Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o pomoc, pc se seká a naskakuje csrss.exe

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
munda
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 05 dub 2010 19:49

Prosím o pomoc, pc se seká a naskakuje csrss.exe

#1 Příspěvek od munda »

Počítač je nedávno přeinstalovávaný a už je zase zpomalenej videa na internetu se sekaj a ještě k tomu jsem na flashce omylem kliknul na jeden vir a při startu win mi začalo naskakovat csrss.exe nenalezen. Předem děkuji za pomoc
log z rsit:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Munďa at 2011-05-12 11:58:50
Systém Microsoft Windows XP Professional Service Pack 3
System drive G: has 26 GB (52%) free of 50 GB
Total RAM: 1535 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:59:00, on 12.5.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\Program Files\ESET\ESET Smart Security\ekrn.exe
G:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE
G:\Program Files\Java\jre6\bin\jqs.exe
G:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\Explorer.exe
G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
G:\Program Files\Analog Devices\SoundMAX\SMTray.exe
G:\Program Files\ESET\ESET Smart Security\egui.exe
G:\Program Files\Common Files\Java\Java Update\jusched.exe
G:\Program Files\DivX\DivX Update\DivXUpdate.exe
G:\WINDOWS\system32\ctfmon.exe
G:\Program Files\DAEMON Tools Lite\DTLite.exe
G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE
G:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
G:\Program Files\PC Connectivity Solution\ServiceLayer.exe
G:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
G:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
G:\Program Files\Mozilla Firefox\firefox.exe
G:\Program Files\Mozilla Firefox\plugin-container.exe
G:\Program Files\QIP 2010\qip.exe
G:\Documents and Settings\Munďa\Data aplikací\QipGuard\QipGuard.exe
G:\Program Files\QipGuard\QipGuard.exe
G:\Program Files\Microsoft Office\Office12\WINWORD.EXE
G:\Documents and Settings\Munďa\Dokumenty\Stažené soubory\RSIT.exe
G:\Program Files\trend micro\Munďa.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: Shell=Explorer.exe csrcs.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - G:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - G:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - G:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: QipLI - {6B5863A0-C43F-4C0A-982B-CC0E9125783F} - G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qstatsrv.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - G:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - G:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - G:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - G:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - G:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - G:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [GrooveMonitor] "G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Smapp] G:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [egui] "G:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "G:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "G:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "G:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "G:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\RunServices: [csrcs] G:\WINDOWS\system32\csrcs.exe
O4 - HKCU\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "G:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Infium] "G:\Program Files\QIP 2010\qip.exe" /autorun
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "G:\WINDOWS\TEMP\E_S63A.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [PC Suite Tray] "G:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [QIP Internet Guardian] G:\Documents and Settings\Munďa\Data aplikací\QipGuard\QipGuard.exe /p
O4 - HKLM\..\Policies\Explorer\Run: [csrcs] G:\WINDOWS\system32\csrcs.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://G:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - G:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - G:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - G:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - G:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - G:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - G:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - G:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - G:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: QipGuard - QIP.ru - G:\Program Files\QipGuard\QipGuard.exe
O23 - Service: ServiceLayer - Nokia - G:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - G:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 8853 bytes

