10 služby WMI, neurcil však vlastnost HostingModel. Tento poskytovatel sa spustí pomocou konta LocalSystem. Toto konto je privilegované a poskytovatel môže zaprícinit narušenie zabezpecenia, ak správne nezosobní požiadavky používatelov. Uistite, že správanie poskytovatela bolo z hladiska zabezpecenia skontrolované a aktualizujte vlastnost HostingModel registrácie poskytovatela na konto s najnižšími možnými oprávneniami, ktoré negatívne neovplyvnia požadovanú funkcnost.

Record Number: 18
Source Name: WinMgmt
Time Written: 20101024211301.000000+120
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: PENTAGON-4157CD
Event Code: 63
Message: Poskytovatel HiPerfCooker_v1 bol zaregistrovaný v priestore názvov Root\WMI služby WMI na použitie konta LocalSystem. Toto konto je privilegované a poskytovatel môže nesprávnym zosobnením požiadaviek používatelov spôsobit porušenie zabezpecenia.

Record Number: 17
Source Name: WinMgmt
Time Written: 20101024211257.000000+120
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: PENTAGON-4157CD
Event Code: 63
Message: Poskytovatel HiPerfCooker_v1 bol zaregistrovaný v priestore názvov Root\WMI služby WMI na použitie konta LocalSystem. Toto konto je privilegované a poskytovatel môže nesprávnym zosobnením požiadaviek používatelov spôsobit porušenie zabezpecenia.

Record Number: 16
Source Name: WinMgmt
Time Written: 20101024211257.000000+120
Event Type: warning
User: NT AUTHORITY\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0209
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

[Rudy]

Nikde nic nebezpečného nevidím.

[radoslav]

dakujem.......ale nepaci sa mi ze procesor je po vacsine na 100 perc. vytazeny.
Zda sa mi ze mi bezi vela zbytocnych procesov.
Budem to musiet prezriet.

[Rudy]

Prohlédněte a vše, co může být ručně spouštěno, nastavte na ruční sopouštění. V případě problému se ozvěte.

[radoslav]

no podla rady som povypinal cvo som myslel ze netreba,ale nie som moc zdatny v problematike.
menil som dosku a mam slabsi procesor 2.4ghz celeron.....predtym sempron 2.8 ghz a som zhrozeny ake je to lenive.
budem sa to snazit nejako ladit,ale do pretaktovania sa bojim pustat.
alebo mi poradis nieco?

[Rudy]

Celeron je procesor určený pro kancelářská PC (jde o odlehčené Pentium). Zastavit můžete vše, co bezprostředně nesouvisí se systémem a bezpečnostními aplikacemi. Zkusíme se podívat, co tam běží. Dejte log z RSIT: http://viry.cz/forum/viewtopic.php?f=24&t=81939 .

[radoslav]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Menuchim at 2010-10-27 22:38:30
Systém Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 5 GB (18%) free of 30 GB
Total RAM: 1015 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:38:37, on 10/27/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Menuchim\Local Settings\Temporary Internet Files\Content.IE5\WXA385EV\RSIT[1].exe
C:\Program Files\Trend Micro\Menuchim.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 8206949906
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe

