Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6hod

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 Lis 2010 17:32

Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6hod

#1 Příspěvek od MadBull »

PC je strašně pomalé, jako by nefungovaly RAMky občas po restartu zmizí nějaké soubory :(


Logfile of random's system information tool 1.08 (written by random/random)
Run by The F3@R at 2010-11-24 17:26:44
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 248 GB (41%) free of 610 GB
Total RAM: 2047 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:27:20, on 24.11.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\LogMeIn\x86\LOGMEI~2.EXE
C:\PROGRA~1\LogMeIn\x86\LMIGuardianSvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\tsnpstd3.exe
C:\Program Files\Razer\Diamondback 3G\razerhid.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Razer\Diamondback 3G\razertra.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Razer\Diamondback 3G\razerofa.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\The F3@R\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\The F3@R.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fullarticles.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.2.0.12\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Diamondback] C:\Program Files\Razer\Diamondback 3G\razerhid.exe
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: SigmaTel Audio Service (uokwveoka) - Unknown owner - C:\WINDOWS\system32\gouquoon.exe (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe (file missing)

--
End of file - 9802 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{2606D27B-C854-4676-AD4B-67D6EED0B35B}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{F459FEEF-323E-47EB-944B-928F406D5428}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll [2010-05-13 394608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton 360\Engine\4.2.0.12\IPSBHO.DLL [2009-11-17 79224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll [2010-05-13 394608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-09-27 16844800]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-06-16 221184]
"tsnpstd3"=C:\WINDOWS\tsnpstd3.exe [2005-12-20 94208]
"snpstd3"=C:\WINDOWS\vsnpstd3.exe [2005-09-05 339968]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"Diamondback"=C:\Program Files\Razer\Diamondback 3G\razerhid.exe [2007-08-01 147456]
"LogMeIn GUI"=C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [2010-01-27 63048]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-07-21 141608]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-08-10 421888]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-10-16 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-10-16 13851752]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-08-26 1753192]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-09-16 1164584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"=C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe [2007-09-04 81920]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2007-02-20 741376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^0wwrine.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\0wwrine.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6cnndez.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\6cnndez.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6xnndj2.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\6xnndj2.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^86q81cn.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\86q81cn.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9g1cyyt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\9g1cyyt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9m1ieez.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\9m1ieez.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eaavmmhyyt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\eaavmmhyyt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eezqqlcc.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\eezqqlcc.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ez03gwrx.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\ez03gwrx.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^faa6mm6yy6k.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\faa6mm6yy6k.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^g1cyytkkfw.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\g1cyytkkfw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^jjfvvrhhdtt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\jjfvvrhhdtt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^k3g8cnoz.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\k3g8cnoz.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^llhxxtjjfvv.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\llhxxtjjfvv.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^pfl66sddtup.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\pfl66sddtup.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^qq6cc6ejf.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\qq6cc6ejf.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rrnddzpplbb.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\rrnddzpplbb.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rx5ny2zp.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\rx5ny2zp.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^s6ee6qq6.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\s6ee6qq6.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ull2rhid.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\ull2rhid.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytk.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytk.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytkkfw.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytkkfw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^wwriiduu.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\wwriiduu.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2010-10-06 87424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digest32.dll

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Hry\Beefko2\Battlefield 2\BF2.exe"="C:\Hry\Beefko2\Battlefield 2\BF2.exe:*:Enabled:BF2"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Hry\Valve\cstrike.exe"="C:\Hry\Valve\cstrike.exe:*:Enabled:Counter-Strike Launcher"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Graphisoft\ArchiCAD 12\ArchiCAD.exe"="C:\Program Files\Graphisoft\ArchiCAD 12\ArchiCAD.exe:*:Enabled:ArchiCAD 12.0.0 Component"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\WINDOWS\system32\nvsvc32.exe"="C:\WINDOWS\system32\nvsvc32.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\wbem\wmiprvse.exe"="C:\WINDOWS\system32\wbem\wmiprvse.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Coexistence\balicek pro loader\loader\loader.exe"="C:\Coexistence\balicek pro loader\loader\loader.exe:*:Enabled:CzechGamers Server AutoUpdater"
"C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe"="C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe:*:Enabled:DarkCrusade"
"C:\Program Files\Garena\Garena.exe"="C:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"C:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="C:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"C:\Program Files\TmUnitedForever\TmForever.exe"="C:\Program Files\TmUnitedForever\TmForever.exe:*:Enabled:TmForever"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\Team Fortress 2\hl2.exe"="C:\Program Files\Team Fortress 2\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Activision\Blur(TM)\Blur.exe"="C:\Program Files\Activision\Blur(TM)\Blur.exe:*:Enabled:Blur"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Ubisoft\Demo\Tom Clancy's H.A.W.X\HAWX.exe"="C:\Program Files\Ubisoft\Demo\Tom Clancy's H.A.W.X\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"
"C:\Program Files\Ubisoft\Tom Clancy's H.A.W.X\HAWX.exe"="C:\Program Files\Ubisoft\Tom Clancy's H.A.W.X\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Ventrilo\Ventrilo.exe"="C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe"
"C:\Documents and Settings\The F3@R\Plocha\CS.S\Counter-Strike Source\hl2.exe"="C:\Documents and Settings\The F3@R\Plocha\CS.S\Counter-Strike Source\hl2.exe:*:Enabled:hl2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\WINDOWS\system32\services.exe"="C:\WINDOWS\system32\services.exe:*:Enabled:@xpsp2res.dll,-22019"
"\??\C:\WINDOWS\system32\winlogon.exe"="\??\C:\WINDOWS\system32\winlogon.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\nvsvc32.exe"="C:\WINDOWS\system32\nvsvc32.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\wbem\wmiprvse.exe"="C:\WINDOWS\system32\wbem\wmiprvse.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\lsass.exe"="C:\WINDOWS\system32\lsass.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

======List of files/folders created in the last 1 months======

2010-11-24 17:26:49 ----D---- C:\Program Files\trend micro
2010-11-24 17:26:44 ----D---- C:\rsit
2010-11-24 17:18:21 ----A---- C:\ComboFix.txt
2010-11-24 16:50:47 ----A---- C:\WINDOWS\MBR.exe
2010-11-24 16:16:42 ----ASH---- C:\pagefile.sys
2010-11-24 16:04:24 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\Nero
2010-11-24 15:49:03 ----D---- C:\Program Files\Nero
2010-11-23 19:53:33 ----D---- C:\N360_BACKUP
2010-11-23 19:43:21 ----D---- C:\Program Files\Symantec
2010-11-23 19:43:21 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2010-11-23 19:43:21 ----A---- C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2010-11-23 19:41:12 ----D---- C:\WINDOWS\system32\drivers\N360
2010-11-23 19:41:05 ----D---- C:\Program Files\Windows Sidebar
2010-11-23 19:41:05 ----D---- C:\Program Files\Norton 360
2010-11-23 15:38:27 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-11-23 15:35:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2010-11-23 15:35:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2010-11-23 15:35:10 ----D---- C:\Program Files\NortonInstaller
2010-11-23 15:35:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2010-11-22 22:24:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2010-11-22 21:40:06 ----D---- C:\Program Files\YourWare Solutions
2010-11-22 21:26:01 ----D---- C:\WINDOWS\pss
2010-11-22 20:52:00 ----D---- C:\Program Files\Lavalys
2010-11-21 11:25:41 ----A---- C:\WINDOWS\UPGRADE.TXT
2010-11-15 19:31:44 ----A---- C:\WINDOWS\system32\nvgenco32.dll
2010-11-15 19:31:44 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2010-11-11 23:39:06 ----D---- C:\WINDOWS\B83FC356B7C0441F8A4DD71E088E7974.TMP
2010-11-11 23:37:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Divinity 2
2010-11-11 23:24:14 ----D---- C:\Program Files\Divinity II - DKS
2010-11-03 18:30:34 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\.minecraft
2010-10-28 19:37:11 ----D---- C:\Program Files\JoWooD Entertainment AG

