Help
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Help
prosim o kontrolu logu ide mi dost pomaly pc dlho zapina windows kontrolu cez eset som maval hotovu za 45 minut teraz mam este dost volneho miesta na disku a robi mi to vyse hodinu
alebo aj programi hocikedy zamrznu a neviem preco pri pripojeni mobilu alebo usb do pc mi stale vyhadzuje virusy a pritom usb je uplne prazdne a v mobile nemam urcite virus nic nove som tam nedaval a predtym mi nic nevyhadzovalo
tu je log
Logfile of random's system information tool 1.08 (written by random/random)
Run by Branislav at 2010-12-22 22:15:24
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 11 GB (15%) free of 76 GB
Total RAM: 1535 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:15:28, on 22.12.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\TP-LINK\TWCU\TWCU.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Branislav\My Documents\Preberanie\RSIT.exe
C:\Program Files\trend micro\Branislav.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: CentrumczToolbar BHO - {33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
R3 - URLSearchHook: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: CentrumczToolbar BHO - {33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
O2 - BHO: Softonic-Eng7 - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: Lišta Centrum.cz Toolbar - {D5D47440-0750-463D-BAEF-A47D02414806} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
O3 - Toolbar: VDownloader Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [TWCU] "C:\Program Files\TP-LINK\TWCU\TWCU.exe" -nogui
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (HKCU)
O18 - Protocol: centrumcztoolbar - {61A97628-7C82-4315-957A-C74C2CDD85DF} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: TP-LINK Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
--
End of file - 8504 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\expressburnSevenDaysInit.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
Yahoo! Companion BHO
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
AC-Pro - C:\Program Files\AutocompletePro\AutocompletePro.dll [2010-07-14 97760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-13 3913000]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A}]
CentrumczToolbar BHO - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2010-03-26 1286448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\tbSoft.dll [2010-11-13 3913000]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
VDownloader Toolbar
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} -
{D5D47440-0750-463D-BAEF-A47D02414806} - Lišta Centrum.cz Toolbar - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2010-03-26 1286448]
{D4027C7F-154A-4066-A1AD-4243D8127440} -
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\tbSoft.dll [2010-11-13 3913000]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-13 3913000]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-11-14 16270848]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"TWCU"=C:\Program Files\TP-LINK\TWCU\TWCU.exe [2005-08-09 413696]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2008-04-04 88584]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-01-15 37376]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-02-27 155648]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-11-08 2219184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-08-26 159744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb"
"C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray"
"C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe:*:Enabled:Pro Evolution Soccer 2011"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Activision\Call of Duty - Black Ops\BlackOps.exe"="C:\Program Files\Activision\Call of Duty - Black Ops\BlackOps.exe:*:Enabled:BlackOps"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\Program Files\Cisco Packet Tracer 5.3.1\bin\PacketTracer5.exe"="C:\Program Files\Cisco Packet Tracer 5.3.1\bin\PacketTracer5.exe:*:Enabled:PacketTracer5"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2011\osp2011.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2011\osp2011.exe:*:Enabled:Pro Evolution Soccer 2011"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2010-12-22 22:15:24 ----D---- C:\rsit
2010-12-22 17:16:40 ----D---- C:\Documents and Settings\All Users\Application Data\CentrumczToolbar
2010-12-22 17:16:38 ----D---- C:\Program Files\CentrumczToolbar
2010-12-20 14:26:21 ----D---- C:\Program Files\BUNKBOYZ
2010-12-19 19:35:22 ----D---- C:\Program Files\Conduit
2010-12-19 19:35:14 ----D---- C:\Program Files\ConduitEngine
2010-12-19 19:35:09 ----D---- C:\Program Files\Softonic-Eng7
2010-12-17 10:55:50 ----D---- C:\Documents and Settings\All Users\Application Data\DVD Shrink
2010-12-16 09:31:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2010-12-16 09:31:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2010-12-16 09:31:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2010-12-16 09:31:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2010-12-16 09:31:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2010-12-16 09:31:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2010-12-16 09:30:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2416400$
2010-12-16 09:28:28 ----A---- C:\WINDOWS\imsins.BAK
2010-12-16 09:28:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2010-12-12 15:58:32 ----D---- C:\Program Files\ESET
2010-12-11 15:25:09 ----D---- C:\Program Files\Cisco Packet Tracer 5.3.1
2010-11-27 17:39:16 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-11-27 17:37:51 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2010-11-27 12:55:02 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2010-11-26 19:26:58 ----D---- C:\Program Files\Activision
======List of files/folders modified in the last 1 months======
2010-12-22 22:15:26 ----D---- C:\Program Files\trend micro
2010-12-22 22:15:12 ----D---- C:\WINDOWS\temp
2010-12-22 22:01:40 ----D---- C:\WINDOWS\Prefetch
2010-12-22 20:30:50 ----A---- C:\WINDOWS\NeroDigital.ini
2010-12-22 19:52:55 ----D---- C:\WINDOWS
2010-12-22 18:44:54 ----D---- C:\Program Files\VDownloader
2010-12-22 17:23:09 ----D---- C:\Documents and Settings\Branislav\Application Data\Mozilla
2010-12-22 17:16:48 ----D---- C:\Program Files\Mozilla Firefox
2010-12-22 17:16:38 ----D---- C:\Program Files
2010-12-22 16:49:06 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-22 15:32:55 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-21 15:02:05 ----D---- C:\Program Files\KONAMI
2010-12-21 14:56:17 ----SHD---- C:\WINDOWS\Installer
2010-12-21 14:56:09 ----D---- C:\Documents and Settings\All Users\Application Data\KONAMI
2010-12-21 11:57:14 ----SD---- C:\Documents and Settings\Branislav\Application Data\Microsoft
2010-12-21 11:51:21 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-12-21 11:51:08 ----D---- C:\WINDOWS\system32
2010-12-21 11:48:36 ----D---- C:\Program Files\NCH Swift Sound
2010-12-21 11:42:33 ----D---- C:\Documents and Settings\All Users\Application Data\IconTweaker
2010-12-20 13:03:54 ----D---- C:\Program Files\Magic Video Converter
2010-12-19 16:41:16 ----D---- C:\Documents and Settings\Branislav\Application Data\Skype
2010-12-19 16:18:49 ----D---- C:\Documents and Settings\Branislav\Application Data\skypePM
2010-12-17 18:21:45 ----D---- C:\Documents and Settings\Branislav\Application Data\vlc
2010-12-17 10:09:59 ----HD---- C:\WINDOWS\inf
2010-12-16 09:31:35 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-12-16 09:31:23 ----D---- C:\WINDOWS\system32\drivers
2010-12-16 09:31:21 ----HD---- C:\WINDOWS\$hf_mig$
2010-12-16 09:28:35 ----A---- C:\WINDOWS\system32\MRT.exe
2010-12-16 09:28:24 ----D---- C:\Program Files\Outlook Express
2010-12-12 15:54:43 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2010-12-10 22:44:01 ----SD---- C:\WINDOWS\Tasks
2010-11-28 13:50:57 ----D---- C:\WINDOWS\system32\DirectX
2010-11-28 13:50:29 ----RSD---- C:\WINDOWS\assembly
2010-11-28 13:50:02 ----HD---- C:\Program Files\InstallShield Installation Information
2010-11-27 17:50:22 ----D---- C:\Program Files\ATI
2010-11-27 17:49:34 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-11-27 17:41:45 ----D---- C:\Program Files\ATI Technologies
2010-11-27 17:39:16 ----D---- C:\Program Files\Common Files
2010-11-27 17:14:08 ----D---- C:\WINDOWS\Minidump
2010-11-27 14:45:10 ----D---- C:\WINDOWS\system32\config
2010-11-27 12:22:59 ----D---- C:\WINDOWS\WinSxS
2010-11-27 09:01:10 ----D---- C:\WINDOWS\SoftwareDistribution
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-01-15 611064]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-08-03 55256]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.2.0.3; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-01-14 17801]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-08-04 140752]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-07-29 134512]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-08-26 5386752]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-07-29 32608]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-15 4225920]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2010-03-08 47360]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-12-14 85120]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 vaxscsi;vaxscsi; C:\WINDOWS\System32\Drivers\vaxscsi.sys [2010-01-15 223128]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2008-01-24 19336]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2008-01-24 28168]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2008-01-24 14728]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2008-01-24 48904]
S3 AR5211;TP-LINK Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2005-06-25 463168]
S3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2007-07-20 84992]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-01-24 25280]
S3 k510bus;Sony Ericsson K510 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\k510bus.sys [2010-02-09 58288]
S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k510mdfl.sys [2010-02-09 8336]
S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\k510mdm.sys [2010-02-09 94064]
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:\WINDOWS\system32\DRIVERS\s115bus.sys [2007-04-23 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s115mdfl.sys [2007-04-23 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s115mdm.sys [2007-04-23 108680]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ACS;TP-LINK Configuration Service; C:\WINDOWS\system32\acs.exe [2005-05-05 36864]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-08-26 606208]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-11-08 810144]
R2 StarWindService;StarWind iSCSI Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [2005-04-02 217600]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2010-02-04 603904]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-06-06 520192]
S2 vvdsvc;VJVodClientServices; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-11-08 33584]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-01-20 654848]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2010-02-04 360192]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