======Scheduled tasks folder======

G:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
G:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - G:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - G:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - G:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6B5863A0-C43F-4C0A-982B-CC0E9125783F}]
QipLI Class - G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qstatsrv.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - G:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2011-05-10 141184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - G:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-21 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - G:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-03-21 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - G:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - G:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - G:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"Smapp"=G:\Program Files\Analog Devices\SoundMAX\SMTray.exe [2003-05-05 143360]
"egui"=G:\Program Files\ESET\ESET Smart Security\egui.exe [2010-02-26 2140880]
"Adobe Reader Speed Launcher"=G:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=G:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"SunJavaUpdateSched"=G:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"DivXUpdate"=G:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"csrcs"=G:\WINDOWS\system32\csrcs.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=G:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=G:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"Infium"=G:\Program Files\QIP 2010\qip.exe [2011-05-10 6789504]
"EPSON Stylus DX4400 Series"=G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [2007-03-01 180736]
"PC Suite Tray"=G:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-12-21 1483264]
"QIP Internet Guardian"=G:\Documents and Settings\Munďa\Data aplikací\QipGuard\QipGuard.exe [2011-05-10 187776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
G:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - G:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=G:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"G:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="G:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"G:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="G:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"G:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="G:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"G:\Program Files\QIP 2010\qip.exe"="G:\Program Files\QIP 2010\qip.exe:*:Enabled:QIP 2010"
"C:\Casino\ParadiseCasino\casino.exe"="C:\Casino\ParadiseCasino\casino.exe:*:Enabled:casino"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-05-12 11:58:51 ----D---- G:\Program Files\trend micro
2011-05-12 11:58:50 ----D---- G:\rsit
2011-05-12 11:16:05 ----D---- G:\Program Files\QipGuard
2011-05-12 11:16:05 ----D---- G:\Documents and Settings\Munďa\Data aplikací\QipGuard
2011-05-11 23:42:32 ----SHD---- G:\Config.Msi
2011-05-11 17:25:31 ----D---- G:\Documents and Settings\Munďa\Data aplikací\EPSON
2011-05-10 14:10:44 ----D---- G:\Documents and Settings\Munďa\Data aplikací\DivX
2011-05-10 14:10:22 ----N---- G:\WINDOWS\system32\drivers\PxHelp20.sys
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\vxblock.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxwave.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxsfs.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxmas.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxinsi64.exe
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxinsa64.exe
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxhpinst.exe
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxdrv.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxcpyi64.exe
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxcpya64.exe
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxafs.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\px.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\drivers\cdralw2k.sys
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\drivers\cdr4_xp.sys
2011-05-10 14:09:29 ----D---- G:\Program Files\Common Files\DivX Shared
2011-05-10 13:55:54 ----D---- G:\Program Files\Google
2011-05-10 13:55:31 ----D---- G:\Program Files\DivX
2011-05-10 13:53:34 ----D---- G:\Documents and Settings\All Users\Data aplikací\DivX
2011-05-10 13:02:07 ----D---- G:\Documents and Settings\All Users\Data aplikací\Guitar Pro 6
2011-04-29 12:37:27 ----HDC---- G:\WINDOWS\$NtUninstallWudf01009$
2011-04-29 12:37:04 ----A---- G:\WINDOWS\system32\drivers\usbser.sys
2011-04-29 12:36:36 ----N---- G:\WINDOWS\system32\spmsgXP_2k3.dll
2011-04-29 12:36:30 ----HDC---- G:\WINDOWS\$NtUninstallWdf01009$
2011-04-29 12:35:32 ----D---- G:\Documents and Settings\Munďa\Data aplikací\Nokia
2011-04-29 12:35:28 ----D---- G:\Documents and Settings\Munďa\Data aplikací\PC Suite
2011-04-29 12:35:28 ----D---- G:\Documents and Settings\All Users\Data aplikací\PC Suite
2011-04-29 12:34:56 ----D---- G:\Program Files\Common Files\PCSuite
2011-04-29 12:34:49 ----D---- G:\Program Files\Common Files\Nokia
2011-04-29 12:34:37 ----D---- G:\Program Files\DIFX
2011-04-29 12:34:35 ----A---- G:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-04-29 12:34:28 ----D---- G:\Program Files\PC Connectivity Solution
2011-04-29 12:33:49 ----A---- G:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2011-04-29 12:33:47 ----A---- G:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2011-04-29 12:33:46 ----A---- G:\WINDOWS\system32\drivers\ccdcmbo.sys
2011-04-29 12:33:43 ----DC---- G:\WINDOWS\system32\DRVSTORE
2011-04-29 12:33:43 ----A---- G:\WINDOWS\system32\wdfcoinstaller01009.dll
2011-04-29 12:33:43 ----A---- G:\WINDOWS\system32\nmwcdcocls.dll
2011-04-29 12:33:43 ----A---- G:\WINDOWS\system32\drivers\ccdcmb.sys
2011-04-29 12:33:43 ----A---- G:\WINDOWS\system32\ccdcmbwu.dll
2011-04-29 12:33:42 ----A---- G:\WINDOWS\system32\nmwcdcls.dll
2011-04-29 12:33:41 ----D---- G:\Program Files\Nokia
2011-04-29 12:32:34 ----D---- G:\Documents and Settings\All Users\Data aplikací\Installations
2011-04-19 21:39:06 ----D---- G:\Documents and Settings\Munďa\Data aplikací\GetRightToGo
2011-04-15 11:55:46 ----HDC---- G:\WINDOWS\$NtUninstallKB2509553$
2011-04-15 11:45:12 ----HDC---- G:\WINDOWS\$NtUninstallKB2412687$
2011-04-15 11:43:49 ----HDC---- G:\WINDOWS\$NtUninstallKB2507618$
2011-04-15 11:42:12 ----HDC---- G:\WINDOWS\$NtUninstallKB2508272$
2011-04-15 11:42:00 ----HDC---- G:\WINDOWS\$NtUninstallKB2503658$
2011-04-15 11:41:48 ----HDC---- G:\WINDOWS\$NtUninstallKB2511455$
2011-04-15 11:41:18 ----HDC---- G:\WINDOWS\$NtUninstallKB2506223$
2011-04-15 11:40:57 ----HDC---- G:\WINDOWS\$NtUninstallKB2506212$
2011-04-15 11:40:34 ----HDC---- G:\WINDOWS\$NtUninstallKB2508429$
2011-04-15 11:40:09 ----HDC---- G:\WINDOWS\$NtUninstallKB2485663$