--
End of file - 2747 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Epson Printer Software Downloader.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-09-07 2838912]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-10-17 7307264]
"nwiz"=nwiz.exe /install []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2010-09-24 40368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
C:\Program Files\BitComet\BitComet.exe /tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio]
RunDll32 cmicnfg.cpl,CMICtrlWnd []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]
C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe [2009-04-07 673616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX110 Series]
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE [2008-09-27 199680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2004-08-04 1667584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\WINDOWS\SOUNDMAN.EXE [2005-10-04 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~2\Office10\OSA.EXE []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-09-20 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Documents and Settings\Radoslav\Local Settings\Temp\Rar$EX00.906\StrongDC.exe"="C:\Documents and Settings\Radoslav\Local Settings\Temp\Rar$EX00.906\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Documents and Settings\Radoslav\Local Settings\Temp\Rar$EX00.484\StrongDC.exe"="C:\Documents and Settings\Radoslav\Local Settings\Temp\Rar$EX00.484\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\StrongDC.exe"="C:\Program Files\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\StrongDC++\StrongDC.exe"="C:\Program Files\StrongDC++\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Epson Software\Event Manager\EEventManager.exe"="C:\Program Files\Epson Software\Event Manager\EEventManager.exe:*:Enabled:EEventManager Application"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-10-27 22:19:00 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-10-27 22:18:34 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-10-27 22:18:22 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-10-27 22:18:03 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-10-27 22:17:36 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-10-27 22:17:24 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-10-27 22:17:12 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-10-27 22:16:57 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-10-27 22:16:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-10-27 22:16:34 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-10-27 22:16:23 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-10-27 22:16:08 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-10-27 22:15:50 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-10-27 22:15:35 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-10-27 22:15:20 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-10-27 22:15:06 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-10-27 22:14:55 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-10-27 22:14:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-10-27 22:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-10-27 22:14:18 ----HDC---- C:\WINDOWS\$NtUninstallKB953155$
2010-10-27 22:14:07 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-10-27 22:13:54 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-10-27 22:13:41 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-10-27 22:13:25 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-10-27 22:13:00 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-10-27 22:06:26 ----D---- C:\WINDOWS\LastGood
2010-10-27 22:03:37 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-10-27 22:02:55 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-10-27 21:34:39 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-10-27 21:18:14 ----A---- C:\WINDOWS\imsins.BAK
2010-10-27 21:11:27 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-10-27 18:47:57 ----D---- C:\Documents and Settings\Menuchim\Application Data\Ashampoo
2010-10-24 23:10:24 ----A---- C:\WINDOWS\EEventManager.INI
2010-10-24 23:09:41 ----A---- C:\WINDOWS\CMISETUP.INI
2010-10-24 23:09:39 ----A---- C:\WINDOWS\CMCDPLAY.INI
2010-10-24 23:09:37 ----A---- C:\WINDOWS\Wininit.ini
2010-10-24 23:09:36 ----A---- C:\WINDOWS\system32\udaprop.dll
2010-10-24 23:09:36 ----A---- C:\WINDOWS\system32\drivers\cmuda.sys
2010-10-24 23:09:36 ----A---- C:\WINDOWS\system32\cmuda.dll
2010-10-24 23:09:36 ----A---- C:\WINDOWS\system32\cmirmdrv.exe
2010-10-24 23:09:36 ----A---- C:\WINDOWS\system32\cmirmdrv.dll
2010-10-24 23:09:36 ----A---- C:\WINDOWS\system32\Audio3D.dll
2010-10-24 23:09:36 ----A---- C:\WINDOWS\system32\a3d.dll
2010-10-24 23:09:35 ----D---- C:\Program Files\C-Media 3D Audio
2010-10-24 23:09:35 ----A---- C:\WINDOWS\CMIUninstall.exe
2010-10-24 23:09:35 ----A---- C:\WINDOWS\CmiRmRedundDir.exe
2010-10-24 23:09:35 ----A---- C:\WINDOWS\CMIRmDriver.dll
2010-10-24 23:07:41 ----D---- C:\Documents and Settings\Menuchim\Application Data\WinRAR
2010-10-24 22:52:13 ----ASH---- C:\pagefile.sys
2010-10-24 22:12:30 ----D---- C:\Documents and Settings\Menuchim\Application Data\Epson
2010-10-24 22:05:01 ----A---- C:\WINDOWS\system32\E_DCINST.DLL
2010-10-24 22:04:59 ----A---- C:\WINDOWS\system32\E_FD4BFBE.DLL
2010-10-24 22:04:58 ----A---- C:\WINDOWS\system32\E_FLBFBE.DLL
2010-10-24 22:04:50 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2010-10-24 22:03:35 ----D---- C:\Documents and Settings\All Users\Application Data\UDL
2010-10-24 21:59:01 ----D---- C:\Program Files\Epson Software
2010-10-24 21:57:34 ----D---- C:\Program Files\ABBYY FineReader 6.0 Sprint
2010-10-24 21:55:56 ----A---- C:\WINDOWS\system32\PICSDK2.dll
2010-10-24 21:55:56 ----A---- C:\WINDOWS\system32\PICSDK.ini
2010-10-24 21:55:56 ----A---- C:\WINDOWS\system32\PICSDK.dll
2010-10-24 21:55:56 ----A---- C:\WINDOWS\system32\PICEntry.dll
2010-10-24 21:55:56 ----A---- C:\WINDOWS\system32\EpPicPrt.dll
2010-10-24 21:55:56 ----A---- C:\WINDOWS\system32\EPPicMgr.dll
2010-10-24 21:55:53 ----D---- C:\Documents and Settings\Menuchim\Application Data\InstallShield
2010-10-24 21:54:24 ----D---- C:\Documents and Settings\All Users\Application Data\EPSON
2010-10-24 21:54:03 ----A---- C:\WINDOWS\system32\eswiaud.dll
2010-10-24 21:54:03 ----A---- C:\WINDOWS\system32\esdevapp.exe
2010-10-24 21:54:03 ----A---- C:\WINDOWS\system32\escdev.dll
2010-10-24 21:53:56 ----D---- C:\Program Files\epson