alebo aj programi hocikedy zamrznu a neviem preco pri pripojeni mobilu alebo usb do pc mi stale vyhadzuje virusy a pritom usb je uplne prazdne a v mobile nemam urcite virus nic nove som tam nedaval a predtym mi nic nevyhadzovalo
tu je log
Logfile of random's system information tool 1.08 (written by random/random)
Run by Branislav at 2010-12-22 22:15:24
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 11 GB (15%) free of 76 GB
Total RAM: 1535 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:15:28, on 22.12.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\TP-LINK\TWCU\TWCU.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Branislav\My Documents\Preberanie\RSIT.exe
C:\Program Files\trend micro\Branislav.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: CentrumczToolbar BHO - {33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
R3 - URLSearchHook: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: CentrumczToolbar BHO - {33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
O2 - BHO: Softonic-Eng7 - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: Lišta Centrum.cz Toolbar - {D5D47440-0750-463D-BAEF-A47D02414806} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
O3 - Toolbar: VDownloader Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [TWCU] "C:\Program Files\TP-LINK\TWCU\TWCU.exe" -nogui
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (HKCU)
O18 - Protocol: centrumcztoolbar - {61A97628-7C82-4315-957A-C74C2CDD85DF} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: TP-LINK Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
--
End of file - 8504 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\expressburnSevenDaysInit.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
Yahoo! Companion BHO
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
AC-Pro - C:\Program Files\AutocompletePro\AutocompletePro.dll [2010-07-14 97760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-13 3913000]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A}]
CentrumczToolbar BHO - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2010-03-26 1286448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\tbSoft.dll [2010-11-13 3913000]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
VDownloader Toolbar
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} -
{D5D47440-0750-463D-BAEF-A47D02414806} - Lišta Centrum.cz Toolbar - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2010-03-26 1286448]
{D4027C7F-154A-4066-A1AD-4243D8127440} -
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\tbSoft.dll [2010-11-13 3913000]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-13 3913000]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-11-14 16270848]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"TWCU"=C:\Program Files\TP-LINK\TWCU\TWCU.exe [2005-08-09 413696]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2008-04-04 88584]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-01-15 37376]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-02-27 155648]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-11-08 2219184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-08-26 159744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb"
"C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray"
"C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe:*:Enabled:Pro Evolution Soccer 2011"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Activision\Call of Duty - Black Ops\BlackOps.exe"="C:\Program Files\Activision\Call of Duty - Black Ops\BlackOps.exe:*:Enabled:BlackOps"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\Program Files\Cisco Packet Tracer 5.3.1\bin\PacketTracer5.exe"="C:\Program Files\Cisco Packet Tracer 5.3.1\bin\PacketTracer5.exe:*:Enabled:PacketTracer5"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2011\osp2011.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2011\osp2011.exe:*:Enabled:Pro Evolution Soccer 2011"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2010-12-22 22:15:24 ----D---- C:\rsit
2010-12-22 17:16:40 ----D---- C:\Documents and Settings\All Users\Application Data\CentrumczToolbar
2010-12-22 17:16:38 ----D---- C:\Program Files\CentrumczToolbar
2010-12-20 14:26:21 ----D---- C:\Program Files\BUNKBOYZ
2010-12-19 19:35:22 ----D---- C:\Program Files\Conduit
2010-12-19 19:35:14 ----D---- C:\Program Files\ConduitEngine
2010-12-19 19:35:09 ----D---- C:\Program Files\Softonic-Eng7
2010-12-17 10:55:50 ----D---- C:\Documents and Settings\All Users\Application Data\DVD Shrink
2010-12-16 09:31:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2010-12-16 09:31:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2010-12-16 09:31:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2010-12-16 09:31:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2010-12-16 09:31:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2010-12-16 09:31:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2010-12-16 09:30:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2416400$
2010-12-16 09:28:28 ----A---- C:\WINDOWS\imsins.BAK
2010-12-16 09:28:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2010-12-12 15:58:32 ----D---- C:\Program Files\ESET
2010-12-11 15:25:09 ----D---- C:\Program Files\Cisco Packet Tracer 5.3.1
2010-11-27 17:39:16 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-11-27 17:37:51 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2010-11-27 12:55:02 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2010-11-26 19:26:58 ----D---- C:\Program Files\Activision
======List of files/folders modified in the last 1 months======
2010-12-22 22:15:26 ----D---- C:\Program Files\trend micro
2010-12-22 22:15:12 ----D---- C:\WINDOWS\temp
2010-12-22 22:01:40 ----D---- C:\WINDOWS\Prefetch
2010-12-22 20:30:50 ----A---- C:\WINDOWS\NeroDigital.ini
2010-12-22 19:52:55 ----D---- C:\WINDOWS
2010-12-22 18:44:54 ----D---- C:\Program Files\VDownloader
2010-12-22 17:23:09 ----D---- C:\Documents and Settings\Branislav\Application Data\Mozilla
2010-12-22 17:16:48 ----D---- C:\Program Files\Mozilla Firefox
2010-12-22 17:16:38 ----D---- C:\Program Files
2010-12-22 16:49:06 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-22 15:32:55 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-21 15:02:05 ----D---- C:\Program Files\KONAMI
2010-12-21 14:56:17 ----SHD---- C:\WINDOWS\Installer
2010-12-21 14:56:09 ----D---- C:\Documents and Settings\All Users\Application Data\KONAMI
2010-12-21 11:57:14 ----SD---- C:\Documents and Settings\Branislav\Application Data\Microsoft
2010-12-21 11:51:21 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-12-21 11:51:08 ----D---- C:\WINDOWS\system32
2010-12-21 11:48:36 ----D---- C:\Program Files\NCH Swift Sound
2010-12-21 11:42:33 ----D---- C:\Documents and Settings\All Users\Application Data\IconTweaker
2010-12-20 13:03:54 ----D---- C:\Program Files\Magic Video Converter
2010-12-19 16:41:16 ----D---- C:\Documents and Settings\Branislav\Application Data\Skype
2010-12-19 16:18:49 ----D---- C:\Documents and Settings\Branislav\Application Data\skypePM
2010-12-17 18:21:45 ----D---- C:\Documents and Settings\Branislav\Application Data\vlc
2010-12-17 10:09:59 ----HD---- C:\WINDOWS\inf
2010-12-16 09:31:35 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-12-16 09:31:23 ----D---- C:\WINDOWS\system32\drivers
2010-12-16 09:31:21 ----HD---- C:\WINDOWS\$hf_mig$
2010-12-16 09:28:35 ----A---- C:\WINDOWS\system32\MRT.exe
2010-12-16 09:28:24 ----D---- C:\Program Files\Outlook Express
2010-12-12 15:54:43 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2010-12-10 22:44:01 ----SD---- C:\WINDOWS\Tasks
2010-11-28 13:50:57 ----D---- C:\WINDOWS\system32\DirectX
2010-11-28 13:50:29 ----RSD---- C:\WINDOWS\assembly
2010-11-28 13:50:02 ----HD---- C:\Program Files\InstallShield Installation Information
2010-11-27 17:50:22 ----D---- C:\Program Files\ATI
2010-11-27 17:49:34 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-11-27 17:41:45 ----D---- C:\Program Files\ATI Technologies
2010-11-27 17:39:16 ----D---- C:\Program Files\Common Files
2010-11-27 17:14:08 ----D---- C:\WINDOWS\Minidump
2010-11-27 14:45:10 ----D---- C:\WINDOWS\system32\config
2010-11-27 12:22:59 ----D---- C:\WINDOWS\WinSxS
2010-11-27 09:01:10 ----D---- C:\WINDOWS\SoftwareDistribution
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-01-15 611064]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-08-03 55256]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.2.0.3; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-01-14 17801]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-08-04 140752]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-07-29 134512]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-08-26 5386752]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-07-29 32608]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-15 4225920]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2010-03-08 47360]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-12-14 85120]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 vaxscsi;vaxscsi; C:\WINDOWS\System32\Drivers\vaxscsi.sys [2010-01-15 223128]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2008-01-24 19336]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2008-01-24 28168]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2008-01-24 14728]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2008-01-24 48904]
S3 AR5211;TP-LINK Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2005-06-25 463168]
S3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2007-07-20 84992]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-01-24 25280]
S3 k510bus;Sony Ericsson K510 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\k510bus.sys [2010-02-09 58288]
S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k510mdfl.sys [2010-02-09 8336]
S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\k510mdm.sys [2010-02-09 94064]
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:\WINDOWS\system32\DRIVERS\s115bus.sys [2007-04-23 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s115mdfl.sys [2007-04-23 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s115mdm.sys [2007-04-23 108680]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ACS;TP-LINK Configuration Service; C:\WINDOWS\system32\acs.exe [2005-05-05 36864]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-08-26 606208]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-11-08 810144]
R2 StarWindService;StarWind iSCSI Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [2005-04-02 217600]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2010-02-04 603904]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-06-06 520192]
S2 vvdsvc;VJVodClientServices; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-11-08 33584]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-01-20 654848]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2010-02-04 360192]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------

Re: Help
Zdravim a pekny vecer preji
Poprosim i o druhy log z RSIT s nazvem info.txt, je ulozen v c:\rsit
Re: Help
Dobrý večer
nech sa páči