======List of files/folders modified in the last 1 months======

2010-11-24 17:26:49 ----RD---- C:\Program Files
2010-11-24 17:26:48 ----AD---- C:\WINDOWS\Temp
2010-11-24 17:18:25 ----D---- C:\WINDOWS\system32\drivers
2010-11-24 17:18:25 ----D---- C:\Qoobox
2010-11-24 17:17:14 ----SD---- C:\WINDOWS\Tasks
2010-11-24 17:16:39 ----D---- C:\WINDOWS\ERDNT
2010-11-24 17:16:23 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-24 17:12:43 ----D---- C:\WINDOWS
2010-11-24 17:12:43 ----A---- C:\WINDOWS\system.ini
2010-11-24 17:11:06 ----D---- C:\WINDOWS\system32\drivers\etc
2010-11-24 17:06:11 ----D---- C:\WINDOWS\system32\config
2010-11-24 17:03:58 ----D---- C:\WINDOWS\system32
2010-11-24 17:01:32 ----D---- C:\WINDOWS\AppPatch
2010-11-24 17:01:25 ----D---- C:\Program Files\Common Files
2010-11-24 16:50:58 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-11-24 16:49:23 ----D---- C:\ComboFix
2010-11-24 16:35:27 ----D---- C:\WINDOWS\Microsoft.NET
2010-11-24 16:35:13 ----RSD---- C:\WINDOWS\assembly
2010-11-24 16:04:58 ----SHD---- C:\WINDOWS\Installer
2010-11-24 09:18:29 ----D---- C:\Program Files\TNod User & Password Finder
2010-11-24 07:12:01 ----D---- C:\WINDOWS\Prefetch
2010-11-24 05:27:41 ----SHD---- C:\System Volume Information
2010-11-24 05:26:57 ----D---- C:\Program Files\LogMeIn
2010-11-23 19:40:49 ----D---- C:\WINDOWS\WinSxS
2010-11-23 08:18:45 ----D---- C:\Documents and Settings
2010-11-22 22:26:45 ----D---- C:\Program Files\DivX
2010-11-22 22:26:42 ----D---- C:\Program Files\Common Files\DivX Shared
2010-11-22 22:15:26 ----ASH---- C:\boot.ini
2010-11-22 21:28:18 ----A---- C:\WINDOWS\win.ini
2010-11-22 21:22:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-11-22 21:20:24 ----D---- C:\Program Files\Spyware Terminator
2010-11-22 21:11:53 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\Spyware Terminator
2010-11-22 20:44:42 ----HD---- C:\WINDOWS\inf
2010-11-22 20:44:25 ----A---- C:\WINDOWS\hpdj3600.ini
2010-11-22 20:44:15 ----D---- C:\Program Files\Hewlett-Packard
2010-11-22 20:42:46 ----D---- C:\Program Files\Get Styles
2010-11-21 11:20:19 ----D---- C:\WINDOWS\system32\Restore
2010-11-20 12:08:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-11-20 12:02:04 ----A---- C:\WINDOWS\system32\MRT.exe
2010-11-19 16:39:06 ----D---- C:\Program Files\R.G. Mechanics
2010-11-19 16:38:25 ----HD---- C:\Program Files\InstallShield Installation Information
2010-11-19 16:34:37 ----D---- C:\Program Files\Common Files\BioWare
2010-11-19 16:33:19 ----D---- C:\Program Files\Frets on Fire
2010-11-19 16:32:34 ----D---- C:\Program Files\Outspark
2010-11-17 15:03:03 ----D---- C:\Program Files\Mozilla Firefox
2010-11-17 11:41:23 ----D---- C:\All my music
2010-11-16 16:04:45 ----D---- C:\WINDOWS\Minidump
2010-11-16 14:00:38 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-15 21:05:25 ----D---- C:\totalcmd
2010-11-15 21:05:25 ----D---- C:\Program Files\Lineage II
2010-11-15 19:33:32 ----D---- C:\WINDOWS\Help
2010-11-15 19:33:12 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-11-15 19:31:52 ----D---- C:\Program Files\NVIDIA Corporation
2010-11-15 17:16:46 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\uTorrent
2010-11-14 17:59:36 ----D---- C:\Program Files\Activision
2010-11-11 20:34:28 ----D---- C:\Program Files\Cheat Engine
2010-11-11 20:20:54 ----D---- C:\Program Files\WinClamAVShield
2010-11-07 08:11:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-28 19:59:41 ----D---- C:\WINDOWS\system32\DirectX
2010-10-25 16:45:19 ----D---- C:\Program Files\Team Fortress 2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\System32\Drivers\vbtenum.sys [2007-03-05 20880]
R0 BTHidMgr;Bluetooth HID Manager Service; C:\WINDOWS\System32\Drivers\BTHidMgr.sys [2007-03-05 35600]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-05-01 43528]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-08-06 721904]
R0 SymDS;Symantec Data Store; C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMDS.SYS [2009-10-15 328752]
R0 SymEFA;Symantec Extended File Attributes; C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMEFA.SYS [2010-04-22 173104]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2008-10-02 82380]
R1 appdrv01;Application Driver (01); C:\WINDOWS\System32\Drivers\appdrv01.sys [2009-10-28 2915944]
R1 BHDrvx86;BHDrvx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20101104.001\BHDrvx86.sys []
R1 ccHP;Symantec Hash Provider; C:\WINDOWS\system32\drivers\N360\0402000.00C\ccHPx86.sys [2010-02-26 501888]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys []
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\WINDOWS\system32\drivers\N360\0402000.00C\SRTSPX.SYS [2010-04-22 43696]
R1 SymIRON;Symantec Iron Driver; C:\WINDOWS\system32\drivers\N360\0402000.00C\Ironx86.SYS [2010-04-29 116784]
R1 SYMTDI;Symantec Network Dispatch Driver; C:\WINDOWS\System32\Drivers\N360\0402000.00C\SYMTDI.SYS [2010-05-06 361904]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-10-20 281760]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-10-20 25888]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R2 npkcrypt;npkcrypt; \??\C:\Hry\Czechgamers\system\npkcrypt.sys []
R3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2007-05-11 34704]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2007-03-05 27792]
R3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2007-03-05 18320]
R3 catchme;catchme; \??\C:\beruška.com\catchme.sys []
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-09-28 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20101122.006\IDSxpx86.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-10-02 4613120]
R3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [2010-01-27 10144]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-10-22 9623680]
R3 NVR0Dev;NVR0Dev; \??\C:\WINDOWS\nvoclock.sys []
R3 radpms;Driver for RADPMS Device; C:\WINDOWS\system32\DRIVERS\radpms.sys [2010-05-18 13408]
R3 Razerlow;Diamondback 3G USB Filter Driver; C:\WINDOWS\System32\Drivers\DB3G.sys [2005-04-24 13225]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-18 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-10-03 102656]
R3 SbieDrv;SbieDrv; \??\C:\Program Files\Sandboxie\SbieDrv.sys []
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2005-12-08 8718848]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2007-03-05 34448]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2007-03-05 44304]
S3 avt4g9ug;avt4g9ug; C:\WINDOWS\system32\drivers\avt4g9ug.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2007-05-09 36496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp []
S3 GMSIPCI;GMSIPCI; C:\WINDOWS\system32\drivers\GMSIPCI.sys []
S3 mbr;mbr; \??\C:\DOCUME~1\THEF3@~1\LOCALS~1\Temp\mbr.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMP50.sys []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMP50a64.sys []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMPR5.sys []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRENDIS5.sys []
S3 MRESP50;MRESP50 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRESP50.sys []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRESP50a64.sys []
S3 MSICPL;MSICPL; C:\WINDOWS\system32\drivers\MSICPL.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20101123.051\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20101123.051\NAVEX15.SYS []
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NTACCESS;NTACCESS; C:\WINDOWS\system32\drivers\NTACCESS.sys []
S3 PsSdk40;PsSdk40; \??\C:\WINDOWS\system32\Drivers\pssdk40.sys []
S3 PsSdkLBF;PsSdkLBF; \??\C:\WINDOWS\system32\Drivers\pssdklbf.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 s616bus;Sony Ericsson Device 616 driver (WDM); C:\WINDOWS\system32\DRIVERS\s616bus.sys [2007-04-03 83208]
S3 s616mdfl;Sony Ericsson Device 616 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s616mdfl.sys [2007-04-03 15112]
S3 s616mdm;Sony Ericsson Device 616 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s616mdm.sys [2007-04-03 108680]
S3 s616mgmt;Sony Ericsson Device 616 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s616mgmt.sys [2007-04-03 100360]
S3 s616nd5;Sony Ericsson Device 616 USB Ethernet Emulation SEMC616 (NDIS); C:\WINDOWS\system32\DRIVERS\s616nd5.sys [2007-04-03 23176]
S3 s616obex;Sony Ericsson Device 616 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s616obex.sys [2007-04-03 98568]
S3 s616unic;Sony Ericsson Device 616 USB Ethernet Emulation SEMC616 (WDM); C:\WINDOWS\system32\DRIVERS\s616unic.sys [2007-04-03 99080]
S3 SetupNTGLM7X;SetupNTGLM7X; C:\WINDOWS\system32\drivers\SetupNTGLM7X.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SRTSP;Symantec Real Time Storage Protection; C:\WINDOWS\System32\Drivers\N360\0402000.00C\SRTSP.SYS [2010-04-22 325680]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 tap0901_2gm;VPN Anonymizer Adapter; C:\WINDOWS\system32\DRIVERS\tap0901_2gm.sys [2007-06-21 30720]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 w200bus;Sony Ericsson W200 driver (WDM); C:\WINDOWS\system32\DRIVERS\w200bus.sys [2006-11-07 61504]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 XDva344;XDva344; \??\C:\WINDOWS\system32\XDva344.sys []
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-17 153376]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe [2010-09-27 374152]
R2 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2010-10-06 116104]
R2 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2010-01-27 63040]
R2 MySQL;MySQL; C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt --defaults-file=C:\Program Files\MySQL\MySQL Server 5.0\my.ini MySQL []
R2 N360;Norton 360; C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe [2010-02-26 126392]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
R2 nTuneService;nTune Service; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [2007-09-04 131072]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-10-16 156776]
R2 SbieSvc;Sandboxie Service; C:\Program Files\Sandboxie\SbieSvc.exe [2009-09-30 65024]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-08-19 488960]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-21 540968]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\WINDOWS\System32\appdrvrem01.exe [2009-10-28 304528]
S2 uokwveoka;SigmaTel Audio Service; C:\WINDOWS\system32\gouquoon.exe []
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-04-06 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe []
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Avatar uživatele
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8720
Registrován: 09 Pro 2006 06:19
Místo/Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#2 Příspěvek od cernohous13 »

Zdravím,

RSIT log po použití ComboFixu je nám platný jak mrtvému zuby :(

Dej sem C:\ComboFix.txt
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 Lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#3 Příspěvek od MadBull »

ComboFix 10-11-23.05 - The F3@R 24.11.2010 16:54:58.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2047.1385 [GMT 1:00]
Spuštěný z: c:\documents and settings\The F3@R\Plocha\beruška.com.exe
AV: Norton 360 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\The F3@R\Data aplikací\system32
c:\documents and settings\The F3@R\Data aplikací\system32\klog.dat
c:\documents and settings\The F3@R\secupdat.dat
C:\Thumbs.db
c:\windows\box.exe
c:\windows\system32\Drivers\wuxttify.sys
c:\windows\system32\secupdat.dat
c:\windows\system32\Thumbs.db
c:\windows\Temp\spoolsv
c:\windows\Temp\spoolsv\Desktop.ini
c:\windows\Temp\spoolsv\mirc.ico
c:\windows\Temp\spoolsv\popups.txt
.
---- Předchozí spuštění -------
.
C:\a2h2.com
c:\docume~1\THEF3@~1\LOCALS~1\Temp\tmp1.tmp
c:\docume~1\THEF3@~1\LOCALS~1\Temp\tmp2.tmp
C:\install.exe
c:\program files\altcmd\altcmd.inf
c:\program files\altcmd\uninstall.bat
c:\windows\AhnRpta.exe
c:\windows\inform.dat
c:\windows\system32\DIGEST32.DLL
c:\windows\system32\snapapi32.dll
c:\windows\system32\wowfx.dll

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_KAVSYS
-------\Service_svchost
-------\Legacy_wuxttify
-------\Service_wuxttify


((((((((((((((((((((((((( Soubory vytvořené od 2010-10-24 do 2010-11-24 )))))))))))))))))))))))))))))))
.