2010-10-24 21:27:44 ----D---- C:\Documents and Settings\Menuchim\Application Data\Macromedia
2010-10-24 21:27:44 ----D---- C:\Documents and Settings\Menuchim\Application Data\Adobe
2010-10-24 21:25:34 ----D---- C:\Documents and Settings\Menuchim\Application Data\Mozilla
2010-10-24 21:24:22 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-10-24 21:24:01 ----D---- C:\Documents and Settings\Menuchim\Application Data\Identities
2010-10-24 21:22:53 ----ASH---- C:\Documents and Settings\Menuchim\Application Data\desktop.ini
2010-10-24 21:22:52 ----SD---- C:\Documents and Settings\Menuchim\Application Data\Microsoft
2010-10-24 21:21:00 ----D---- C:\WINDOWS\Prefetch
2010-10-24 21:14:46 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-10-24 21:03:47 ----A---- C:\WINDOWS\system32\irclass.dll
2010-10-24 21:03:46 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-10-24 21:03:28 ----RA---- C:\WINDOWS\SETE0.tmp
2010-10-24 21:03:25 ----RA---- C:\WINDOWS\SETD4.tmp
2010-10-24 21:03:23 ----RA---- C:\WINDOWS\SETD1.tmp
2010-10-12 19:19:36 ----A---- C:\balance.txt
2010-10-12 19:18:52 ----A---- C:\WINDOWS\system32\wiafbdrv.dll
2010-10-12 19:11:41 ----A---- C:\WINDOWS\system32\micdrv.dll
2010-10-12 19:11:41 ----A---- C:\WINDOWS\AutoSet.dll
2010-10-12 19:05:40 ----A---- C:\WINDOWS\SCNDRVU.INI
2010-10-12 19:05:08 ----A---- C:\WINDOWS\uninst.exe
2010-10-12 18:56:15 ----RA---- C:\WINDOWS\system32\drivers\OLDAB.tmp
2010-10-12 18:56:06 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2010-10-12 18:56:05 ----D---- C:\Program Files\Common Files\Comscan
2010-10-06 18:58:04 ----A---- C:\WINDOWS\system32\h323log.txt
2010-10-06 18:52:06 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-10-06 18:51:19 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-10-06 18:51:08 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2010-10-06 18:49:40 ----SHD---- C:\WINDOWS\Installer
2010-10-06 18:49:40 ----D---- C:\Program Files\Common Files\ODBC
2010-10-06 18:49:40 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-06 18:49:40 ----A---- C:\WINDOWS\ODBCINST.INI
2010-10-06 18:49:37 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-10-06 18:49:36 ----RD---- C:\Program Files
2010-10-06 18:49:36 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-10-06 18:49:36 ----D---- C:\Program Files\Common Files
2010-10-06 18:49:20 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-10-06 18:49:19 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-10-06 18:49:17 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-10-06 18:49:17 ----A---- C:\WINDOWS\system32\CONFIG.TMP
2010-10-06 18:49:12 ----A---- C:\WINDOWS\system32\storprop.dll
2010-10-06 18:49:06 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-10-06 18:47:22 ----RA---- C:\WINDOWS\SET8.tmp
2010-10-06 18:47:20 ----RA---- C:\WINDOWS\SET4.tmp
2010-10-06 18:47:19 ----RA---- C:\WINDOWS\SET3.tmp
2010-10-06 18:47:10 ----D---- C:\WINDOWS\system32\CatRoot2
2010-10-06 18:47:10 ----D---- C:\WINDOWS\system32\CatRoot
2010-10-06 18:47:05 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-10-06 18:46:44 ----D---- C:\Documents and Settings
2010-10-06 18:46:43 ----SHD---- C:\System Volume Information
2010-10-06 18:45:38 ----SH---- C:\boot.ini
2010-10-06 18:38:48 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-10-06 18:38:48 ----RSD---- C:\WINDOWS\Fonts
2010-10-06 18:38:48 ----RD---- C:\WINDOWS\Web
2010-10-06 18:38:48 ----HD---- C:\WINDOWS\inf
2010-10-06 18:38:48 ----D---- C:\WINDOWS\WinSxS
2010-10-06 18:38:48 ----D---- C:\WINDOWS\twain_32
2010-10-06 18:38:48 ----D---- C:\WINDOWS\Temp
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\wins
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\wbem
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\usmt
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\spool
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\ShellExt
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\Setup
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\ras
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\oobe
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\npp
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\mui
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\inetsrv
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\IME
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\icsxml
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\ias
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\export
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\drivers\etc
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\drivers
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\dhcp
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\config
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\3com_dmi
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\3076
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\2052
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\1054
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\1042
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\1041
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\1037
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\1033
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\1031
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\1028
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32\1025
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system32
2010-10-06 18:38:48 ----D---- C:\WINDOWS\system
2010-10-06 18:38:48 ----D---- C:\WINDOWS\security
2010-10-06 18:38:48 ----D---- C:\WINDOWS\Resources
2010-10-06 18:38:48 ----D---- C:\WINDOWS\repair
2010-10-06 18:38:48 ----D---- C:\WINDOWS\Provisioning
2010-10-06 18:38:48 ----D---- C:\WINDOWS\pchealth
2010-10-06 18:38:48 ----D---- C:\WINDOWS\PeerNet
2010-10-06 18:38:48 ----D---- C:\WINDOWS\mui
2010-10-06 18:38:48 ----D---- C:\WINDOWS\msapps
2010-10-06 18:38:48 ----D---- C:\WINDOWS\msagent
2010-10-06 18:38:48 ----D---- C:\WINDOWS\Media
2010-10-06 18:38:48 ----D---- C:\WINDOWS\java
2010-10-06 18:38:48 ----D---- C:\WINDOWS\ime
2010-10-06 18:38:48 ----D---- C:\WINDOWS\Help
2010-10-06 18:38:48 ----D---- C:\WINDOWS\Driver Cache
2010-10-06 18:38:48 ----D---- C:\WINDOWS\Debug
2010-10-06 18:38:48 ----D---- C:\WINDOWS\Cursors
2010-10-06 18:38:48 ----D---- C:\WINDOWS\Connection Wizard
2010-10-06 18:38:48 ----D---- C:\WINDOWS\Config
2010-10-06 18:38:48 ----D---- C:\WINDOWS\AppPatch
2010-10-06 18:38:48 ----D---- C:\WINDOWS\addins
2010-10-06 18:38:48 ----D---- C:\WINDOWS