info.txt logfile of random's system information tool 1.08 2010-12-22 22:15:32
======Uninstall list======
-->MsiExec /X{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
µTorrent-->"C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Extra Settings-->MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings-->MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->C:\Program Files\Common Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10l_Plugin.exe -maintain plugin
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->C:\Program Files\Common Files\Adobe\Installers\719d6f144d0c086a0dfa7ff76bb9ac1\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{3D7E3EC9-46CF-4359-9289-39CE01DFB82F}
Adobe Reader 9.3.4 - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-A93000000001}
Adobe Reader 9.4.1 - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-A94000000001}
Adobe Setup-->MsiExec.exe /I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}
Adobe Setup-->MsiExec.exe /I{FF11004C-F42A-4A31-9BCF-7F5C8FDBE53C}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0
ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
AutocompletePro-->"C:\Program Files\AutocompletePro\unins000.exe"
AVIVO Codecs-->MsiExec.exe /X{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}
BSPlayer-->"C:\Program Files\Webteh\BSplayer\uninstall.exe"
Call of Duty: Black Ops-->"C:\Program Files\Activision\Call of Duty - Black Ops\unins000.exe"
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Cisco Packet Tracer 5.3.1-->"C:\Program Files\Cisco Packet Tracer 5.3.1\unins000.exe"
Conduit Engine-->C:\PROGRA~1\CONDUI~1\ConduitEngineUninstall.exe
dBpoweramp Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Music Converter.dat
Express Burn-->C:\Program Files\NCH Swift Sound\ExpressBurn\uninst.exe
Gold Wave Editor Pro v10.2.2-->"C:\Program Files\Gold Wave Editor Pro\unins000.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows XP (KB2158563)-->"C:\WINDOWS\$NtUninstallKB2158563$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB2443685)-->"C:\WINDOWS\$NtUninstallKB2443685$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"
K-Lite Mega Codec Pack 5.6.0-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lišta Centrum.cz Toolbar 1.203.023.002-->"C:\Program Files\CentrumczToolbar\unins000.exe"
Logitech Gaming Software 5.02-->MsiExec.exe /X{64B20B36-AEE7-4DD4-897C-C5DA5C218F60}
Magic Video Converter 8.0.8.25-->"C:\Program Files\Magic Video Converter\unins000.exe"
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Access MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0015-041B-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0016-041B-0000-0000000FF1CE}
Microsoft Office Groove MUI (Slovak) 2007-->MsiExec.exe /X{90120000-00BA-041B-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0044-041B-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Slovak) 2007-->MsiExec.exe /X{90120000-00A1-041B-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Slovak) 2007-->MsiExec.exe /X{90120000-001A-041B-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0018-041B-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Hungarian) 2007-->MsiExec.exe /X{90120000-001F-040E-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Slovak) 2007-->MsiExec.exe /X{90120000-002C-041B-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0019-041B-0000-0000000FF1CE}
Microsoft Office Shared MUI (Slovak) 2007-->MsiExec.exe /X{90120000-006E-041B-0000-0000000FF1CE}
Microsoft Office Word MUI (Slovak) 2007-->MsiExec.exe /X{90120000-001B-041B-0000-0000000FF1CE}
Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)-->MsiExec.exe /X{E09B48B5-E141-427A-AB0C-D3605127224A}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Mozilla Firefox (3.6.8)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nero 6 Enterprise Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NVIDIA PhysX-->MsiExec.exe /X{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PIXresizer 2.0.2-->"C:\Program Files\PIXresizer\unins000.exe"
Pro Evolution Soccer 2011-->MsiExec.exe /X{9773450C-E2F3-46C3-9464-1D7EDE5EFB63}
QuickTime-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{3868A8EE-5051-4DB0-8DF6-4F4B8A98D083} /l1033
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\SETUP.EXE -runfromtemp -l0x001b -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\SETUP.EXE" -l0x1b -removeonly
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ REBOOTPROMPT=""
Security Update for Windows Media Player (KB2378111)-->"C:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB975558)-->"C:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB979402)-->"C:\WINDOWS\$NtUninstallKB979402_WM9$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2079403)-->"C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2115168)-->"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2121546)-->"C:\WINDOWS\$NtUninstallKB2121546$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2160329)-->"C:\WINDOWS\$NtUninstallKB2160329$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2183461)-->"C:\WINDOWS\$NtUninstallKB2183461$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2259922)-->"C:\WINDOWS\$NtUninstallKB2259922$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2279986)-->"C:\WINDOWS\$NtUninstallKB2279986$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2286198)-->"C:\WINDOWS\$NtUninstallKB2286198$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2296011)-->"C:\WINDOWS\$NtUninstallKB2296011$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2296199)-->"C:\WINDOWS\$NtUninstallKB2296199$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2347290)-->"C:\WINDOWS\$NtUninstallKB2347290$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2360131)-->"C:\WINDOWS\$NtUninstallKB2360131$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2360937)-->"C:\WINDOWS\$NtUninstallKB2360937$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2387149)-->"C:\WINDOWS\$NtUninstallKB2387149$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2416400)-->"C:\WINDOWS\$NtUninstallKB2416400$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2423089)-->"C:\WINDOWS\$NtUninstallKB2423089$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2436673)-->"C:\WINDOWS\$NtUninstallKB2436673$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2440591)-->"C:\WINDOWS\$NtUninstallKB2440591$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2443105)-->"C:\WINDOWS\$NtUninstallKB2443105$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Security Update for Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"
Security Update for Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979687)-->"C:\WINDOWS\$NtUninstallKB979687$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980436)-->"C:\WINDOWS\$NtUninstallKB980436$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981322)-->"C:\WINDOWS\$NtUninstallKB981322$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981349)-->"C:\WINDOWS\$NtUninstallKB981349$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981852)-->"C:\WINDOWS\$NtUninstallKB981852$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981957)-->"C:\WINDOWS\$NtUninstallKB981957$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981997)-->"C:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982132)-->"C:\WINDOWS\$NtUninstallKB982132$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982214)-->"C:\WINDOWS\$NtUninstallKB982214$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982381)-->"C:\WINDOWS\$NtUninstallKB982381$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982665)-->"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982802)-->"C:\WINDOWS\$NtUninstallKB982802$\spuninst\spuninst.exe"
Skype™ 4.2-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Softonic-Eng7 Toolbar-->C:\PROGRA~1\SOFTON~1\UNWISE.EXE /U C:\PROGRA~1\SOFTON~1\INSTALL.LOG
Sony Media Manager 2.2-->MsiExec.exe /X{C9E129BC-27D3-436E-BAAC-4CE81E0962F1}
Sony Vegas 7.0d-->MsiExec.exe /X{96965E6C-41DB-4E0A-BC65-D92381D51D2A}
SopCast 3.0.3-->C:\Program Files\SopCast\uninst.exe
The Lord of the Rings FREE Trial -->MsiExec.exe /X{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
TP-LINK Wireless Client Installation Program-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe" -l0x9 -removeonly
TuneUp Utilities 2009-->MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Windows XP (KB2141007)-->"C:\WINDOWS\$NtUninstallKB2141007$\spuninst\spuninst.exe"
Update for Windows XP (KB2345886)-->"C:\WINDOWS\$NtUninstallKB2345886$\spuninst\spuninst.exe"
Update for Windows XP (KB2467659)-->"C:\WINDOWS\$NtUninstallKB2467659$\spuninst\spuninst.exe"
Update for Windows XP (KB980182)-->"C:\WINDOWS\$NtUninstallKB980182$\spuninst\spuninst.exe"
VDownloader 2.9.443-->"C:\Program Files\VDownloader\unins000.exe"
Veetle TV 0.9.17-->C:\Program Files\Veetle\UninstallVeetleTV.exe
VexcastPlayer2.0-->"C:\WINDOWS\system32\Nagasoft\Uninstall.exe"
Virtual DJ - Atomix Productions-->C:\PROGRA~1\VIRTUA~1\UNWISE.EXE C:\PROGRA~1\VIRTUA~1\INSTALL.LOG
VLC media player 1.0.3-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
WinRAR archivátor-->C:\Program Files\WinRAR\uninstall.exe
======Security center information======
AV: ESET Smart Security 4.2
FW: ESET personal firewall
======System event log======
Computer Name: BRANO
Event Code: 7023
Message: Služba Application Management bola ukončená s nasledujúcou chybou:
Zadaný modul sa nepodarilo nájsť.
Record Number: 67918
Source Name: Service Control Manager
Time Written: 20101203100848.000000+060
Event Type: chyba
User:
Computer Name: BRANO
Event Code: 7036
Message: Služba Application Management vstúpila do stavu Zastavené.
Record Number: 67917
Source Name: Service Control Manager
Time Written: 20101203100848.000000+060
Event Type: informácie
User:
Computer Name: BRANO
Event Code: 7035
Message: Službe Application Management bolo úspešne odoslané riadenie Spustené.
Record Number: 67916
Source Name: Service Control Manager
Time Written: 20101203100848.000000+060
Event Type: informácie
User: BRANO\Branislav
Computer Name: BRANO
Event Code: 7023
Message: Služba Application Management bola ukončená s nasledujúcou chybou:
Zadaný modul sa nepodarilo nájsť.
Record Number: 67915
Source Name: Service Control Manager
Time Written: 20101203100847.000000+060
Event Type: chyba
User:
Computer Name: BRANO
Event Code: 7036
Message: Služba Application Management vstúpila do stavu Zastavené.
Record Number: 67914
Source Name: Service Control Manager
Time Written: 20101203100847.000000+060
Event Type: informácie
User:
=====Application event log=====
Computer Name: BRANO
Event Code: 1
Message:
Record Number: 5
Source Name: Bonjour Service
Time Written: 20100430064738.000000+120
Event Type: informácie
User:
Computer Name: BRANO
Event Code: 1800
Message: Služba Centrum zabezpečenia systému Windows sa spustila.
Record Number: 4
Source Name: SecurityCenter
Time Written: 20100429134452.000000+120
Event Type: informácie
User:
Computer Name: BRANO
Event Code: 1
Message:
Record Number: 3
Source Name: Bonjour Service
Time Written: 20100429134438.000000+120
Event Type: informácie
User:
Computer Name: BRANO
Event Code: 1800
Message: Služba Centrum zabezpečenia systému Windows sa spustila.