2010-11-24 15:04 . 2010-11-24 15:04 -------- d-----w- c:\documents and settings\The F3@R\Data aplikací\Nero
2010-11-24 14:49 . 2010-11-24 14:49 -------- d-----w- c:\program files\Nero
2010-11-23 18:53 . 2010-11-23 18:53 -------- d-----w- C:\N360_BACKUP
2010-11-23 18:43 . 2010-11-23 18:43 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
2010-11-23 18:43 . 2010-11-23 18:43 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2010-11-23 18:43 . 2010-11-23 18:43 -------- d-----w- c:\program files\Symantec
2010-11-23 18:41 . 2010-11-24 13:47 -------- d-----w- c:\windows\system32\drivers\N360
2010-11-23 18:41 . 2010-11-23 18:41 -------- d-----w- c:\program files\Norton 360
2010-11-23 18:41 . 2010-11-23 18:41 -------- d-----w- c:\program files\Windows Sidebar
2010-11-23 14:38 . 2010-11-23 18:52 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-11-23 14:35 . 2010-11-23 18:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Norton
2010-11-23 14:35 . 2010-11-23 14:35 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Symantec
2010-11-23 14:35 . 2010-11-24 04:26 -------- d-----w- c:\program files\NortonInstaller
2010-11-23 07:18 . 2010-11-23 07:18 -------- d-----w- c:\documents and settings\Jára.LINEAGE
2010-11-22 21:24 . 2010-11-22 21:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\DivX
2010-11-22 20:40 . 2010-11-22 20:40 -------- d-----w- c:\program files\YourWare Solutions
2010-11-22 19:52 . 2010-11-22 19:52 -------- d-----w- c:\program files\Lavalys
2010-11-22 19:43 . 2003-09-01 12:10 266240 ----a-w- c:\windows\system32\hpdj3600
2010-11-21 10:45 . 2010-11-21 10:45 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\O&O
2010-11-17 09:57 . 2010-11-17 09:57 -------- d-----w- c:\documents and settings\Guest
2010-11-15 18:31 . 2010-10-22 06:23 888424 ----a-w- c:\windows\system32\nvdispco32.dll
2010-11-15 18:31 . 2010-10-22 06:23 813672 ----a-w- c:\windows\system32\nvgenco32.dll
2010-11-14 18:06 . 2010-11-14 18:06 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\Activision
2010-11-11 22:39 . 2010-11-11 22:39 -------- d-----w- c:\windows\B83FC356B7C0441F8A4DD71E088E7974.TMP
2010-11-11 22:38 . 2010-11-11 22:38 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\Divinity 2
2010-11-11 22:37 . 2010-11-11 22:37 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Divinity 2
2010-11-11 22:24 . 2010-11-11 22:39 -------- d-----w- c:\program files\Divinity II - DKS
2010-11-09 08:33 . 2010-11-09 08:33 -------- d-sh--w- c:\documents and settings\Jára\PrivacIE
2010-11-03 17:30 . 2010-11-01 18:13 -------- d-----w- c:\documents and settings\The F3@R\Data aplikací\.minecraft
2010-10-28 18:37 . 2010-10-28 18:37 -------- d-----w- c:\program files\JoWooD Entertainment AG

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-22 06:23 . 2010-08-31 18:39 61440 ----a-w- c:\windows\system32\OpenCL.dll
2010-10-22 06:23 . 2008-07-26 10:48 14532608 ----a-w- c:\windows\system32\nvoglnt.dll
2010-10-22 06:23 . 2009-08-16 22:57 2932840 ----a-w- c:\windows\system32\nvcuvid.dll
2010-10-22 06:23 . 2009-08-16 22:57 2666600 ----a-w- c:\windows\system32\nvcuvenc.dll
2010-10-22 06:23 . 2008-07-26 10:48 4882432 ----a-w- c:\windows\system32\nvcuda.dll
2010-10-22 06:23 . 2010-08-31 18:39 13012992 ----a-w- c:\windows\system32\nvcompiler.dll
2010-10-22 06:23 . 2008-07-26 10:48 9623680 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2010-10-22 06:23 . 2008-07-26 10:48 6359552 ----a-w- c:\windows\system32\nv4_disp.dll
2010-10-22 06:23 . 2008-07-26 10:48 1462272 ----a-w- c:\windows\system32\nvapi.dll
2010-10-16 11:05 . 2010-10-16 11:05 81920 ----a-w- c:\windows\system32\nvwddi.dll
2010-10-16 11:05 . 2010-10-16 11:05 335872 ----a-w- c:\windows\system32\nvrsar.dll
2010-10-16 11:05 . 2010-10-16 11:05 331776 ----a-w- c:\windows\system32\nvrshe.dll
2010-10-16 11:05 . 2010-10-16 11:05 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrses.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrsel.dll
2010-10-16 11:05 . 2010-10-16 11:05 278528 ----a-w- c:\windows\system32\nvrsde.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsru.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2010-10-16 11:05 . 2010-10-16 11:05 266240 ----a-w- c:\windows\system32\nvrsko.dll
2010-10-16 11:05 . 2010-10-16 11:05 262144 ----a-w- c:\windows\system32\nvrshu.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrstr.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrssl.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrssk.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsth.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrssv.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsda.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrseng.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrscs.dll
2010-10-16 11:05 . 2010-10-16 11:05 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2010-10-16 11:05 . 2010-10-16 11:05 126976 ----a-w- c:\windows\system32\nvrszht.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrsit.dll
2010-10-16 11:05 . 2010-10-16 11:05 277608 ----a-w- c:\windows\system32\nvmccs.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrspt.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsja.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrspl.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsno.dll
2010-10-16 11:05 . 2010-10-16 11:05 156776 ----a-w- c:\windows\system32\nvsvc32.exe
2010-10-16 11:05 . 2010-10-16 11:05 145000 ----a-w- c:\windows\system32\nvcolor.exe
2010-10-16 11:05 . 2010-10-16 11:05 13851752 ----a-w- c:\windows\system32\nvcpl.dll
2010-10-16 11:05 . 2010-10-16 11:05 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-10-06 11:34 . 2010-08-16 14:32 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2010-10-06 11:34 . 2010-08-16 14:32 53632 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll
2010-10-06 11:34 . 2010-08-16 14:32 29568 ----a-w- c:\windows\system32\LMIport.dll
2010-10-06 11:34 . 2010-08-16 14:32 87424 ----a-w- c:\windows\system32\LMIinit.dll
2010-09-18 10:23 . 2004-08-18 12:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2004-08-18 12:00 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2004-08-18 12:00 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2004-08-18 12:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:52 . 2004-08-18 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 05:52 . 2004-08-18 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-09-10 05:52 . 2004-08-18 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:52 . 2004-08-18 12:00 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-09-01 07:57 . 2004-08-18 12:00 1852800 ----a-w- c:\windows\system32\win32k.sys
2010-08-27 08:03 . 2004-08-18 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:54 . 2004-08-18 12:00 99840 ----a-w- c:\windows\system32\srvsvc.dll
2010-08-27 01:43 . 2008-05-05 05:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 81920]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-09-27 16844800]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-06-16 221184]
"tsnpstd3"="c:\windows\tsnpstd3.exe" [2005-12-20 94208]
"snpstd3"="c:\windows\vsnpstd3.exe" [2005-09-05 339968]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"Diamondback"="c:\program files\Razer\Diamondback 3G\razerhid.exe" [2007-08-01 147456]
"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2010-01-27 63048]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-07-21 141608]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-08-10 421888]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-10-16 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-10-16 13851752]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-08-25 1753192]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-16 1164584]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableLockWorkstation"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2010-10-06 11:34 87424 ----a-w- c:\windows\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digest32.dll