======List of files/folders modified in the last 1 months======

2010-10-27 22:38:32 ----D---- C:\Program Files\Trend Micro
2010-10-27 22:17:52 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2010-10-27 21:26:50 ----HD---- C:\WINDOWS\$hf_mig$
2010-10-27 21:18:11 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-10-27 21:16:09 ----D---- C:\WINDOWS\SoftwareDistribution
2010-10-27 21:16:08 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-10-24 23:09:35 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-24 22:00:37 ----D---- C:\Program Files\Common Files\InstallShield
2010-10-24 21:54:30 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-10-24 21:40:35 ----SHD---- C:\RECYCLER
2010-10-24 21:37:11 ----D---- C:\Program Files\CCleaner
2010-10-24 21:35:48 ----A---- C:\WINDOWS\winamp.ini
2010-10-24 21:23:44 ----A---- C:\WINDOWS\system32\wpa.bak
2010-10-24 21:23:24 ----D---- C:\WINDOWS\Registration
2010-10-24 21:21:49 ----D---- C:\WINDOWS\system32\Restore
2010-10-24 21:15:21 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2010-10-24 21:14:40 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-10-24 21:14:22 ----D---- C:\WINDOWS\srchasst
2010-10-24 21:14:20 ----D---- C:\Program Files\Windows Media Player
2010-10-24 21:14:13 ----D---- C:\Program Files\Movie Maker
2010-10-24 21:14:03 ----D---- C:\Program Files\NetMeeting
2010-10-24 21:13:59 ----D---- C:\Program Files\Outlook Express
2010-10-24 21:13:43 ----D---- C:\Program Files\Internet Explorer
2010-10-24 21:13:33 ----D---- C:\WINDOWS\system32\Com
2010-10-24 21:12:20 ----D---- C:\Program Files\Messenger
2010-10-24 21:12:15 ----D---- C:\Program Files\Windows NT
2010-10-24 21:03:53 ----A---- C:\WINDOWS\system.ini
2010-10-14 21:32:29 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2005-08-12 98432]
R0 ohci1394;VIA OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-04 61056]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 36096]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R2 Hardlock;Hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 NSHE;Guardant Emulator Driver; \??\C:\WINDOWS\system32\Drivers\NSHE.SYS []
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2005-05-12 1332544]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-04 9600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-09-20 1302332]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-04 12160]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-03-04 74496]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
R3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-04 20480]
S1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 36352]
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-10-04 3797632]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-04 60800]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 GT680xNT;715 USB Scanner Driver; C:\WINDOWS\system32\drivers\gt680x.sys []
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-04 61824]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-02 17536]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-10-17 3530880]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-07-29 34048]
S3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-07-29 12928]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS []
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\WINDOWS\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\WINDOWS\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\WINDOWS\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S3 sermouse;Serial Mouse Driver; C:\WINDOWS\system32\DRIVERS\sermouse.sys [2004-08-04 17664]
S3 UIUSys;Conexant Setup API; C:\WINDOWS\system32\DRIVERS\UIUSYS.SYS []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-05-02 8064]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2004-08-04 25600]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-10-17 131139]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-12-22 136120]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