Record Number: 2
Source Name: SecurityCenter
Time Written: 20100429072556.000000+120
Event Type: informácie
User:
Computer Name: BRANO
Event Code: 1
Message:
Record Number: 1
Source Name: Bonjour Service
Time Written: 20100429072536.000000+120
Event Type: informácie
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Microsoft SQL Server\80\Tools\Binn;C:\Program Files\Common Files\Ulead Systems\MPEG;C:\Program Files\QuickTime\QTSystem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0409
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip
"PT5HOME"=C:\Program Files\Cisco Packet Tracer 5.3.1
-----------------EOF-----------------
nech sa páči
info.txt logfile of random's system information tool 1.08 2010-12-22 22:15:32
======Uninstall list======
-->MsiExec /X{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
µTorrent-->"C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Extra Settings-->MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings-->MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->C:\Program Files\Common Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10l_Plugin.exe -maintain plugin
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->C:\Program Files\Common Files\Adobe\Installers\719d6f144d0c086a0dfa7ff76bb9ac1\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{3D7E3EC9-46CF-4359-9289-39CE01DFB82F}
Adobe Reader 9.3.4 - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-A93000000001}
Adobe Reader 9.4.1 - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-A94000000001}
Adobe Setup-->MsiExec.exe /I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}
Adobe Setup-->MsiExec.exe /I{FF11004C-F42A-4A31-9BCF-7F5C8FDBE53C}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0
ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
AutocompletePro-->"C:\Program Files\AutocompletePro\unins000.exe"
AVIVO Codecs-->MsiExec.exe /X{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}
BSPlayer-->"C:\Program Files\Webteh\BSplayer\uninstall.exe"
Call of Duty: Black Ops-->"C:\Program Files\Activision\Call of Duty - Black Ops\unins000.exe"
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Cisco Packet Tracer 5.3.1-->"C:\Program Files\Cisco Packet Tracer 5.3.1\unins000.exe"
Conduit Engine-->C:\PROGRA~1\CONDUI~1\ConduitEngineUninstall.exe
dBpoweramp Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Music Converter.dat
Express Burn-->C:\Program Files\NCH Swift Sound\ExpressBurn\uninst.exe
Gold Wave Editor Pro v10.2.2-->"C:\Program Files\Gold Wave Editor Pro\unins000.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows XP (KB2158563)-->"C:\WINDOWS\$NtUninstallKB2158563$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB2443685)-->"C:\WINDOWS\$NtUninstallKB2443685$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"
K-Lite Mega Codec Pack 5.6.0-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lišta Centrum.cz Toolbar 1.203.023.002-->"C:\Program Files\CentrumczToolbar\unins000.exe"
Logitech Gaming Software 5.02-->MsiExec.exe /X{64B20B36-AEE7-4DD4-897C-C5DA5C218F60}
Magic Video Converter 8.0.8.25-->"C:\Program Files\Magic Video Converter\unins000.exe"
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Access MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0015-041B-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0016-041B-0000-0000000FF1CE}
Microsoft Office Groove MUI (Slovak) 2007-->MsiExec.exe /X{90120000-00BA-041B-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0044-041B-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Slovak) 2007-->MsiExec.exe /X{90120000-00A1-041B-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Slovak) 2007-->MsiExec.exe /X{90120000-001A-041B-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0018-041B-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Hungarian) 2007-->MsiExec.exe /X{90120000-001F-040E-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Slovak) 2007-->MsiExec.exe /X{90120000-002C-041B-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0019-041B-0000-0000000FF1CE}
Microsoft Office Shared MUI (Slovak) 2007-->MsiExec.exe /X{90120000-006E-041B-0000-0000000FF1CE}
Microsoft Office Word MUI (Slovak) 2007-->MsiExec.exe /X{90120000-001B-041B-0000-0000000FF1CE}
Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)-->MsiExec.exe /X{E09B48B5-E141-427A-AB0C-D3605127224A}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Mozilla Firefox (3.6.8)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nero 6 Enterprise Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NVIDIA PhysX-->MsiExec.exe /X{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PIXresizer 2.0.2-->"C:\Program Files\PIXresizer\unins000.exe"
Pro Evolution Soccer 2011-->MsiExec.exe /X{9773450C-E2F3-46C3-9464-1D7EDE5EFB63}
QuickTime-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{3868A8EE-5051-4DB0-8DF6-4F4B8A98D083} /l1033
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\SETUP.EXE -runfromtemp -l0x001b -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\SETUP.EXE" -l0x1b -removeonly
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ REBOOTPROMPT=""
Security Update for Windows Media Player (KB2378111)-->"C:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB975558)-->"C:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB979402)-->"C:\WINDOWS\$NtUninstallKB979402_WM9$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2079403)-->"C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2115168)-->"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2121546)-->"C:\WINDOWS\$NtUninstallKB2121546$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2160329)-->"C:\WINDOWS\$NtUninstallKB2160329$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2183461)-->"C:\WINDOWS\$NtUninstallKB2183461$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2259922)-->"C:\WINDOWS\$NtUninstallKB2259922$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2279986)-->"C:\WINDOWS\$NtUninstallKB2279986$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2286198)-->"C:\WINDOWS\$NtUninstallKB2286198$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2296011)-->"C:\WINDOWS\$NtUninstallKB2296011$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2296199)-->"C:\WINDOWS\$NtUninstallKB2296199$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2347290)-->"C:\WINDOWS\$NtUninstallKB2347290$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2360131)-->"C:\WINDOWS\$NtUninstallKB2360131$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2360937)-->"C:\WINDOWS\$NtUninstallKB2360937$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2387149)-->"C:\WINDOWS\$NtUninstallKB2387149$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2416400)-->"C:\WINDOWS\$NtUninstallKB2416400$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2423089)-->"C:\WINDOWS\$NtUninstallKB2423089$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2436673)-->"C:\WINDOWS\$NtUninstallKB2436673$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2440591)-->"C:\WINDOWS\$NtUninstallKB2440591$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2443105)-->"C:\WINDOWS\$NtUninstallKB2443105$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Security Update for Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"
Security Update for Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979687)-->"C:\WINDOWS\$NtUninstallKB979687$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980436)-->"C:\WINDOWS\$NtUninstallKB980436$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981322)-->"C:\WINDOWS\$NtUninstallKB981322$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981349)-->"C:\WINDOWS\$NtUninstallKB981349$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981852)-->"C:\WINDOWS\$NtUninstallKB981852$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981957)-->"C:\WINDOWS\$NtUninstallKB981957$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981997)-->"C:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982132)-->"C:\WINDOWS\$NtUninstallKB982132$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982214)-->"C:\WINDOWS\$NtUninstallKB982214$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982381)-->"C:\WINDOWS\$NtUninstallKB982381$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982665)-->"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982802)-->"C:\WINDOWS\$NtUninstallKB982802$\spuninst\spuninst.exe"
Skype™ 4.2-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Softonic-Eng7 Toolbar-->C:\PROGRA~1\SOFTON~1\UNWISE.EXE /U C:\PROGRA~1\SOFTON~1\INSTALL.LOG
Sony Media Manager 2.2-->MsiExec.exe /X{C9E129BC-27D3-436E-BAAC-4CE81E0962F1}
Sony Vegas 7.0d-->MsiExec.exe /X{96965E6C-41DB-4E0A-BC65-D92381D51D2A}
SopCast 3.0.3-->C:\Program Files\SopCast\uninst.exe
The Lord of the Rings FREE Trial -->MsiExec.exe /X{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
TP-LINK Wireless Client Installation Program-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe" -l0x9 -removeonly
TuneUp Utilities 2009-->MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Windows XP (KB2141007)-->"C:\WINDOWS\$NtUninstallKB2141007$\spuninst\spuninst.exe"
Update for Windows XP (KB2345886)-->"C:\WINDOWS\$NtUninstallKB2345886$\spuninst\spuninst.exe"
Update for Windows XP (KB2467659)-->"C:\WINDOWS\$NtUninstallKB2467659$\spuninst\spuninst.exe"
Update for Windows XP (KB980182)-->"C:\WINDOWS\$NtUninstallKB980182$\spuninst\spuninst.exe"
VDownloader 2.9.443-->"C:\Program Files\VDownloader\unins000.exe"
Veetle TV 0.9.17-->C:\Program Files\Veetle\UninstallVeetleTV.exe
VexcastPlayer2.0-->"C:\WINDOWS\system32\Nagasoft\Uninstall.exe"
Virtual DJ - Atomix Productions-->C:\PROGRA~1\VIRTUA~1\UNWISE.EXE C:\PROGRA~1\VIRTUA~1\INSTALL.LOG
VLC media player 1.0.3-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
WinRAR archivátor-->C:\Program Files\WinRAR\uninstall.exe
======Security center information======
AV: ESET Smart Security 4.2
FW: ESET personal firewall
======System event log======
Computer Name: BRANO
Event Code: 7023
Message: Služba Application Management bola ukončená s nasledujúcou chybou:
Zadaný modul sa nepodarilo nájsť.
Record Number: 67918
Source Name: Service Control Manager
Time Written: 20101203100848.000000+060
Event Type: chyba
User:
Computer Name: BRANO
Event Code: 7036
Message: Služba Application Management vstúpila do stavu Zastavené.
Record Number: 67917
Source Name: Service Control Manager
Time Written: 20101203100848.000000+060
Event Type: informácie
User:
Computer Name: BRANO
Event Code: 7035
Message: Službe Application Management bolo úspešne odoslané riadenie Spustené.
Record Number: 67916
Source Name: Service Control Manager
Time Written: 20101203100848.000000+060
Event Type: informácie
User: BRANO\Branislav
Computer Name: BRANO
Event Code: 7023
Message: Služba Application Management bola ukončená s nasledujúcou chybou:
Zadaný modul sa nepodarilo nájsť.
Record Number: 67915
Source Name: Service Control Manager
Time Written: 20101203100847.000000+060
Event Type: chyba
User:
Computer Name: BRANO
Event Code: 7036
Message: Služba Application Management vstúpila do stavu Zastavené.
Record Number: 67914
Source Name: Service Control Manager
Time Written: 20101203100847.000000+060
Event Type: informácie
User:
=====Application event log=====
Computer Name: BRANO
Event Code: 1
Message:
Record Number: 5
Source Name: Bonjour Service
Time Written: 20100430064738.000000+120
Event Type: informácie
User:
Computer Name: BRANO
Event Code: 1800
Message: Služba Centrum zabezpečenia systému Windows sa spustila.
Record Number: 4
Source Name: SecurityCenter
Time Written: 20100429134452.000000+120
Event Type: informácie
User:
Computer Name: BRANO
Event Code: 1
Message:
Record Number: 3
Source Name: Bonjour Service
Time Written: 20100429134438.000000+120
Event Type: informácie
User:
Computer Name: BRANO
Event Code: 1800
Message: Služba Centrum zabezpečenia systému Windows sa spustila.