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^0wwrine.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\0wwrine.exe
backup=c:\windows\pss\0wwrine.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6cnndez.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\6cnndez.exe
backup=c:\windows\pss\6cnndez.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6xnndj2.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\6xnndj2.exe
backup=c:\windows\pss\6xnndj2.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^86q81cn.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\86q81cn.exe
backup=c:\windows\pss\86q81cn.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9g1cyyt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\9g1cyyt.exe
backup=c:\windows\pss\9g1cyyt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9m1ieez.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\9m1ieez.exe
backup=c:\windows\pss\9m1ieez.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eaavmmhyyt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\eaavmmhyyt.exe
backup=c:\windows\pss\eaavmmhyyt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eezqqlcc.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\eezqqlcc.exe
backup=c:\windows\pss\eezqqlcc.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ez03gwrx.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\ez03gwrx.exe
backup=c:\windows\pss\ez03gwrx.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^faa6mm6yy6k.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\faa6mm6yy6k.exe
backup=c:\windows\pss\faa6mm6yy6k.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^g1cyytkkfw.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\g1cyytkkfw.exe
backup=c:\windows\pss\g1cyytkkfw.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^jjfvvrhhdtt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\jjfvvrhhdtt.exe
backup=c:\windows\pss\jjfvvrhhdtt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^k3g8cnoz.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\k3g8cnoz.exe
backup=c:\windows\pss\k3g8cnoz.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^llhxxtjjfvv.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\llhxxtjjfvv.exe
backup=c:\windows\pss\llhxxtjjfvv.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^pfl66sddtup.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\pfl66sddtup.exe
backup=c:\windows\pss\pfl66sddtup.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^qq6cc6ejf.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\qq6cc6ejf.exe
backup=c:\windows\pss\qq6cc6ejf.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rrnddzpplbb.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\rrnddzpplbb.exe
backup=c:\windows\pss\rrnddzpplbb.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rx5ny2zp.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\rx5ny2zp.exe
backup=c:\windows\pss\rx5ny2zp.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^s6ee6qq6.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\s6ee6qq6.exe
backup=c:\windows\pss\s6ee6qq6.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ull2rhid.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\ull2rhid.exe
backup=c:\windows\pss\ull2rhid.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytk.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytk.exe
backup=c:\windows\pss\vmmhyytk.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytkkfw.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytkkfw.exe
backup=c:\windows\pss\vmmhyytkkfw.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^wwriiduu.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\wwriiduu.exe
backup=c:\windows\pss\wwriiduu.exeStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 10:44 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2004-06-16 04:03 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
2007-02-20 12:06 741376 ----a-w- c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Hry\\Beefko2\\Battlefield 2\\BF2.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Hry\\Valve\\cstrike.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Graphisoft\\ArchiCAD 12\\ArchiCAD.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"c:\\WINDOWS\\system32\\nvsvc32.exe"=
"c:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"=
"c:\\Program Files\\Warcraft III\\Warcraft III.exe"=
"c:\\Coexistence\\balicek pro loader\\loader\\loader.exe"=
"c:\\Program Files\\THQ\\Dawn of War - Dark Crusade\\DarkCrusade.exe"=
"c:\\Program Files\\Garena\\Garena.exe"=
"c:\\Program Files\\Electronic Arts\\Battlefield Bad Company 2\\BFBC2Updater.exe"=
"c:\\Program Files\\TmUnitedForever\\TmForever.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Program Files\\Team Fortress 2\\hl2.exe"=
"c:\\Program Files\\Activision\\Blur(TM)\\Blur.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\Ubisoft\\Demo\\Tom Clancy's H.A.W.X\\HAWX.exe"=
"c:\\Program Files\\Ubisoft\\Tom Clancy's H.A.W.X\\HAWX.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe"=
"c:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Ventrilo\\Ventrilo.exe"=
"c:\\Documents and Settings\\The F3@R\\Plocha\\CS.S\\Counter-Strike Source\\hl2.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"4719:TCP"= 4719:TCP:4719
"58452:TCP"= 58452:TCP:Pando Media Booster
"58452:UDP"= 58452:UDP:Pando Media Booster

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [19.9.2008 14:38 721904]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360\0402000.00C\symds.sys [24.11.2010 5:39 328752]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\0402000.00C\symefa.sys [24.11.2010 5:39 173104]
R1 appdrv01;Application Driver (01);c:\windows\system32\drivers\appdrv01.sys [28.10.2009 23:27 2915944]
R1 BHDrvx86;BHDrvx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20101104.001\BHDrvx86.sys [4.11.2010 15:02 691248]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360\0402000.00C\cchpx86.sys [24.11.2010 5:39 501888]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [19.8.2010 9:28 142592]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360\0402000.00C\ironx86.sys [24.11.2010 5:39 116784]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn\x86\LMIGuardianSvc.exe [21.10.2010 15:25 374152]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\rainfo.sys [27.1.2010 11:22 12856]
R2 N360;Norton 360;c:\program files\Norton 360\Engine\4.2.0.12\ccsvchst.exe [24.11.2010 5:38 126392]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [23.11.2010 19:57 102448]
R3 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20101122.006\IDSXpx86.sys [24.11.2010 8:30 341944]
R3 radpms;Driver for RADPMS Device;c:\windows\system32\drivers\radpms.sys [18.5.2010 15:54 13408]
R3 Razerlow;Diamondback 3G USB Filter Driver;c:\windows\system32\drivers\DB3G.sys [25.8.2009 11:42 13225]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc --> c:\windows\System32\appdrvrem01.exe svc [?]
S2 uokwveoka;SigmaTel Audio Service;c:\windows\system32\gouquoon.exe --> c:\windows\system32\gouquoon.exe [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp --> c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp [?]
S3 PsSdk40;PsSdk40;c:\windows\system32\drivers\pssdk40.sys [18.12.2008 18:02 36928]
S3 PsSdkLBF;PsSdkLBF;c:\windows\system32\drivers\pssdklbf.sys [18.12.2008 18:02 53312]
S3 SetupNTGLM7X;SetupNTGLM7X; [x]
S3 tap0901_2gm;VPN Anonymizer Adapter;c:\windows\system32\drivers\tap0901_2gm.sys [21.6.2007 16:21 30720]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys --> c:\windows\system32\DRIVERS\wdcsam.sys [?]
S3 XDva344;XDva344;\??\c:\windows\system32\XDva344.sys --> c:\windows\system32\XDva344.sys [?]
.
Obsah adresáře 'Naplánované úlohy'

2010-11-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50]

2010-11-24 c:\windows\Tasks\User_Feed_Synchronization-{2606D27B-C854-4676-AD4B-67D6EED0B35B}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

2010-11-24 c:\windows\Tasks\User_Feed_Synchronization-{F459FEEF-323E-47EB-944B-928F406D5428}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://fullarticles.net
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Get Styles\ct.htm
FF - ProfilePath - c:\documents and settings\The F3@R\Data aplikací\Mozilla\Firefox\Profiles\42j9amxb.default\
FF - prefs.js: browser.startup.homepage - hxxp://search-styles.com/
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\Pando Networks\Media Booster\npPandoWebPlugin.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Notify-byXPFXoN - byXPFXoN.dll
Notify-geBtUKBu - geBtUKBu.dll
Notify-nnnnKdcY - nnnnKdcY.dll
Notify-tuvUKApn - tuvUKApn.dll
Notify-tuvWpqPj - tuvWpqPj.dll
Notify-wvUnNefd - wvUnNefd.dll
SafeBoot-wuxttify.sys
AddRemove-Fraps - c:\fraps\uninstall.exe
AddRemove-mIRC - c:\windows\temp\spoolsv\spoolsv.exe
AddRemove-SSF Realism Mod - c:\program files\S.W.A.T. 4\Uninstal.exe
AddRemove-VPN Anonymizer - c:\program files\VPN Anonymizer\uninst.exe
AddRemove-WinLiveSuite_Wave3 - c:\program files\Windows Live\Installer\wlarp.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-24 17:11
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\N360]
"ImagePath"="\"c:\program files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\4.2.0.12\diMaster.dll\" /prefetch:1"

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp"

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MySQL]
"ImagePath"="\"c:\program files\MySQL\MySQL Server 5.0\bin\mysqld-nt\" --defaults-file=\"c:\program files\MySQL\MySQL Server 5.0\my.ini\" MySQL"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:3d,ec,eb,de,c3,d3,e7,2a,b6,62,dd,ee,6b,68,ed,7d,99,7a,6e,71,1e,f0,d3,
e2,7e,06,5f,0b,2b,96,db,58,f1,ba,fd,66,8f,d2,3b,25,3b,e6,1e,bc,f2,23,b4,55,\
"??"=hex:a7,61,c4,92,34,60,18,e8,7c,ea,92,73,36,ea,44,87

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:97,2b,dd,90,c9,e0,d2,72,e9,ea,5d,7f,45,13,e6,13,50,fc,b1,e8,5c,
7d,b0,9b,95,d8,f4,02,36,5d,84,95,f0,8e,24,6f,21,92,27,c7,61,ea,f4,4a,65,61,\
"rkeysecu"=hex:9b,ad,47,3a,89,d5,35,7c,e1,b5,1d,6e,51,d3,bb,ea

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG12.00.00.01PROFESSIONAL"="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"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(892)
c:\windows\system32\LMIinit.dll

- - - - - - - > 'explorer.exe'(1320)
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
c:\windows\system32\LMIRfsClientNP.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\progra~1\LogMeIn\x86\LOGMEI~2.EXE
c:\progra~1\LogMeIn\x86\LMIGuardianSvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\LogMeIn\x86\RaMaint.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\program files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\program files\NVIDIA Corporation\nTune\nTuneService.exe
c:\program files\Sandboxie\SbieSvc.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\program files\Razer\Diamondback 3G\razertra.exe
c:\program files\Razer\Diamondback 3G\razerofa.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Common Files\Java\Java Update\jucheck.exe
.
**************************************************************************
.
Celkový čas: 2010-11-24 17:18:21 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-24 16:18

Před spuštěním: Volných bajtů: 257 589 735 424
Po spuštění: Volných bajtů: 259 546 755 072

Current=3 Default=3 Failed=1 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 4FE8B039C8CB6DE79A5B93ED819F7F12


(Omlouvám se, jsem si to zkoušel opravit sám ale akorát bych to asi zase rozesral )

Avatar uživatele
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8720
Registrován: 09 Pro 2006 06:19
Místo/Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#4 Příspěvek od cernohous13 »

Připravím script - jen otázka
používáš a musí ti běžet:
iPod ?
Bonjour ?
Klikni na https://www.virustotal.com/cs/
klik "Procházet" > do zadávacího pole "Název souboru" jen zkopíruj:

C:\WINDOWS\system32\nvgenco32.dll

"Send file" (pokud byl již testován, nech testovat znovu - Reanalyse)
Trpělivě vyčkej dokončení scanu dokud se neobjeví konečný výsledek např.0/41
Do fóra zkopíruj výsledný log. nebo odkaz z adresního řádku na stránku.
Pokud nebude nález stačí jen oznámit
totéž se souborem:
C:\WINDOWS\system32\nvdispco32.dll
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 Lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#5 Příspěvek od MadBull »

Chyba serveru!

Nastala vnitřní chyba a server nebyl schopen dokončit Váš požadavek. Buď je server přetížen, nebo došlo k chybě v CGI skriptu.