[radoslav]

uz guglujem ohladne pretaktovania....lebo dedukujem ze mi nic ine nepomoze

[radoslav]

este musim dodat ,ze hry sa tu nehraju,ale vobec je to nezvykle pomale.
Uz som i vyhodil mozillu ako prehliadac,lebo my to rapidne uberalo vykonu.

[radoslav]

Pole Hodnota
Poèítaè
Operaèný systém Microsoft Windows XP Home Edition
Servisný balík OS Service Pack 2
DirectX 4.09.00.0904 (DirectX 9.0c)
Názov poèítaèa PENTAGON-4157CD
Meno užívate¾a Menuchim

Základná doska
Typ procesora Intel Celeron, 2400 MHz (24 x 100)
Názov základnej dosky Neznáme
Èipová sada zákl.dosky Intel Springdale-G i865G
Systém.pamä 1014 MB (PC3200 DDR SDRAM)
Typ BIOS-u AMI (07/31/07)
Komunikaèný port (COM a LPT) Communications Port (COM1)
Komunikaèný port (COM a LPT) ECP Printer Port (LPT1)

Zobrazenie
Grafická karta Intel(R) 82865G Graphics Controller (96 MB)
3D-akcelerátor Intel Extreme Graphics 2
Monitor Samsung SyncMaster 510N/512N/MagicSyncMaster CX501N/CX511N [15" LCD] (HSGX900041)

Multimédiá
Zvuková karta Intel 82801EB ICH5 - AC'97 Audio Controller [A-2/A-3]

Nosièe dát
Radiè IDE Intel(R) 82801EB Ultra ATA Storage Controllers
Radiè IDE Intel(R) 82801EB Ultra ATA Storage Controllers
Disket.jednotka Floppy disk drive
Disková jednotka STM3250318AS (232 GB, IDE)
Optická jednotka HL-DT-ST DVDRAM GSA-4167B (DVD+R9:8x, DVD-R9:4x, DVD+RW:16x/8x, DVD-RW:16x/6x, DVD-RAM:5x, DVD-ROM:16x, CD:48x/32x/48x DVD+RW/DVD-RW/DVD-RAM)
Stav pevných diskov SMART OK

Oddiely
C: (NTFS) 29996 MB (5343 MB vo¾ných)
E: (NTFS) 208476 MB (197164 MB vo¾ných)
Celk.miesto 232.9 GB (197.8 GB vo¾ných)

Vstupné zariadenia
Klávesnica Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Myš HID-compliant mouse

Sie
Sieový adaptér Realtek RTL8139/810x Family Fast Ethernet NIC (192.168.1.4)

Periférie
Tlaèiareò EPSON SX110 Series
Tlaèiareò Odeslat do aplikace OneNote 2007
Radiè USB1 Intel 82801EB ICH5 - USB Controller [A-2/A-3]
Radiè USB1 Intel 82801EB ICH5 - USB Controller [A-2/A-3]
Radiè USB1 Intel 82801EB ICH5 - USB Controller [A-2/A-3]
Radiè USB1 Intel 82801EB ICH5 - USB Controller [A-2/A-3]
Radiè USB2 Intel 82801EB ICH5 - Enhanced USB2 Controller [A-2/A-3]
USB-zariadenie EPSON SX110/TX110/ME 310
USB-zariadenie USB Composite Device
USB-zariadenie USB Human Interface Device
USB-zariadenie USB Printing Support

[Rudy]

Log vypadá čistý.

uz guglujem ohladne pretaktovania....lebo dedukujem ze mi nic ine nepomoze

Ani přetaktování vám nemusí pomoci. PC se může začít sekat.