Record Number: 2
Source Name: SecurityCenter
Time Written: 20100429072556.000000+120
Event Type: informácie
User:
Computer Name: BRANO
Event Code: 1
Message:
Record Number: 1
Source Name: Bonjour Service
Time Written: 20100429072536.000000+120
Event Type: informácie
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Microsoft SQL Server\80\Tools\Binn;C:\Program Files\Common Files\Ulead Systems\MPEG;C:\Program Files\QuickTime\QTSystem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0409
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip
"PT5HOME"=C:\Program Files\Cisco Packet Tracer 5.3.1
-----------------EOF-----------------

Re: Help
- Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
- Spustte a kliknete na Deletion
- Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt
Re: Help
############################## | UsbFix 7.014 | [Deletion]
User: Branislav (Administrator) # BRANO [ ]
Updated 24/06/10 by El Desaparecido / C_XX
Started at 22:48:58 | 22/12/2010
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com
CPU: Intel(R) Celeron(R) CPU 3.20GHz
Systém Microsoft Windows XP Home Edition (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 6.0.2900.5512
Windows Firewall: Disabled /!\
Antivirus: ESET Smart Security 4.2 4.2 [Enabled | Updated]
Firewall: ESET personal firewall 4.2.67.11 [Enabled]
RAM -> 1535 Mb
C:\ (%systemdrive%) -> Fixed drive # 75 Gb (11 Mb free - 15%) [] # NTFS
D:\ -> CD-ROM
E:\ -> CD-ROM
F:\ -> Removable drive # 984 Mb (814 Mb free - 83%) [BRANO] # FAT
G:\ -> Removable drive # 2 Gb (271 Mb free - 14%) [] # FAT
################## | Files # Infected Folders |
Not deleted ! E:\Autorun.inf
Not deleted ! G:\Autorun.inf
Deleted ! F:\winamp_cache_0001.xml
################## | Registry |
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Listing |
[15/01/2010 - 08:33:04 | D ] C:\4addd55ec3d5ed8291d80d
[15/01/2010 - 09:22:28 | D ] C:\ATI
[14/01/2010 - 06:34:08 | A | 0] C:\AUTOEXEC.BAT
[14/01/2010 - 06:28:16 | A | 211] C:\Boot.bak
[14/07/2010 - 16:51:00 | RASH | 281] C:\boot.ini
[14/07/2010 - 16:51:00 | RASHD ] C:\cmdcons
[03/08/2004 - 22:00:00 | A | 260272] C:\cmldr
[14/01/2010 - 06:34:08 | A | 0] C:\CONFIG.SYS
[14/01/2010 - 19:02:43 | A | 195] C:\csb.log
[14/01/2010 - 06:38:18 | D ] C:\Documents and Settings
[12/04/2010 - 12:09:28 | A | 3] C:\dxva_sig.txt
[14/01/2010 - 06:34:08 | RASH | 0] C:\IO.SYS
[14/01/2010 - 06:34:08 | RASH | 0] C:\MSDOS.SYS
[23/10/2010 - 14:16:10 | RHD ] C:\MSOCache
[28/02/2006 - 13:00:00 | RASH | 47564] C:\NTDETECT.COM
[14/01/2010 - 21:42:02 | RASH | 250048] C:\ntldr
[22/12/2010 - 16:42:05 | ASH | 2145386496] C:\pagefile.sys
[22/12/2010 - 17:16:38 | D ] C:\Program Files
[15/07/2010 - 15:18:46 | D ] C:\Qoobox
[22/12/2010 - 22:51:34 | SHD ] C:\RECYCLER
[14/01/2010 - 19:02:43 | A | 347] C:\RHDSetup.log
[22/12/2010 - 22:15:32 | D ] C:\rsit
[27/03/2010 - 12:00:55 | SHD ] C:\System Volume Information
[24/01/2010 - 18:43:44 | D ] C:\temp
[18/01/2010 - 12:45:26 | D ] C:\totalcmd
[22/12/2010 - 22:51:49 | D ] C:\UsbFix
[22/12/2010 - 22:51:54 | A | 1278] C:\UsbFix.txt
[25/01/2010 - 07:09:48 | HD ] C:\VJVod_Cache
[22/12/2010 - 22:47:14 | D ] C:\WINDOWS
[06/05/2010 - 18:53:42 | D ] C:\WMP3E_PRO
[04/09/2009 - 07:11:04 | R | 210432] E:\1032.mst
[04/09/2009 - 07:11:04 | R | 10240] E:\1033.mst
[04/09/2009 - 07:11:04 | R | 482304] E:\1043.mst
[04/09/2009 - 07:11:04 | R | 566784] E:\1049.mst
[04/09/2009 - 07:11:04 | R | 335360] E:\1053.mst
[04/09/2009 - 07:10:21 | R | 47] E:\Autorun.inf
[04/09/2009 - 07:11:04 | RD ] E:\CommonAppData
[18/10/2009 - 17:40:58 | RD ] E:\Crack
[04/09/2009 - 07:11:15 | RD ] E:\DirectX9c
[04/09/2009 - 07:11:04 | R | 1696256] E:\Pro Evolution Soccer 2010.msi
[04/09/2009 - 07:10:21 | R | 112008] E:\Setup.exe
[04/09/2009 - 07:10:21 | R | 214408] E:\autorun.exe
[04/09/2009 - 07:10:56 | RD ] E:\launcher
[04/09/2009 - 07:11:15 | RD ] E:\program files
[04/09/2009 - 07:10:21 | R | 1103] E:\readme.html
[04/09/2009 - 07:10:21 | R | 64] E:\region.inf
[12/07/2010 - 14:28:46 | A | 173426810] F:\slovak ice hockey tribute.avi
[24/11/2010 - 22:42:24 | RSHD ] F:\kolemasakar
[12/12/2010 - 20:32:10 | RSHD ] F:\dijagnoza
[09/12/2009 - 16:20:04 | A | 945592] F:\Pardavy_100x100.psd
[09/12/2009 - 19:46:32 | A | 1075918] F:\Pardavy_100x100(2).psd
[09/12/2009 - 13:48:00 | A | 1170448] F:\Janko.psd
[09/12/2009 - 13:48:08 | A | 1169780] F:\pardavy.psd
[16/07/2010 - 16:29:02 | A | 349] F:\www.txt
[07/12/2010 - 12:15:28 | A | 41] F:\pmp_usb.ini
[01/01/1601 - 01:00:00 | RH | 0] G:\MEMSTICK.IND
[01/01/1601 - 01:00:00 | RH | 0] G:\MSTK_PRO.IND
[24/12/2008 - 17:54:58 | D ] G:\DCIM
[24/12/2008 - 17:54:58 | D ] G:\MP3
[24/12/2008 - 17:54:58 | D ] G:\MSSEMC
[13/12/2010 - 18:07:24 | N | 378] G:\autorun.inf
[01/01/2000 - 00:00:04 | D ] G:\music
[01/01/2000 - 00:00:04 | D ] G:\picture
[01/01/2000 - 00:00:04 | D ] G:\other
[01/01/2000 - 00:00:04 | D ] G:\video
[01/01/2000 - 00:00:04 | D ] G:\theme
[01/01/2000 - 00:00:04 | D ] G:\webpage
[01/01/2000 - 00:00:04 | HD ] G:\system
[12/05/2008 - 20:19:20 | RH | 4857] G:\default-capability.xml
[12/05/2008 - 20:19:20 | RH | 262] G:\customized-capability.xml
[30/11/2010 - 18:46:52 | RSHD ] G:\kolemasakar
[13/12/2010 - 14:32:54 | RSHD ] G:\dijagnoza
################## | Vaccin |
C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
F:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
G:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
################## | Upload |
Please send the file: C:\UsbFix_Upload_Me_BRANO.zip
http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution.
################## | E.O.F |
User: Branislav (Administrator) # BRANO [ ]
Updated 24/06/10 by El Desaparecido / C_XX
Started at 22:48:58 | 22/12/2010
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com
CPU: Intel(R) Celeron(R) CPU 3.20GHz
Systém Microsoft Windows XP Home Edition (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 6.0.2900.5512
Windows Firewall: Disabled /!\
Antivirus: ESET Smart Security 4.2 4.2 [Enabled | Updated]
Firewall: ESET personal firewall 4.2.67.11 [Enabled]
RAM -> 1535 Mb
C:\ (%systemdrive%) -> Fixed drive # 75 Gb (11 Mb free - 15%) [] # NTFS
D:\ -> CD-ROM
E:\ -> CD-ROM
F:\ -> Removable drive # 984 Mb (814 Mb free - 83%) [BRANO] # FAT
G:\ -> Removable drive # 2 Gb (271 Mb free - 14%) [] # FAT
################## | Files # Infected Folders |
Not deleted ! E:\Autorun.inf
Not deleted ! G:\Autorun.inf
Deleted ! F:\winamp_cache_0001.xml
################## | Registry |
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Listing |
[15/01/2010 - 08:33:04 | D ] C:\4addd55ec3d5ed8291d80d
[15/01/2010 - 09:22:28 | D ] C:\ATI
[14/01/2010 - 06:34:08 | A | 0] C:\AUTOEXEC.BAT
[14/01/2010 - 06:28:16 | A | 211] C:\Boot.bak
[14/07/2010 - 16:51:00 | RASH | 281] C:\boot.ini
[14/07/2010 - 16:51:00 | RASHD ] C:\cmdcons
[03/08/2004 - 22:00:00 | A | 260272] C:\cmldr
[14/01/2010 - 06:34:08 | A | 0] C:\CONFIG.SYS
[14/01/2010 - 19:02:43 | A | 195] C:\csb.log
[14/01/2010 - 06:38:18 | D ] C:\Documents and Settings
[12/04/2010 - 12:09:28 | A | 3] C:\dxva_sig.txt
[14/01/2010 - 06:34:08 | RASH | 0] C:\IO.SYS