A stále dokola :x , Bonjour vůbec netuším co je a i Pod mám a používám jen nejsem nadšený že procesy na něj nabíhají hned po startu PC

Avatar uživatele
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8720
Registrován: 09 Pro 2006 06:19
Místo/Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#6 Příspěvek od cernohous13 »

jj, VT má problémy - otestuj zde http://virusscan.jotti.org/cs
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 Lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#7 Příspěvek od MadBull »

0 nálezů a počítač je po combofixu trošku plynulejší ale furt mi příjde že dosahuje tak 30% původního výkonu

Avatar uživatele
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8720
Registrován: 09 Pro 2006 06:19
Místo/Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#8 Příspěvek od cernohous13 »

Start -> spustit... - zadej services.msc
najdi iPod Service -> pravým "Vlastnosti" -> typ spouštění -> Ručně -> OK
:arrow: na ploše Beruška.com smaž příponu .exe
:arrow: Otevři Poznámkový blok (Notepad) a zkopíruj celý zelený text z "CFscriptu".
Soubor ulož na plochu jako CFscript.txt a jeho ikonu přetáhni myší nad ikonu Beruška - tam pusť.
Obrázek
ComboFix se spustí - počkej na log a vlož ho sem.
CF script

Kód: Vybrat vše

KillAll::

Driver::
WLSetupSvc
uokwveoka
MySQL
JavaQuickStarterService
SetupNTGLM7X
XDva344
Bonjour Service

Registry::
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=-
"AdobeCS4ServiceManager"=-
"Adobe Reader Speed Launcher"=-
"QuickTime Task"=-
"SunJavaUpdateSched"=-
"DivXUpdate"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
:arrow: vyčisti Ccleanerem
Stáhni Ccleaner - http://www.slunecnice.cz/sw/ccleaner/
Při instalaci vyhodit fajfku u "Instalovat Yahoo! Toolbar"

zavřít Internetový prohlížeč a
spustit "Čistič" > "Spustit Ccleaner" - odstraní nepotřebné
spustit "Registry" > "Hledej problémy" > "Opravit vybrané problémy"
souhlas se zálohou registrů - opakovat dokud nebudou registry čisté.
spustit "Nástroje" > "Start" - tady můžeš zkusit deaktivovat procesy, které při spuštění nepotřebuješ (pokud by ti potom něco nechodilo, stejným způsobem je povolíš)
Návod:http://jnp.zive.cz/Clanky/Prirucka-do-k ... fault.aspx
Ten si můžeš nechat i na budoucí občasné čištění.

:arrow: přidej aktuální RSIT po restartu
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 Lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#9 Příspěvek od MadBull »

ComboFix 10-11-23.05 - The F3@R 24.11.2010 20:24:05.3.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2047.1410 [GMT 1:00]
Spuštěný z: c:\documents and settings\The F3@R\Plocha\beruška.exe
Použité ovládací přepínače :: c:\documents and settings\The F3@R\Plocha\CFscript.txt.txt
AV: Norton 360 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BONJOUR_SERVICE
-------\Legacy_JAVAQUICKSTARTERSERVICE
-------\Legacy_MYSQL
-------\Legacy_SETUPNTGLM7X
-------\Legacy_UOKWVEOKA
-------\Legacy_WLSETUPSVC
-------\Legacy_XDVA344
-------\Service_Bonjour Service
-------\Service_JavaQuickStarterService
-------\Service_MySQL
-------\Service_SetupNTGLM7X
-------\Service_uokwveoka
-------\Service_WLSetupSvc
-------\Service_XDva344


((((((((((((((((((((((((( Soubory vytvořené od 2010-10-24 do 2010-11-24 )))))))))))))))))))))))))))))))
.

2010-11-24 16:26 . 2010-11-24 16:27 -------- d-----w- c:\program files\trend micro
2010-11-24 16:26 . 2010-11-24 16:27 -------- d-----w- C:\rsit
2010-11-24 15:04 . 2010-11-24 15:04 -------- d-----w- c:\documents and settings\The F3@R\Data aplikací\Nero
2010-11-24 14:49 . 2010-11-24 14:49 -------- d-----w- c:\program files\Nero
2010-11-23 18:53 . 2010-11-23 18:53 -------- d-----w- C:\N360_BACKUP
2010-11-23 18:43 . 2010-11-23 18:43 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
2010-11-23 18:43 . 2010-11-23 18:43 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2010-11-23 18:43 . 2010-11-23 18:43 -------- d-----w- c:\program files\Symantec
2010-11-23 18:41 . 2010-11-24 13:47 -------- d-----w- c:\windows\system32\drivers\N360
2010-11-23 18:41 . 2010-11-23 18:41 -------- d-----w- c:\program files\Norton 360
2010-11-23 18:41 . 2010-11-23 18:41 -------- d-----w- c:\program files\Windows Sidebar
2010-11-23 14:38 . 2010-11-23 18:52 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-11-23 14:35 . 2010-11-23 18:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Norton
2010-11-23 14:35 . 2010-11-23 14:35 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Symantec
2010-11-23 14:35 . 2010-11-24 04:26 -------- d-----w- c:\program files\NortonInstaller
2010-11-23 07:18 . 2010-11-23 07:18 -------- d-----w- c:\documents and settings\Jára.LINEAGE
2010-11-22 21:24 . 2010-11-22 21:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\DivX
2010-11-22 20:40 . 2010-11-22 20:40 -------- d-----w- c:\program files\YourWare Solutions
2010-11-22 19:52 . 2010-11-22 19:52 -------- d-----w- c:\program files\Lavalys
2010-11-22 19:43 . 2003-09-01 12:10 266240 ----a-w- c:\windows\system32\hpdj3600
2010-11-21 10:45 . 2010-11-21 10:45 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\O&O
2010-11-17 09:57 . 2010-11-17 09:57 -------- d-----w- c:\documents and settings\Guest
2010-11-15 18:31 . 2010-10-22 06:23 888424 ----a-w- c:\windows\system32\nvdispco32.dll
2010-11-15 18:31 . 2010-10-22 06:23 813672 ----a-w- c:\windows\system32\nvgenco32.dll
2010-11-14 18:06 . 2010-11-14 18:06 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\Activision
2010-11-11 22:39 . 2010-11-11 22:39 -------- d-----w- c:\windows\B83FC356B7C0441F8A4DD71E088E7974.TMP
2010-11-11 22:38 . 2010-11-11 22:38 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\Divinity 2
2010-11-11 22:37 . 2010-11-11 22:37 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Divinity 2
2010-11-11 22:24 . 2010-11-11 22:39 -------- d-----w- c:\program files\Divinity II - DKS
2010-11-09 08:33 . 2010-11-09 08:33 -------- d-sh--w- c:\documents and settings\Jára\PrivacIE
2010-11-03 17:30 . 2010-11-01 18:13 -------- d-----w- c:\documents and settings\The F3@R\Data aplikací\.minecraft
2010-10-28 18:37 . 2010-10-28 18:37 -------- d-----w- c:\program files\JoWooD Entertainment AG

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-22 06:23 . 2010-08-31 18:39 61440 ----a-w- c:\windows\system32\OpenCL.dll
2010-10-22 06:23 . 2008-07-26 10:48 14532608 ----a-w- c:\windows\system32\nvoglnt.dll
2010-10-22 06:23 . 2009-08-16 22:57 2932840 ----a-w- c:\windows\system32\nvcuvid.dll
2010-10-22 06:23 . 2009-08-16 22:57 2666600 ----a-w- c:\windows\system32\nvcuvenc.dll
2010-10-22 06:23 . 2008-07-26 10:48 4882432 ----a-w- c:\windows\system32\nvcuda.dll
2010-10-22 06:23 . 2010-08-31 18:39 13012992 ----a-w- c:\windows\system32\nvcompiler.dll
2010-10-22 06:23 . 2008-07-26 10:48 9623680 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2010-10-22 06:23 . 2008-07-26 10:48 6359552 ----a-w- c:\windows\system32\nv4_disp.dll
2010-10-22 06:23 . 2008-07-26 10:48 1462272 ----a-w- c:\windows\system32\nvapi.dll
2010-10-16 11:05 . 2010-10-16 11:05 81920 ----a-w- c:\windows\system32\nvwddi.dll
2010-10-16 11:05 . 2010-10-16 11:05 335872 ----a-w- c:\windows\system32\nvrsar.dll
2010-10-16 11:05 . 2010-10-16 11:05 331776 ----a-w- c:\windows\system32\nvrshe.dll
2010-10-16 11:05 . 2010-10-16 11:05 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrses.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrsel.dll
2010-10-16 11:05 . 2010-10-16 11:05 278528 ----a-w- c:\windows\system32\nvrsde.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsru.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2010-10-16 11:05 . 2010-10-16 11:05 266240 ----a-w- c:\windows\system32\nvrsko.dll
2010-10-16 11:05 . 2010-10-16 11:05 262144 ----a-w- c:\windows\system32\nvrshu.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrstr.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrssl.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrssk.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsth.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrssv.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsda.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrseng.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrscs.dll
2010-10-16 11:05 . 2010-10-16 11:05 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2010-10-16 11:05 . 2010-10-16 11:05 126976 ----a-w- c:\windows\system32\nvrszht.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrsit.dll
2010-10-16 11:05 . 2010-10-16 11:05 277608 ----a-w- c:\windows\system32\nvmccs.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrspt.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsja.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrspl.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsno.dll
2010-10-16 11:05 . 2010-10-16 11:05 156776 ----a-w- c:\windows\system32\nvsvc32.exe
2010-10-16 11:05 . 2010-10-16 11:05 145000 ----a-w- c:\windows\system32\nvcolor.exe
2010-10-16 11:05 . 2010-10-16 11:05 13851752 ----a-w- c:\windows\system32\nvcpl.dll
2010-10-16 11:05 . 2010-10-16 11:05 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-10-06 11:34 . 2010-08-16 14:32 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2010-10-06 11:34 . 2010-08-16 14:32 53632 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll
2010-10-06 11:34 . 2010-08-16 14:32 29568 ----a-w- c:\windows\system32\LMIport.dll
2010-10-06 11:34 . 2010-08-16 14:32 87424 ----a-w- c:\windows\system32\LMIinit.dll
2010-09-18 10:23 . 2004-08-18 12:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2004-08-18 12:00 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2004-08-18 12:00 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2004-08-18 12:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:52 . 2004-08-18 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 05:52 . 2004-08-18 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-09-10 05:52 . 2004-08-18 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:52 . 2004-08-18 12:00 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-09-01 07:57 . 2004-08-18 12:00 1852800 ----a-w- c:\windows\system32\win32k.sys
2010-08-27 08:03 . 2004-08-18 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:54 . 2004-08-18 12:00 99840 ----a-w- c:\windows\system32\srvsvc.dll
2010-08-27 01:43 . 2008-05-05 05:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-11-24_16.12.42 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-11-24 19:39 . 2010-11-24 19:39 16384 c:\windows\Temp\Perflib_Perfdata_498.dat
+ 2010-11-24 19:40 . 2010-11-24 19:40 16384 c:\windows\Temp\Perflib_Perfdata_258.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 81920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-09-27 16844800]
"tsnpstd3"="c:\windows\tsnpstd3.exe" [2005-12-20 94208]
"snpstd3"="c:\windows\vsnpstd3.exe" [2005-09-05 339968]
"Diamondback"="c:\program files\Razer\Diamondback 3G\razerhid.exe" [2007-08-01 147456]
"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2010-01-27 63048]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-07-21 141608]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-10-16 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-10-16 13851752]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-08-25 1753192]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableLockWorkstation"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2010-10-06 11:34 87424 ----a-w- c:\windows\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digest32.dll