[radoslav]

pretaktoval som na 3ghz,ale uz len pri programe picassa prehliadac mi ide proc ppovacsine na 100 perc.
teplota procesora sa zvysila o 5 st.
nevidim nejake rapidne zlepsenie.
poradis mi nieco este,alebo mam pc vyhodit......

[radoslav]

je mozne ze taky smiesny program ako je picassa mi zoberie asi 90 perc vykonu procesora,alebo problem tkvie v niecom inom.
prosim poradit,resp ak nie som na spravnom fore upozornite ma .
dakujem

[Rudy]

Můžeme ještě zkusit PC prtověřit ComboFixem:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[radoslav]

ComboFix 10-10-27.A3 - Menuchim 10/28/2010 20:20:01.1.1 - x86
Systém Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1015.758 [GMT 2:00]
Running from: c:\documents and settings\Menuchim\Pracovná plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\hpe226.dll

.
((((((((((((((((((((((((( Files Created from 2010-09-28 to 2010-10-28 )))))))))))))))))))))))))))))))
.

No new files created in this timespan

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-07 15:12 . 2010-08-06 15:27 38848 ----a-w- c:\windows\avastSS.scr
2010-09-07 15:11 . 2010-08-06 15:27 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2010-08-06 15:27 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2010-08-06 15:27 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2010-08-06 15:27 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2010-08-06 15:27 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2010-08-06 15:27 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2010-08-06 15:27 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2010-08-06 15:27 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-08-26 12:52 . 2010-08-09 06:38 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2010-08-18 05:58 . 2010-08-18 05:58 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-08-18 05:58 . 2010-08-18 05:58 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-08-07 17:08 . 2010-08-07 17:08 191488 ----a-w- c:\windows\system32\hlvdd.dll
2010-08-06 15:35 . 2010-08-06 15:35 4096 ----a-w- c:\windows\gdrv.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-10-17 7307264]
"nwiz"="nwiz.exe" [2005-10-17 1519616]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-21 18:37 932288 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-24 09:15 40368 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]
2009-04-07 07:13 673616 ------w- c:\progra~1\EPSONS~1\EVENTM~1\EEventManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX110 Series]
2008-09-27 00:00 199680 ----a-w- c:\windows\system32\spool\drivers\w32x86\3\E_FATIFBE.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 22:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2004-08-03 23:06 1667584 ------w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2005-10-04 12:12 90112 ----a-w- c:\windows\soundman.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\StrongDC++\\StrongDC.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Epson Software\\Event Manager\\EEventManager.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"15093:TCP"= 15093:TCP:BitComet 15093 TCP
"15093:UDP"= 15093:UDP:BitComet 15093 UDP

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [8/6/2010 17:27 165584]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [8/6/2010 17:27 17744]
R2 NSHE;Guardant Emulator Driver;c:\windows\system32\drivers\NSHE.SYS [8/7/2010 19:15 97792]
S2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [8/20/2010 20:27 90112]
S3 GT680xNT;715 USB Scanner Driver;c:\windows\system32\drivers\gt680x.sys --> c:\windows\system32\drivers\gt680x.sys [?]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\drivers\s0016bus.sys [8/20/2010 20:27 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\drivers\s0016mdfl.sys [8/20/2010 20:27 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\drivers\s0016mdm.sys [8/20/2010 20:27 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0016mgmt.sys [8/20/2010 20:27 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\drivers\s0016nd5.sys [8/20/2010 20:27 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\drivers\s0016obex.sys [8/20/2010 20:27 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\drivers\s0016unic.sys [8/20/2010 20:27 115752]
.
Contents of the 'Scheduled Tasks' folder

2010-10-27 c:\windows\Tasks\Epson Printer Software Downloader.job
- c:\program files\EPSON\EPAPDL\E_SAPDL2.EXE [2009-05-26 09:43]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
MSConfigStartUp-BitComet - c:\program files\BitComet\BitComet.exe
MSConfigStartUp-Cmaudio - cmicnfg.cpl
AddRemove-HijackThis - c:\program files\Trend Micro\HijackThis\HijackThis.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-10-28 20:25
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Completion time: 2010-10-28 20:27:55
ComboFix-quarantined-files.txt 2010-10-28 18:27

Pre-Run: 7 436 439 552 bytes free
Post-Run: 7 491 829 760 bytes free

- - End Of File - - 3B5E46496A2C30A0768AAEF4E119897F