[14/01/2010 - 06:34:08 | RASH | 0] C:\MSDOS.SYS
[23/10/2010 - 14:16:10 | RHD ] C:\MSOCache
[28/02/2006 - 13:00:00 | RASH | 47564] C:\NTDETECT.COM
[14/01/2010 - 21:42:02 | RASH | 250048] C:\ntldr
[22/12/2010 - 16:42:05 | ASH | 2145386496] C:\pagefile.sys
[22/12/2010 - 17:16:38 | D ] C:\Program Files
[15/07/2010 - 15:18:46 | D ] C:\Qoobox
[22/12/2010 - 22:51:34 | SHD ] C:\RECYCLER
[14/01/2010 - 19:02:43 | A | 347] C:\RHDSetup.log
[22/12/2010 - 22:15:32 | D ] C:\rsit
[27/03/2010 - 12:00:55 | SHD ] C:\System Volume Information
[24/01/2010 - 18:43:44 | D ] C:\temp
[18/01/2010 - 12:45:26 | D ] C:\totalcmd
[22/12/2010 - 22:51:49 | D ] C:\UsbFix
[22/12/2010 - 22:51:54 | A | 1278] C:\UsbFix.txt
[25/01/2010 - 07:09:48 | HD ] C:\VJVod_Cache
[22/12/2010 - 22:47:14 | D ] C:\WINDOWS
[06/05/2010 - 18:53:42 | D ] C:\WMP3E_PRO
[04/09/2009 - 07:11:04 | R | 210432] E:\1032.mst
[04/09/2009 - 07:11:04 | R | 10240] E:\1033.mst
[04/09/2009 - 07:11:04 | R | 482304] E:\1043.mst
[04/09/2009 - 07:11:04 | R | 566784] E:\1049.mst
[04/09/2009 - 07:11:04 | R | 335360] E:\1053.mst
[04/09/2009 - 07:10:21 | R | 47] E:\Autorun.inf
[04/09/2009 - 07:11:04 | RD ] E:\CommonAppData
[18/10/2009 - 17:40:58 | RD ] E:\Crack
[04/09/2009 - 07:11:15 | RD ] E:\DirectX9c
[04/09/2009 - 07:11:04 | R | 1696256] E:\Pro Evolution Soccer 2010.msi
[04/09/2009 - 07:10:21 | R | 112008] E:\Setup.exe
[04/09/2009 - 07:10:21 | R | 214408] E:\autorun.exe
[04/09/2009 - 07:10:56 | RD ] E:\launcher
[04/09/2009 - 07:11:15 | RD ] E:\program files
[04/09/2009 - 07:10:21 | R | 1103] E:\readme.html
[04/09/2009 - 07:10:21 | R | 64] E:\region.inf
[12/07/2010 - 14:28:46 | A | 173426810] F:\slovak ice hockey tribute.avi
[24/11/2010 - 22:42:24 | RSHD ] F:\kolemasakar
[12/12/2010 - 20:32:10 | RSHD ] F:\dijagnoza
[09/12/2009 - 16:20:04 | A | 945592] F:\Pardavy_100x100.psd
[09/12/2009 - 19:46:32 | A | 1075918] F:\Pardavy_100x100(2).psd
[09/12/2009 - 13:48:00 | A | 1170448] F:\Janko.psd
[09/12/2009 - 13:48:08 | A | 1169780] F:\pardavy.psd
[16/07/2010 - 16:29:02 | A | 349] F:\www.txt
[07/12/2010 - 12:15:28 | A | 41] F:\pmp_usb.ini
[01/01/1601 - 01:00:00 | RH | 0] G:\MEMSTICK.IND
[01/01/1601 - 01:00:00 | RH | 0] G:\MSTK_PRO.IND
[24/12/2008 - 17:54:58 | D ] G:\DCIM
[24/12/2008 - 17:54:58 | D ] G:\MP3
[24/12/2008 - 17:54:58 | D ] G:\MSSEMC
[13/12/2010 - 18:07:24 | N | 378] G:\autorun.inf
[01/01/2000 - 00:00:04 | D ] G:\music
[01/01/2000 - 00:00:04 | D ] G:\picture
[01/01/2000 - 00:00:04 | D ] G:\other
[01/01/2000 - 00:00:04 | D ] G:\video
[01/01/2000 - 00:00:04 | D ] G:\theme
[01/01/2000 - 00:00:04 | D ] G:\webpage
[01/01/2000 - 00:00:04 | HD ] G:\system
[12/05/2008 - 20:19:20 | RH | 4857] G:\default-capability.xml
[12/05/2008 - 20:19:20 | RH | 262] G:\customized-capability.xml
[30/11/2010 - 18:46:52 | RSHD ] G:\kolemasakar
[13/12/2010 - 14:32:54 | RSHD ] G:\dijagnoza
################## | Vaccin |
C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
F:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
G:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
################## | Upload |
Please send the file: C:\UsbFix_Upload_Me_BRANO.zip
http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution.
################## | E.O.F |

Re: Help
Jake virusy Vam ESS vyhazuje na tech fleshkach - dejte pripadne screen hlasky...
Re: Help
Zapojte tedy i mobil a udelejte znovu USBFix pokud tedy mobil nebyl zapojen...
Re: Help
Ty dva cervene soubory otestujte na virusTotal - viz muj podpis a napiste vysledek...
Re: Help
MOBIL
prvý
vikikurva.exe
Submission date:
2010-12-22 22:14:27 (UTC)
Current status:
queued (#1) queued (#1) analysing finished
Result:
30/ 42 (71.4%)
AhnLab-V3 2010.12.23.01 2010.12.22 Worm/Win32.Palevo
AntiVir 7.11.0.144 2010.12.22 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2010.12.22 -
Avast 4.8.1351.0 2010.12.22 Win32:Palevo-AI
Avast5 5.0.677.0 2010.12.22 Win32:Palevo-AI
AVG 9.0.0.851 2010.12.22 Cryptic.BHD
BitDefender 7.2 2010.12.22 Gen:Variant.Kazy.3490
CAT-QuickHeal 11.00 2010.12.22 Trojan.Rimecud.AA
ClamAV 0.96.4.0 2010.12.22 -
Command 5.2.11.5 2010.12.22 W32/Rimecud.O.gen!Eldorado
Comodo 7152 2010.12.22 -
DrWeb 5.0.2.03300 2010.12.22 Trojan.Packed.21241
eSafe 7.0.17.0 2010.12.22 -
eTrust-Vet 36.1.8055 2010.12.22 Win32/Rimecud.C!Generic
F-Prot 4.6.2.117 2010.12.22 W32/Rimecud.O.gen!Eldorado
F-Secure 9.0.16160.0 2010.12.22 Gen:Variant.Kazy.3490
Fortinet 4.2.254.0 2010.12.21 W32/Pakerime.BHD!tr
GData 21 2010.12.22 Gen:Variant.Kazy.3490
Ikarus T3.1.1.90.0 2010.12.22 -
Jiangmin 13.0.900 2010.12.22 -
K7AntiVirus 9.74.3319 2010.12.22 Riskware
Kaspersky 7.0.0.125 2010.12.22 -
McAfee 5.400.0.1158 2010.12.22 Generic Dropper.xi
McAfee-GW-Edition 2010.1C 2010.12.22 Generic Dropper.xi
Microsoft 1.6402 2010.12.22 Trojan:Win32/Rimecud.A
NOD32 5726 2010.12.22 a variant of Win32/Kryptik.IEH
Norman 6.06.12 2010.12.22 -
nProtect 2010-12-22.01 2010.12.22 Gen:Variant.Kazy.3490
Panda 10.0.2.7 2010.12.22 Generic Trojan
PCTools 7.0.3.5 2010.12.22 Malware.Pilleuz
Prevx 3.0 2010.12.22 High Risk Cloaked Malware
Rising 22.79.01.04 2010.12.22 -
Sophos 4.60.0 2010.12.22 Mal/Palevo-A
SUPERAntiSpyware 4.40.0.1006 2010.12.22 -
Symantec 20101.3.0.103 2010.12.22 W32.Pilleuz!gen15
TheHacker 6.7.0.1.104 2010.12.21 -
TrendMicro 9.120.0.1004 2010.12.22 TROJ_RIMECUD.SMF
TrendMicro-HouseCall 9.120.0.1004 2010.12.22 TROJ_RIMECUD.SMF
VBA32 3.12.14.2 2010.12.21 Trojan.SB.01102
VIPRE 7763 2010.12.22 Trojan.Win32.Rimecud.d (v)
ViRobot 2010.12.22.4214 2010.12.22 -
VirusBuster 13.6.108.0 2010.12.22 Worm.Palevo.Gen!Pac.10
Additional information
Show all
MD5 : 67abcfedbda19cc49e70dfee61aea83e
SHA1 : c237de576c7520b2a562385ed8662adff6a90d3c
SHA256: 0d773a382c95d1fa69751caf9f62526e2751fede737d2f83f36c4423eefb3cbc
druhý
File name:
prognoza.exe
Submission date:
2010-12-22 22:15:33 (UTC)
Current status:
queued (#2) queued analysing finished
Result:
37/ 40 (92.5%)
VT Community
not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.12.23.01 2010.12.22 Worm/Win32.Palevo
AntiVir 7.11.0.144 2010.12.22 TR/Rimecud.A.1930
Antiy-AVL 2.0.3.7 2010.12.22 Trojan/Win32.Pincav.gen
Avast 4.8.1351.0 2010.12.22 Win32:AutoRun-BRS
Avast5 5.0.677.0 2010.12.22 Win32:AutoRun-BRS
AVG 9.0.0.851 2010.12.22 Cryptic
BitDefender 7.2 2010.12.22 Gen:Variant.Kazy.4594
CAT-QuickHeal 11.00 2010.12.22 Trojan.Rimecud.a
ClamAV 0.96.4.0 2010.12.22 -
Command 5.2.11.5 2010.12.22 W32/Rimecud.O.gen!Eldorado
Comodo 7152 2010.12.22 Heur.Suspicious
eSafe 7.0.17.0 2010.12.22 Win32.GenVariant.Kaz
eTrust-Vet 36.1.8055 2010.12.22 Win32/Rimecud.F!generic
F-Prot 4.6.2.117 2010.12.22 W32/Rimecud.O.gen!Eldorado
F-Secure 9.0.16160.0 2010.12.22 Gen:Variant.Kazy.4594
Fortinet 4.2.254.0 2010.12.21 W32/PalevoPack.A!tr
GData 21 2010.12.22 Gen:Variant.Kazy.4594
Ikarus T3.1.1.90.0 2010.12.22 Trojan.Win32.Rimecud
Jiangmin 13.0.900 2010.12.22 Trojan/Pincav.kmz
K7AntiVirus 9.74.3319 2010.12.22 Trojan
McAfee 5.400.0.1158 2010.12.22 Generic Dropper.xn
McAfee-GW-Edition 2010.1C 2010.12.22 Generic Dropper.xn
Microsoft 1.6402 2010.12.22 Trojan:Win32/Rimecud.A
NOD32 5726 2010.12.22 a variant of Win32/Kryptik.INZ