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^0wwrine.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\0wwrine.exe
backup=c:\windows\pss\0wwrine.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6cnndez.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\6cnndez.exe
backup=c:\windows\pss\6cnndez.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6xnndj2.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\6xnndj2.exe
backup=c:\windows\pss\6xnndj2.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^86q81cn.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\86q81cn.exe
backup=c:\windows\pss\86q81cn.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9g1cyyt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\9g1cyyt.exe
backup=c:\windows\pss\9g1cyyt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9m1ieez.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\9m1ieez.exe
backup=c:\windows\pss\9m1ieez.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eaavmmhyyt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\eaavmmhyyt.exe
backup=c:\windows\pss\eaavmmhyyt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eezqqlcc.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\eezqqlcc.exe
backup=c:\windows\pss\eezqqlcc.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ez03gwrx.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\ez03gwrx.exe
backup=c:\windows\pss\ez03gwrx.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^faa6mm6yy6k.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\faa6mm6yy6k.exe
backup=c:\windows\pss\faa6mm6yy6k.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^g1cyytkkfw.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\g1cyytkkfw.exe
backup=c:\windows\pss\g1cyytkkfw.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^jjfvvrhhdtt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\jjfvvrhhdtt.exe
backup=c:\windows\pss\jjfvvrhhdtt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^k3g8cnoz.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\k3g8cnoz.exe
backup=c:\windows\pss\k3g8cnoz.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^llhxxtjjfvv.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\llhxxtjjfvv.exe
backup=c:\windows\pss\llhxxtjjfvv.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^pfl66sddtup.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\pfl66sddtup.exe
backup=c:\windows\pss\pfl66sddtup.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^qq6cc6ejf.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\qq6cc6ejf.exe
backup=c:\windows\pss\qq6cc6ejf.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rrnddzpplbb.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\rrnddzpplbb.exe
backup=c:\windows\pss\rrnddzpplbb.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rx5ny2zp.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\rx5ny2zp.exe
backup=c:\windows\pss\rx5ny2zp.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^s6ee6qq6.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\s6ee6qq6.exe
backup=c:\windows\pss\s6ee6qq6.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ull2rhid.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\ull2rhid.exe
backup=c:\windows\pss\ull2rhid.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytk.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytk.exe
backup=c:\windows\pss\vmmhyytk.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytkkfw.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytkkfw.exe
backup=c:\windows\pss\vmmhyytkkfw.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^wwriiduu.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\wwriiduu.exe
backup=c:\windows\pss\wwriiduu.exeStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 10:44 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
2007-02-20 12:06 741376 ----a-w- c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Hry\\Beefko2\\Battlefield 2\\BF2.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Hry\\Valve\\cstrike.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Graphisoft\\ArchiCAD 12\\ArchiCAD.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"c:\\WINDOWS\\system32\\nvsvc32.exe"=
"c:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"=
"c:\\Program Files\\Warcraft III\\Warcraft III.exe"=
"c:\\Coexistence\\balicek pro loader\\loader\\loader.exe"=
"c:\\Program Files\\THQ\\Dawn of War - Dark Crusade\\DarkCrusade.exe"=
"c:\\Program Files\\Garena\\Garena.exe"=
"c:\\Program Files\\Electronic Arts\\Battlefield Bad Company 2\\BFBC2Updater.exe"=
"c:\\Program Files\\TmUnitedForever\\TmForever.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Program Files\\Team Fortress 2\\hl2.exe"=
"c:\\Program Files\\Activision\\Blur(TM)\\Blur.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\Ubisoft\\Demo\\Tom Clancy's H.A.W.X\\HAWX.exe"=
"c:\\Program Files\\Ubisoft\\Tom Clancy's H.A.W.X\\HAWX.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe"=
"c:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Ventrilo\\Ventrilo.exe"=
"c:\\Documents and Settings\\The F3@R\\Plocha\\CS.S\\Counter-Strike Source\\hl2.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"4719:TCP"= 4719:TCP:4719
"58452:TCP"= 58452:TCP:Pando Media Booster
"58452:UDP"= 58452:UDP:Pando Media Booster

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [19.9.2008 14:38 721904]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360\0402000.00C\symds.sys [24.11.2010 5:39 328752]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\0402000.00C\symefa.sys [24.11.2010 5:39 173104]
R1 appdrv01;Application Driver (01);c:\windows\system32\drivers\appdrv01.sys [28.10.2009 23:27 2915944]
R1 BHDrvx86;BHDrvx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20101104.001\BHDrvx86.sys [4.11.2010 15:02 691248]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360\0402000.00C\cchpx86.sys [24.11.2010 5:39 501888]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [19.8.2010 9:28 142592]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360\0402000.00C\ironx86.sys [24.11.2010 5:39 116784]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn\x86\LMIGuardianSvc.exe [21.10.2010 15:25 374152]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\rainfo.sys [27.1.2010 11:22 12856]
R2 N360;Norton 360;c:\program files\Norton 360\Engine\4.2.0.12\ccsvchst.exe [24.11.2010 5:38 126392]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [23.11.2010 19:57 102448]
R3 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20101122.006\IDSXpx86.sys [24.11.2010 8:30 341944]
R3 radpms;Driver for RADPMS Device;c:\windows\system32\drivers\radpms.sys [18.5.2010 15:54 13408]
R3 Razerlow;Diamondback 3G USB Filter Driver;c:\windows\system32\drivers\DB3G.sys [25.8.2009 11:42 13225]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc --> c:\windows\System32\appdrvrem01.exe svc [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp --> c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp [?]
S3 PsSdk40;PsSdk40;c:\windows\system32\drivers\pssdk40.sys [18.12.2008 18:02 36928]
S3 PsSdkLBF;PsSdkLBF;c:\windows\system32\drivers\pssdklbf.sys [18.12.2008 18:02 53312]
S3 tap0901_2gm;VPN Anonymizer Adapter;c:\windows\system32\drivers\tap0901_2gm.sys [21.6.2007 16:21 30720]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys --> c:\windows\system32\DRIVERS\wdcsam.sys [?]
.
Obsah adresáře 'Naplánované úlohy'

2010-11-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50]

2010-11-24 c:\windows\Tasks\User_Feed_Synchronization-{2606D27B-C854-4676-AD4B-67D6EED0B35B}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

2010-11-24 c:\windows\Tasks\User_Feed_Synchronization-{F459FEEF-323E-47EB-944B-928F406D5428}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://fullarticles.net
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Get Styles\ct.htm
FF - ProfilePath - c:\documents and settings\The F3@R\Data aplikací\Mozilla\Firefox\Profiles\42j9amxb.default\
FF - prefs.js: browser.startup.homepage - hxxp://search-styles.com/
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-24 20:40
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\N360]
"ImagePath"="\"c:\program files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\4.2.0.12\diMaster.dll\" /prefetch:1"

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:3d,ec,eb,de,c3,d3,e7,2a,b6,62,dd,ee,6b,68,ed,7d,99,7a,6e,71,1e,f0,d3,
e2,7e,06,5f,0b,2b,96,db,58,f1,ba,fd,66,8f,d2,3b,25,3b,e6,1e,bc,f2,23,b4,55,\
"??"=hex:a7,61,c4,92,34,60,18,e8,7c,ea,92,73,36,ea,44,87

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:97,2b,dd,90,c9,e0,d2,72,e9,ea,5d,7f,45,13,e6,13,50,fc,b1,e8,5c,
7d,b0,9b,95,d8,f4,02,36,5d,84,95,f0,8e,24,6f,21,92,27,c7,61,ea,f4,4a,65,61,\
"rkeysecu"=hex:9b,ad,47,3a,89,d5,35,7c,e1,b5,1d,6e,51,d3,bb,ea

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG12.00.00.01PROFESSIONAL"="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"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(888)
c:\windows\system32\LMIinit.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
c:\windows\system32\LMIRfsClientNP.dll

- - - - - - - > 'explorer.exe'(2668)
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
c:\windows\system32\LMIRfsClientNP.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\LogMeIn\x86\RaMaint.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\program files\NVIDIA Corporation\nTune\nTuneService.exe
c:\program files\Sandboxie\SbieSvc.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\program files\Razer\Diamondback 3G\razertra.exe
c:\program files\Razer\Diamondback 3G\razerofa.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Celkový čas: 2010-11-24 20:46:13 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-24 19:46
ComboFix2.txt 2010-11-24 16:18

Před spuštěním: Volných bajtů: 259 544 506 368
Po spuštění: Volných bajtů: 259 523 915 776

Current=3 Default=3 Failed=1 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 2F6A457B6B745ACFC1B087373D45F8A7

Zatím combonaut, tedka jeste mazu pres CC cleaner

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 Lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#10 Příspěvek od MadBull »