Norman 6.06.12 2010.12.22 W32/Suspicious_Gen2.FAQCY
nProtect 2010-12-22.01 2010.12.22 Gen:Variant.Kazy.4594
Panda 10.0.2.7 2010.12.22 Generic Trojan
PCTools 7.0.3.5 2010.12.22 Trojan.Gen
Prevx 3.0 2010.12.22 High Risk Cloaked Malware
Rising 22.79.01.04 2010.12.22 Trojan.Win32.Generic.524D82D4
Sophos 4.60.0 2010.12.22 Mal/Palevo-A
SUPERAntiSpyware 4.40.0.1006 2010.12.22 -
Symantec 20101.3.0.103 2010.12.22 Trojan.Gen
TheHacker 6.7.0.1.104 2010.12.21 Trojan/Pincav.aobh
TrendMicro 9.120.0.1004 2010.12.22 TROJ_GEN.R4CC2L7
TrendMicro-HouseCall 9.120.0.1004 2010.12.22 TROJ_GEN.R4CC2L7
VBA32 3.12.14.2 2010.12.21 Trojan.Pincav.aobh
VIPRE 7763 2010.12.22 Trojan.Win32.Generic!SB.0
ViRobot 2010.12.22.4214 2010.12.22 -
VirusBuster 13.6.108.0 2010.12.22 Trojan.Rimecud.Gen!Pac.2
Additional information
Show all
MD5 : 1bcffe6548c975f9d79387bafaa751c7
SHA1 : 7b93fcce4c45ea3aeb06cbbcad0d731438268a9e
SHA256: 5bb15331ed5a17e4503c3dcb0976b1528226b17b0a6427139282355671a00f81
USB
File name:
prognoza.exe
Submission date:
2010-12-22 22:20:07 (UTC)
Current status:
queued (#9) queued (#10) analysing finished
Result:
39/ 42 (92.9%)
Antivirus Version Last Update Result
AhnLab-V3 2010.12.23.01 2010.12.22 Worm/Win32.Palevo
AntiVir 7.11.0.144 2010.12.22 TR/Rimecud.A.1930
Antiy-AVL 2.0.3.7 2010.12.22 Trojan/Win32.Pincav.gen
Avast 4.8.1351.0 2010.12.22 Win32:AutoRun-BRS
Avast5 5.0.677.0 2010.12.22 Win32:AutoRun-BRS
AVG 9.0.0.851 2010.12.22 Cryptic
BitDefender 7.2 2010.12.22 Gen:Variant.Kazy.4594
CAT-QuickHeal 11.00 2010.12.22 Trojan.Rimecud.a
ClamAV 0.96.4.0 2010.12.22 -
Command 5.2.11.5 2010.12.22 W32/Rimecud.O.gen!Eldorado
Comodo 7152 2010.12.22 Heur.Suspicious
DrWeb 5.0.2.03300 2010.12.22 Trojan.Packed.21251
Emsisoft 5.1.0.1 2010.12.22 Trojan.Win32.Rimecud!IK
eSafe 7.0.17.0 2010.12.22 Win32.GenVariant.Kaz
eTrust-Vet 36.1.8055 2010.12.22 Win32/Rimecud.F!generic
F-Prot 4.6.2.117 2010.12.22 W32/Rimecud.O.gen!Eldorado
F-Secure 9.0.16160.0 2010.12.22 Gen:Variant.Kazy.4594
Fortinet 4.2.254.0 2010.12.21 W32/PalevoPack.A!tr
GData 21 2010.12.22 Gen:Variant.Kazy.4594
Ikarus T3.1.1.90.0 2010.12.22 Trojan.Win32.Rimecud
Jiangmin 13.0.900 2010.12.22 Trojan/Pincav.kmz
K7AntiVirus 9.74.3319 2010.12.22 Trojan
Kaspersky 7.0.0.125 2010.12.22 Trojan.Win32.Pincav.aobh
McAfee 5.400.0.1158 2010.12.22 Generic Dropper.xn
McAfee-GW-Edition 2010.1C 2010.12.22 Generic Dropper.xn
Microsoft 1.6402 2010.12.22 Trojan:Win32/Rimecud.A
NOD32 5726 2010.12.22 a variant of Win32/Kryptik.INZ
Norman 6.06.12 2010.12.22 W32/Suspicious_Gen2.FAQCY
nProtect 2010-12-22.01 2010.12.22 Gen:Variant.Kazy.4594
Panda 10.0.2.7 2010.12.22 Generic Trojan
PCTools 7.0.3.5 2010.12.22 Trojan.Gen
Prevx 3.0 2010.12.22 High Risk Cloaked Malware
Rising 22.79.01.04 2010.12.22 Trojan.Win32.Generic.524D82D4
Sophos 4.60.0 2010.12.22 Mal/Palevo-A
SUPERAntiSpyware 4.40.0.1006 2010.12.22 -
Symantec 20101.3.0.103 2010.12.22 Trojan.Gen
TheHacker 6.7.0.1.104 2010.12.21 Trojan/Pincav.aobh
TrendMicro 9.120.0.1004 2010.12.22 TROJ_GEN.R4CC2L7
TrendMicro-HouseCall 9.120.0.1004 2010.12.22 TROJ_GEN.R4CC2L7
VIPRE 7763 2010.12.22 Trojan.Win32.Generic!SB.0
ViRobot 2010.12.22.4214 2010.12.22 -
VirusBuster 13.6.108.0 2010.12.22 Trojan.Rimecud.Gen!Pac.2
Additional information
Show all
MD5 : 1bcffe6548c975f9d79387bafaa751c7
SHA1 : 7b93fcce4c45ea3aeb06cbbcad0d731438268a9e
SHA256: 5bb15331ed5a17e4503c3dcb0976b1528226b17b0a6427139282355671a00f81
prvý
vikikurva.exe
Submission date:
2010-12-22 22:14:27 (UTC)
Current status:
queued (#1) queued (#1) analysing finished
Result:
30/ 42 (71.4%)
AhnLab-V3 2010.12.23.01 2010.12.22 Worm/Win32.Palevo
AntiVir 7.11.0.144 2010.12.22 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2010.12.22 -
Avast 4.8.1351.0 2010.12.22 Win32:Palevo-AI
Avast5 5.0.677.0 2010.12.22 Win32:Palevo-AI
AVG 9.0.0.851 2010.12.22 Cryptic.BHD
BitDefender 7.2 2010.12.22 Gen:Variant.Kazy.3490
CAT-QuickHeal 11.00 2010.12.22 Trojan.Rimecud.AA
ClamAV 0.96.4.0 2010.12.22 -
Command 5.2.11.5 2010.12.22 W32/Rimecud.O.gen!Eldorado
Comodo 7152 2010.12.22 -
DrWeb 5.0.2.03300 2010.12.22 Trojan.Packed.21241
eSafe 7.0.17.0 2010.12.22 -
eTrust-Vet 36.1.8055 2010.12.22 Win32/Rimecud.C!Generic
F-Prot 4.6.2.117 2010.12.22 W32/Rimecud.O.gen!Eldorado
F-Secure 9.0.16160.0 2010.12.22 Gen:Variant.Kazy.3490
Fortinet 4.2.254.0 2010.12.21 W32/Pakerime.BHD!tr
GData 21 2010.12.22 Gen:Variant.Kazy.3490
Ikarus T3.1.1.90.0 2010.12.22 -
Jiangmin 13.0.900 2010.12.22 -
K7AntiVirus 9.74.3319 2010.12.22 Riskware
Kaspersky 7.0.0.125 2010.12.22 -
McAfee 5.400.0.1158 2010.12.22 Generic Dropper.xi
McAfee-GW-Edition 2010.1C 2010.12.22 Generic Dropper.xi
Microsoft 1.6402 2010.12.22 Trojan:Win32/Rimecud.A
NOD32 5726 2010.12.22 a variant of Win32/Kryptik.IEH
Norman 6.06.12 2010.12.22 -
nProtect 2010-12-22.01 2010.12.22 Gen:Variant.Kazy.3490
Panda 10.0.2.7 2010.12.22 Generic Trojan
PCTools 7.0.3.5 2010.12.22 Malware.Pilleuz
Prevx 3.0 2010.12.22 High Risk Cloaked Malware
Rising 22.79.01.04 2010.12.22 -
Sophos 4.60.0 2010.12.22 Mal/Palevo-A
SUPERAntiSpyware 4.40.0.1006 2010.12.22 -
Symantec 20101.3.0.103 2010.12.22 W32.Pilleuz!gen15
TheHacker 6.7.0.1.104 2010.12.21 -
TrendMicro 9.120.0.1004 2010.12.22 TROJ_RIMECUD.SMF
TrendMicro-HouseCall 9.120.0.1004 2010.12.22 TROJ_RIMECUD.SMF
VBA32 3.12.14.2 2010.12.21 Trojan.SB.01102
VIPRE 7763 2010.12.22 Trojan.Win32.Rimecud.d (v)
ViRobot 2010.12.22.4214 2010.12.22 -
VirusBuster 13.6.108.0 2010.12.22 Worm.Palevo.Gen!Pac.10
Additional information
Show all
MD5 : 67abcfedbda19cc49e70dfee61aea83e
SHA1 : c237de576c7520b2a562385ed8662adff6a90d3c
SHA256: 0d773a382c95d1fa69751caf9f62526e2751fede737d2f83f36c4423eefb3cbc
druhý
File name:
prognoza.exe
Submission date:
2010-12-22 22:15:33 (UTC)
Current status:
queued (#2) queued analysing finished
Result:
37/ 40 (92.5%)
VT Community
not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.12.23.01 2010.12.22 Worm/Win32.Palevo
AntiVir 7.11.0.144 2010.12.22 TR/Rimecud.A.1930
Antiy-AVL 2.0.3.7 2010.12.22 Trojan/Win32.Pincav.gen
Avast 4.8.1351.0 2010.12.22 Win32:AutoRun-BRS
Avast5 5.0.677.0 2010.12.22 Win32:AutoRun-BRS
AVG 9.0.0.851 2010.12.22 Cryptic
BitDefender 7.2 2010.12.22 Gen:Variant.Kazy.4594
CAT-QuickHeal 11.00 2010.12.22 Trojan.Rimecud.a
ClamAV 0.96.4.0 2010.12.22 -
Command 5.2.11.5 2010.12.22 W32/Rimecud.O.gen!Eldorado
Comodo 7152 2010.12.22 Heur.Suspicious
eSafe 7.0.17.0 2010.12.22 Win32.GenVariant.Kaz
eTrust-Vet 36.1.8055 2010.12.22 Win32/Rimecud.F!generic
F-Prot 4.6.2.117 2010.12.22 W32/Rimecud.O.gen!Eldorado
F-Secure 9.0.16160.0 2010.12.22 Gen:Variant.Kazy.4594
Fortinet 4.2.254.0 2010.12.21 W32/PalevoPack.A!tr
GData 21 2010.12.22 Gen:Variant.Kazy.4594
Ikarus T3.1.1.90.0 2010.12.22 Trojan.Win32.Rimecud
Jiangmin 13.0.900 2010.12.22 Trojan/Pincav.kmz
K7AntiVirus 9.74.3319 2010.12.22 Trojan
McAfee 5.400.0.1158 2010.12.22 Generic Dropper.xn
McAfee-GW-Edition 2010.1C 2010.12.22 Generic Dropper.xn
Microsoft 1.6402 2010.12.22 Trojan:Win32/Rimecud.A
NOD32 5726 2010.12.22 a variant of Win32/Kryptik.INZ
Norman 6.06.12 2010.12.22 W32/Suspicious_Gen2.FAQCY
nProtect 2010-12-22.01 2010.12.22 Gen:Variant.Kazy.4594