Logfile of random's system information tool 1.08 (written by random/random)
Run by The F3@R at 2010-11-24 21:10:02
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 248 GB (41%) free of 610 GB
Total RAM: 2047 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:10:10, on 24.11.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\tsnpstd3.exe
C:\Program Files\Razer\Diamondback 3G\razerhid.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Razer\Diamondback 3G\razertra.exe
C:\Program Files\Razer\Diamondback 3G\razerofa.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\The F3@R\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The F3@R\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The F3@R\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The F3@R\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The F3@R\Dokumenty\Downloads\RSIT (1).exe
C:\Program Files\trend micro\The F3@R.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fullarticles.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.2.0.12\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [Diamondback] C:\Program Files\Razer\Diamondback 3G\razerhid.exe
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 8506 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{2606D27B-C854-4676-AD4B-67D6EED0B35B}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{F459FEEF-323E-47EB-944B-928F406D5428}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll [2010-05-13 394608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton 360\Engine\4.2.0.12\IPSBHO.DLL [2009-11-17 79224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll [2010-05-13 394608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-09-27 16844800]
"tsnpstd3"=C:\WINDOWS\tsnpstd3.exe [2005-12-20 94208]
"snpstd3"=C:\WINDOWS\vsnpstd3.exe [2005-09-05 339968]
"Diamondback"=C:\Program Files\Razer\Diamondback 3G\razerhid.exe [2007-08-01 147456]
"LogMeIn GUI"=C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [2010-01-27 63048]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-07-21 141608]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-10-16 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-10-16 13851752]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-08-26 1753192]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"=C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe [2007-09-04 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2007-02-20 741376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^0wwrine.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\0wwrine.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6cnndez.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\6cnndez.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6xnndj2.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\6xnndj2.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^86q81cn.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\86q81cn.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9g1cyyt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\9g1cyyt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9m1ieez.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\9m1ieez.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eaavmmhyyt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\eaavmmhyyt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eezqqlcc.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\eezqqlcc.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ez03gwrx.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\ez03gwrx.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^faa6mm6yy6k.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\faa6mm6yy6k.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^g1cyytkkfw.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\g1cyytkkfw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^jjfvvrhhdtt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\jjfvvrhhdtt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^k3g8cnoz.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\k3g8cnoz.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^llhxxtjjfvv.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\llhxxtjjfvv.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^pfl66sddtup.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\pfl66sddtup.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^qq6cc6ejf.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\qq6cc6ejf.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rrnddzpplbb.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\rrnddzpplbb.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rx5ny2zp.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\rx5ny2zp.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^s6ee6qq6.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\s6ee6qq6.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ull2rhid.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\ull2rhid.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytk.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytk.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytkkfw.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytkkfw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^wwriiduu.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\wwriiduu.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2010-10-06 87424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digest32.dll

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Hry\Beefko2\Battlefield 2\BF2.exe"="C:\Hry\Beefko2\Battlefield 2\BF2.exe:*:Enabled:BF2"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Hry\Valve\cstrike.exe"="C:\Hry\Valve\cstrike.exe:*:Enabled:Counter-Strike Launcher"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Graphisoft\ArchiCAD 12\ArchiCAD.exe"="C:\Program Files\Graphisoft\ArchiCAD 12\ArchiCAD.exe:*:Enabled:ArchiCAD 12.0.0 Component"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\WINDOWS\system32\nvsvc32.exe"="C:\WINDOWS\system32\nvsvc32.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\wbem\wmiprvse.exe"="C:\WINDOWS\system32\wbem\wmiprvse.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Coexistence\balicek pro loader\loader\loader.exe"="C:\Coexistence\balicek pro loader\loader\loader.exe:*:Enabled:CzechGamers Server AutoUpdater"
"C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe"="C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe:*:Enabled:DarkCrusade"
"C:\Program Files\Garena\Garena.exe"="C:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"C:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="C:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"C:\Program Files\TmUnitedForever\TmForever.exe"="C:\Program Files\TmUnitedForever\TmForever.exe:*:Enabled:TmForever"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\Team Fortress 2\hl2.exe"="C:\Program Files\Team Fortress 2\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Activision\Blur(TM)\Blur.exe"="C:\Program Files\Activision\Blur(TM)\Blur.exe:*:Enabled:Blur"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Ubisoft\Demo\Tom Clancy's H.A.W.X\HAWX.exe"="C:\Program Files\Ubisoft\Demo\Tom Clancy's H.A.W.X\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"
"C:\Program Files\Ubisoft\Tom Clancy's H.A.W.X\HAWX.exe"="C:\Program Files\Ubisoft\Tom Clancy's H.A.W.X\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Ventrilo\Ventrilo.exe"="C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe"
"C:\Documents and Settings\The F3@R\Plocha\CS.S\Counter-Strike Source\hl2.exe"="C:\Documents and Settings\The F3@R\Plocha\CS.S\Counter-Strike Source\hl2.exe:*:Enabled:hl2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\WINDOWS\system32\services.exe"="C:\WINDOWS\system32\services.exe:*:Enabled:@xpsp2res.dll,-22019"
"\??\C:\WINDOWS\system32\winlogon.exe"="\??\C:\WINDOWS\system32\winlogon.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\nvsvc32.exe"="C:\WINDOWS\system32\nvsvc32.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\wbem\wmiprvse.exe"="C:\WINDOWS\system32\wbem\wmiprvse.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\lsass.exe"="C:\WINDOWS\system32\lsass.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

======List of files/folders created in the last 1 months======

2010-11-24 21:04:15 ----SHD---- C:\RECYCLER
2010-11-24 20:46:14 ----A---- C:\ComboFix.txt
2010-11-24 17:26:49 ----D---- C:\Program Files\trend micro
2010-11-24 17:26:44 ----D---- C:\rsit
2010-11-24 16:50:47 ----A---- C:\WINDOWS\MBR.exe
2010-11-24 16:16:42 ----ASH---- C:\pagefile.sys
2010-11-24 16:04:24 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\Nero
2010-11-24 15:49:03 ----D---- C:\Program Files\Nero
2010-11-23 19:53:33 ----D---- C:\N360_BACKUP
2010-11-23 19:43:21 ----D---- C:\Program Files\Symantec
2010-11-23 19:43:21 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2010-11-23 19:43:21 ----A---- C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2010-11-23 19:41:12 ----D---- C:\WINDOWS\system32\drivers\N360
2010-11-23 19:41:05 ----D---- C:\Program Files\Windows Sidebar
2010-11-23 19:41:05 ----D---- C:\Program Files\Norton 360
2010-11-23 15:38:27 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-11-23 15:35:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2010-11-23 15:35:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2010-11-23 15:35:10 ----D---- C:\Program Files\NortonInstaller
2010-11-23 15:35:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2010-11-22 22:24:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2010-11-22 21:40:06 ----D---- C:\Program Files\YourWare Solutions
2010-11-22 21:26:01 ----D---- C:\WINDOWS\pss
2010-11-22 20:52:00 ----D---- C:\Program Files\Lavalys
2010-11-21 11:25:41 ----A---- C:\WINDOWS\UPGRADE.TXT
2010-11-15 19:31:44 ----A---- C:\WINDOWS\system32\nvgenco32.dll
2010-11-15 19:31:44 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2010-11-11 23:39:06 ----D---- C:\WINDOWS\B83FC356B7C0441F8A4DD71E088E7974.TMP
2010-11-11 23:37:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Divinity 2
2010-11-11 23:24:14 ----D---- C:\Program Files\Divinity II - DKS
2010-11-03 18:30:34 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\.minecraft
2010-10-28 19:37:11 ----D---- C:\Program Files\JoWooD Entertainment AG