Panda 10.0.2.7 2010.12.22 Generic Trojan
PCTools 7.0.3.5 2010.12.22 Trojan.Gen
Prevx 3.0 2010.12.22 High Risk Cloaked Malware
Rising 22.79.01.04 2010.12.22 Trojan.Win32.Generic.524D82D4
Sophos 4.60.0 2010.12.22 Mal/Palevo-A
SUPERAntiSpyware 4.40.0.1006 2010.12.22 -
Symantec 20101.3.0.103 2010.12.22 Trojan.Gen
TheHacker 6.7.0.1.104 2010.12.21 Trojan/Pincav.aobh
TrendMicro 9.120.0.1004 2010.12.22 TROJ_GEN.R4CC2L7
TrendMicro-HouseCall 9.120.0.1004 2010.12.22 TROJ_GEN.R4CC2L7
VBA32 3.12.14.2 2010.12.21 Trojan.Pincav.aobh
VIPRE 7763 2010.12.22 Trojan.Win32.Generic!SB.0
ViRobot 2010.12.22.4214 2010.12.22 -
VirusBuster 13.6.108.0 2010.12.22 Trojan.Rimecud.Gen!Pac.2
Additional information
Show all
MD5 : 1bcffe6548c975f9d79387bafaa751c7
SHA1 : 7b93fcce4c45ea3aeb06cbbcad0d731438268a9e
SHA256: 5bb15331ed5a17e4503c3dcb0976b1528226b17b0a6427139282355671a00f81
USB
File name:
prognoza.exe
Submission date:
2010-12-22 22:20:07 (UTC)
Current status:
queued (#9) queued (#10) analysing finished
Result:
39/ 42 (92.9%)
Antivirus Version Last Update Result
AhnLab-V3 2010.12.23.01 2010.12.22 Worm/Win32.Palevo
AntiVir 7.11.0.144 2010.12.22 TR/Rimecud.A.1930
Antiy-AVL 2.0.3.7 2010.12.22 Trojan/Win32.Pincav.gen
Avast 4.8.1351.0 2010.12.22 Win32:AutoRun-BRS
Avast5 5.0.677.0 2010.12.22 Win32:AutoRun-BRS
AVG 9.0.0.851 2010.12.22 Cryptic
BitDefender 7.2 2010.12.22 Gen:Variant.Kazy.4594
CAT-QuickHeal 11.00 2010.12.22 Trojan.Rimecud.a
ClamAV 0.96.4.0 2010.12.22 -
Command 5.2.11.5 2010.12.22 W32/Rimecud.O.gen!Eldorado
Comodo 7152 2010.12.22 Heur.Suspicious
DrWeb 5.0.2.03300 2010.12.22 Trojan.Packed.21251
Emsisoft 5.1.0.1 2010.12.22 Trojan.Win32.Rimecud!IK
eSafe 7.0.17.0 2010.12.22 Win32.GenVariant.Kaz
eTrust-Vet 36.1.8055 2010.12.22 Win32/Rimecud.F!generic
F-Prot 4.6.2.117 2010.12.22 W32/Rimecud.O.gen!Eldorado
F-Secure 9.0.16160.0 2010.12.22 Gen:Variant.Kazy.4594
Fortinet 4.2.254.0 2010.12.21 W32/PalevoPack.A!tr
GData 21 2010.12.22 Gen:Variant.Kazy.4594
Ikarus T3.1.1.90.0 2010.12.22 Trojan.Win32.Rimecud
Jiangmin 13.0.900 2010.12.22 Trojan/Pincav.kmz
K7AntiVirus 9.74.3319 2010.12.22 Trojan
Kaspersky 7.0.0.125 2010.12.22 Trojan.Win32.Pincav.aobh
McAfee 5.400.0.1158 2010.12.22 Generic Dropper.xn
McAfee-GW-Edition 2010.1C 2010.12.22 Generic Dropper.xn
Microsoft 1.6402 2010.12.22 Trojan:Win32/Rimecud.A
NOD32 5726 2010.12.22 a variant of Win32/Kryptik.INZ
Norman 6.06.12 2010.12.22 W32/Suspicious_Gen2.FAQCY
nProtect 2010-12-22.01 2010.12.22 Gen:Variant.Kazy.4594
Panda 10.0.2.7 2010.12.22 Generic Trojan
PCTools 7.0.3.5 2010.12.22 Trojan.Gen
Prevx 3.0 2010.12.22 High Risk Cloaked Malware
Rising 22.79.01.04 2010.12.22 Trojan.Win32.Generic.524D82D4
Sophos 4.60.0 2010.12.22 Mal/Palevo-A
SUPERAntiSpyware 4.40.0.1006 2010.12.22 -
Symantec 20101.3.0.103 2010.12.22 Trojan.Gen
TheHacker 6.7.0.1.104 2010.12.21 Trojan/Pincav.aobh
TrendMicro 9.120.0.1004 2010.12.22 TROJ_GEN.R4CC2L7
TrendMicro-HouseCall 9.120.0.1004 2010.12.22 TROJ_GEN.R4CC2L7
VIPRE 7763 2010.12.22 Trojan.Win32.Generic!SB.0
ViRobot 2010.12.22.4214 2010.12.22 -
VirusBuster 13.6.108.0 2010.12.22 Trojan.Rimecud.Gen!Pac.2
Additional information
Show all
MD5 : 1bcffe6548c975f9d79387bafaa751c7
SHA1 : 7b93fcce4c45ea3aeb06cbbcad0d731438268a9e
SHA256: 5bb15331ed5a17e4503c3dcb0976b1528226b17b0a6427139282355671a00f81

Re: Help
- Provedte aktualizaci - treti zalozka
- Provedte uplny sken - nic nemazte

- MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni
Re: Help
Malwarebytes' Anti-Malware 1.50.1.1100
http://www.malwarebytes.org
Verzia databázy: 5379
Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512
22.12.2010 23:29:34
mbam-log-2010-12-22 (23-29-31).txt
Typ kontroly: Úplná kontrola (F:\|G:\|)
Objektov kontrolovaných: 128516
Uplynutý čas: 3 min, 40 sek
Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 2
Infikované služby pamäte:
(Škodlivé položky neboli zistené)
Infikované moduly pamäte:
(Škodlivé položky neboli zistené)
Infikované registračné kľúče:
(Škodlivé položky neboli zistené)
Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)
Infikované položky registračných dát:
(Škodlivé položky neboli zistené)
Infikované priečinky:
(Škodlivé položky neboli zistené)
Infikované súbory:
f:\dijagnoza\prognoza.exe (Heuristics.Shuriken) -> No action taken.
g:\dijagnoza\prognoza.exe (Heuristics.Shuriken) -> No action taken.
a este nevedeli by ste preco mi pada windows ked sa mi zobrazi napriklad vela fotiek v mobile ??? stale hodi neodoslat chyba a restartuje explorer
http://www.malwarebytes.org
Verzia databázy: 5379
Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512
22.12.2010 23:29:34
mbam-log-2010-12-22 (23-29-31).txt
Typ kontroly: Úplná kontrola (F:\|G:\|)
Objektov kontrolovaných: 128516
Uplynutý čas: 3 min, 40 sek
Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 2
Infikované služby pamäte:
(Škodlivé položky neboli zistené)
Infikované moduly pamäte:
(Škodlivé položky neboli zistené)
Infikované registračné kľúče:
(Škodlivé položky neboli zistené)
Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)
Infikované položky registračných dát:
(Škodlivé položky neboli zistené)
Infikované priečinky:
(Škodlivé položky neboli zistené)
Infikované súbory:
f:\dijagnoza\prognoza.exe (Heuristics.Shuriken) -> No action taken.
g:\dijagnoza\prognoza.exe (Heuristics.Shuriken) -> No action taken.
a este nevedeli by ste preco mi pada windows ked sa mi zobrazi napriklad vela fotiek v mobile ??? stale hodi neodoslat chyba a restartuje explorer

Re: Help
- Start->spustit->notepad
- Vlozte text nize
Kód: Vybrat vše
Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{EF99BD32-C1FB-11D2-892F-0090271D4F88}"=- "{D4027C7F-154A-4066-A1AD-4243D8127440}"=- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "WinampAgent"=- "Adobe Reader Speed Launcher"=- "Adobe ARM"=- "QuickTime Task"=- "NeroFilterCheck"=-- Soubor ulozte jako oprava.reg
- Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)

- Zavrit notepad a spustit dvojklikem oprava.reg
- Pripadny dotaz na zmenu registru potvrdte
- Okno jen problikne a opravi regsitry - soubor muzete smazat
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
- Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
- Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
- prepnete se do zalozky Nastroje
- Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
- Toto provedte se vsemi disky
- Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
- Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
- Kliknete na Analyzovat
- Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
- Postup provedte se vsemi disky
- Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
- Vyhodou programku je, ze se neinstaluje
- Staci tedy jen stahnout dle verze vaseho OS a rozbalit
- Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
- Probehne analyza disku a nasledne i defragmentace
Re: Help
dakujem a prosim vas
s tymto by ste mi este nevedeli pomoct?a este nevedeli by ste preco mi pada windows ked sa mi zobrazi napriklad vela fotiek v mobile ??? stale hodi neodoslat chyba a restartuje explorer






Přispějete na provoz fóra?