======List of files/folders modified in the last 1 months======

2010-11-24 21:10:03 ----AD---- C:\WINDOWS\Temp
2010-11-24 21:04:15 ----D---- C:\WINDOWS\Minidump
2010-11-24 21:04:15 ----D---- C:\WINDOWS\Debug
2010-11-24 21:04:15 ----D---- C:\WINDOWS
2010-11-24 20:53:47 ----D---- C:\Program Files\CCleaner
2010-11-24 20:46:17 ----D---- C:\WINDOWS\system32\drivers
2010-11-24 20:46:17 ----D---- C:\Qoobox
2010-11-24 20:44:19 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-24 20:41:24 ----A---- C:\WINDOWS\system.ini
2010-11-24 20:39:41 ----D---- C:\WINDOWS\system32\drivers\etc
2010-11-24 20:35:51 ----D---- C:\WINDOWS\system32\config
2010-11-24 20:34:37 ----D---- C:\WINDOWS\ERDNT
2010-11-24 20:31:33 ----D---- C:\WINDOWS\system32
2010-11-24 20:31:33 ----D---- C:\WINDOWS\AppPatch
2010-11-24 20:31:30 ----D---- C:\Program Files\Common Files
2010-11-24 20:16:55 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-11-24 17:26:49 ----RD---- C:\Program Files
2010-11-24 17:17:14 ----SD---- C:\WINDOWS\Tasks
2010-11-24 16:49:23 ----D---- C:\ComboFix
2010-11-24 16:35:27 ----D---- C:\WINDOWS\Microsoft.NET
2010-11-24 16:35:13 ----RSD---- C:\WINDOWS\assembly
2010-11-24 16:04:58 ----SHD---- C:\WINDOWS\Installer
2010-11-24 09:18:29 ----D---- C:\Program Files\TNod User & Password Finder
2010-11-24 07:12:01 ----D---- C:\WINDOWS\Prefetch
2010-11-24 05:27:41 ----SHD---- C:\System Volume Information
2010-11-24 05:26:57 ----D---- C:\Program Files\LogMeIn
2010-11-23 19:40:49 ----D---- C:\WINDOWS\WinSxS
2010-11-23 08:18:45 ----D---- C:\Documents and Settings
2010-11-22 22:26:45 ----D---- C:\Program Files\DivX
2010-11-22 22:26:42 ----D---- C:\Program Files\Common Files\DivX Shared
2010-11-22 22:15:26 ----ASH---- C:\boot.ini
2010-11-22 21:28:18 ----A---- C:\WINDOWS\win.ini
2010-11-22 21:22:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-11-22 21:20:24 ----D---- C:\Program Files\Spyware Terminator
2010-11-22 21:11:53 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\Spyware Terminator
2010-11-22 20:44:42 ----HD---- C:\WINDOWS\inf
2010-11-22 20:44:25 ----A---- C:\WINDOWS\hpdj3600.ini
2010-11-22 20:44:15 ----D---- C:\Program Files\Hewlett-Packard
2010-11-22 20:42:46 ----D---- C:\Program Files\Get Styles
2010-11-21 11:20:19 ----D---- C:\WINDOWS\system32\Restore
2010-11-20 12:08:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-11-20 12:02:04 ----A---- C:\WINDOWS\system32\MRT.exe
2010-11-19 16:39:06 ----D---- C:\Program Files\R.G. Mechanics
2010-11-19 16:38:25 ----HD---- C:\Program Files\InstallShield Installation Information
2010-11-19 16:34:37 ----D---- C:\Program Files\Common Files\BioWare
2010-11-19 16:33:19 ----D---- C:\Program Files\Frets on Fire
2010-11-19 16:32:34 ----D---- C:\Program Files\Outspark
2010-11-17 15:03:03 ----D---- C:\Program Files\Mozilla Firefox
2010-11-17 11:41:23 ----D---- C:\All my music
2010-11-16 14:00:38 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-15 21:05:25 ----D---- C:\totalcmd
2010-11-15 21:05:25 ----D---- C:\Program Files\Lineage II
2010-11-15 19:33:32 ----D---- C:\WINDOWS\Help
2010-11-15 19:33:12 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-11-15 19:31:52 ----D---- C:\Program Files\NVIDIA Corporation
2010-11-15 17:16:46 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\uTorrent
2010-11-14 17:59:36 ----D---- C:\Program Files\Activision
2010-11-11 20:34:28 ----D---- C:\Program Files\Cheat Engine
2010-11-11 20:20:54 ----D---- C:\Program Files\WinClamAVShield
2010-11-07 08:11:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-28 19:59:41 ----D---- C:\WINDOWS\system32\DirectX
2010-10-25 16:45:19 ----D---- C:\Program Files\Team Fortress 2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\System32\Drivers\vbtenum.sys [2007-03-05 20880]
R0 BTHidMgr;Bluetooth HID Manager Service; C:\WINDOWS\System32\Drivers\BTHidMgr.sys [2007-03-05 35600]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-05-01 43528]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-08-06 721904]
R0 SymDS;Symantec Data Store; C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMDS.SYS [2009-10-15 328752]
R0 SymEFA;Symantec Extended File Attributes; C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMEFA.SYS [2010-04-22 173104]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2008-10-02 82380]
R1 appdrv01;Application Driver (01); C:\WINDOWS\System32\Drivers\appdrv01.sys [2009-10-28 2915944]
R1 BHDrvx86;BHDrvx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20101104.001\BHDrvx86.sys []
R1 ccHP;Symantec Hash Provider; C:\WINDOWS\system32\drivers\N360\0402000.00C\ccHPx86.sys [2010-02-26 501888]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys []
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\WINDOWS\system32\drivers\N360\0402000.00C\SRTSPX.SYS [2010-04-22 43696]
R1 SymIRON;Symantec Iron Driver; C:\WINDOWS\system32\drivers\N360\0402000.00C\Ironx86.SYS [2010-04-29 116784]
R1 SYMTDI;Symantec Network Dispatch Driver; C:\WINDOWS\System32\Drivers\N360\0402000.00C\SYMTDI.SYS [2010-05-06 361904]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-10-20 281760]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-10-20 25888]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R2 npkcrypt;npkcrypt; \??\C:\Hry\Czechgamers\system\npkcrypt.sys []
R3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2007-05-11 34704]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2007-03-05 27792]
R3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2007-03-05 18320]
R3 catchme;catchme; \??\C:\beruška\catchme.sys []
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-09-28 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20101122.006\IDSxpx86.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-10-02 4613120]
R3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [2010-01-27 10144]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-10-22 9623680]
R3 NVR0Dev;NVR0Dev; \??\C:\WINDOWS\nvoclock.sys []
R3 radpms;Driver for RADPMS Device; C:\WINDOWS\system32\DRIVERS\radpms.sys [2010-05-18 13408]
R3 Razerlow;Diamondback 3G USB Filter Driver; C:\WINDOWS\System32\Drivers\DB3G.sys [2005-04-24 13225]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-18 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-10-03 102656]
R3 SbieDrv;SbieDrv; \??\C:\Program Files\Sandboxie\SbieDrv.sys []
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2005-12-08 8718848]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-04-19 41984]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2007-03-05 34448]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2007-03-05 44304]
S3 aenyn9qr;aenyn9qr; C:\WINDOWS\system32\drivers\aenyn9qr.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2007-05-09 36496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp []
S3 GMSIPCI;GMSIPCI; C:\WINDOWS\system32\drivers\GMSIPCI.sys []
S3 mbr;mbr; \??\C:\DOCUME~1\THEF3@~1\LOCALS~1\Temp\mbr.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMP50.sys []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMP50a64.sys []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMPR5.sys []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRENDIS5.sys []
S3 MRESP50;MRESP50 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRESP50.sys []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRESP50a64.sys []
S3 MSICPL;MSICPL; C:\WINDOWS\system32\drivers\MSICPL.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20101123.051\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20101123.051\NAVEX15.SYS []
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NTACCESS;NTACCESS; C:\WINDOWS\system32\drivers\NTACCESS.sys []
S3 PsSdk40;PsSdk40; \??\C:\WINDOWS\system32\Drivers\pssdk40.sys []
S3 PsSdkLBF;PsSdkLBF; \??\C:\WINDOWS\system32\Drivers\pssdklbf.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 s616bus;Sony Ericsson Device 616 driver (WDM); C:\WINDOWS\system32\DRIVERS\s616bus.sys [2007-04-03 83208]
S3 s616mdfl;Sony Ericsson Device 616 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s616mdfl.sys [2007-04-03 15112]
S3 s616mdm;Sony Ericsson Device 616 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s616mdm.sys [2007-04-03 108680]
S3 s616mgmt;Sony Ericsson Device 616 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s616mgmt.sys [2007-04-03 100360]
S3 s616nd5;Sony Ericsson Device 616 USB Ethernet Emulation SEMC616 (NDIS); C:\WINDOWS\system32\DRIVERS\s616nd5.sys [2007-04-03 23176]
S3 s616obex;Sony Ericsson Device 616 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s616obex.sys [2007-04-03 98568]
S3 s616unic;Sony Ericsson Device 616 USB Ethernet Emulation SEMC616 (WDM); C:\WINDOWS\system32\DRIVERS\s616unic.sys [2007-04-03 99080]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SRTSP;Symantec Real Time Storage Protection; C:\WINDOWS\System32\Drivers\N360\0402000.00C\SRTSP.SYS [2010-04-22 325680]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 tap0901_2gm;VPN Anonymizer Adapter; C:\WINDOWS\system32\DRIVERS\tap0901_2gm.sys [2007-06-21 30720]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 w200bus;Sony Ericsson W200 driver (WDM); C:\WINDOWS\system32\DRIVERS\w200bus.sys [2006-11-07 61504]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe [2010-09-27 374152]
R2 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2010-10-06 116104]
R2 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2010-01-27 63040]
R2 N360;Norton 360; C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe [2010-02-26 126392]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
R2 nTuneService;nTune Service; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [2007-09-04 131072]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-10-16 156776]
R2 SbieSvc;Sandboxie Service; C:\Program Files\Sandboxie\SbieSvc.exe [2009-09-30 65024]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-08-19 488960]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-21 540968]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\WINDOWS\System32\appdrvrem01.exe [2009-10-28 304528]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-04-06 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------


RSIT

Avatar uživatele
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8720
Registrován: 09 Pro 2006 06:19
Místo/Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#11 Příspěvek od cernohous13 »

:arrow: Otevři Poznámkový blok
Start -> Spustit -> napiš "notepad" -> OK
Zkopíruj a vlož zelený text

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
Soubor ulož jako oprava.reg
Při ukládání dej uložit jako typ Všechny soubory (nastavení je uvedeno na obrázku níže)
Obrázek
Zavři notepad a spusť dvojklikem oprava.reg
Dotaz na změnu registru potvrdit
Okno jen problikne a opraví registry - soubor můžeš smazat

:???: Určitě jsi dal v Ccleaneru vyčistit registry?
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 Lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#12 Příspěvek od MadBull »

Tak hotovo, v prostředí Windows je to už daleko plynulejší i programy nabíhají lépe ale stále Windows nabíhají strašně dlouho a načítání nových dat (loadingy u her a podobně) jsou stále nepřirozeně dlouhé, nemám chybu někde v Harddisku? nedávno na mě vyběhla hláška o nějakých vadných sektorech :/

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 Lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#13 Příspěvek od MadBull »

Registry jsem čistil ale dva nejdou opravit pokaždé se objeví znovu, Norton360 Rscan.dll a ibackuplocationsshellfolrderimpl

Avatar uživatele
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8720
Registrován: 09 Pro 2006 06:19
Místo/Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#14 Příspěvek od cernohous13 »

:arrow: Start - Spustit - napiš cmd Ok
do černého okna napiš příkaz chkdsk /f/r -> "Enter"
souhlas - restart - proběhne kontrola a případná oprava chyb HDD.
stáhni a spusť http://www.stahuj.centrum.cz/utility_a_ ... hd-tune-2/
klik -> Error scan -> start
výsledek po dokončení oznam.
:arrow: nový RSIT ať vidím jestli zmizely ty vadné záznamy v registrech
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 Lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#15 Příspěvek od MadBull »

HD Scan (quick) Naprosto v pořádku všechno zelený ale u chkdsk nastal problém ve čtvrté fázi z pěti trvá jedno procento hodinu, nevydržel jsem to a restartoval PC, dříve mi stejne chkdsk proběhl behem 20ti minut :X . Ještě mě napadá chvíli před tím než se to podělalo jsem mazal a přidával uživatelské účty ale když nějaký smažu stejně po něm zůstanou na disku data, neexistuje neco co by ho absolutně smazalo? manuálně v documents and settings to nejde

Odpovědět