======List of files/folders modified in the last 1 months======

2011-05-12 11:59:00 ----D---- G:\WINDOWS\Prefetch
2011-05-12 11:58:52 ----D---- G:\WINDOWS\Temp
2011-05-12 11:58:51 ----RD---- G:\Program Files
2011-05-12 11:16:06 ----D---- G:\Program Files\QIP 2010
2011-05-11 23:42:53 ----A---- G:\WINDOWS\SchedLgU.Txt
2011-05-11 23:42:44 ----SHD---- G:\WINDOWS\Installer
2011-05-11 23:42:32 ----D---- G:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-05-11 23:38:43 ----A---- G:\WINDOWS\system32\MRT.exe
2011-05-11 17:50:50 ----SD---- G:\Documents and Settings\Munďa\Data aplikací\Microsoft
2011-05-10 14:10:22 ----D---- G:\WINDOWS\system32\drivers
2011-05-10 14:10:21 ----D---- G:\WINDOWS\system32
2011-05-10 14:09:29 ----D---- G:\Program Files\Common Files
2011-05-10 13:56:08 ----SD---- G:\WINDOWS\Tasks
2011-05-10 13:08:03 ----D---- G:\WINDOWS\system32\CatRoot2
2011-05-10 13:04:35 ----D---- G:\WINDOWS
2011-05-10 12:32:43 ----SD---- G:\WINDOWS\Downloaded Program Files
2011-05-10 12:32:43 ----HD---- G:\WINDOWS\inf
2011-05-08 20:41:33 ----D---- G:\Program Files\Mozilla Firefox
2011-05-04 14:18:12 ----A---- G:\WINDOWS\win.ini
2011-05-03 14:52:30 ----D---- G:\WINDOWS\WinSxS
2011-05-03 14:52:30 ----D---- G:\Program Files\Common Files\Microsoft Shared
2011-04-29 13:05:13 ----A---- G:\WINDOWS\system32\PerfStringBackup.INI
2011-04-29 13:04:13 ----D---- G:\WINDOWS\system32\drivers\UMDF
2011-04-29 12:37:10 ----RSHDC---- G:\WINDOWS\system32\dllcache
2011-04-29 12:36:45 ----A---- G:\WINDOWS\imsins.BAK
2011-04-15 14:05:04 ----D---- G:\Program Files\Internet Explorer
2011-04-15 11:44:06 ----HD---- G:\WINDOWS\$hf_mig$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; G:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; G:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; G:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 sptd;sptd; G:\WINDOWS\System32\Drivers\sptd.sys [2011-02-14 431672]
R1 ehdrv;ehdrv; G:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-02-26 114984]
R1 epfwtdi;epfwtdi; G:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-02-26 55232]
R1 intelppm;Řadič procesoru Intel; G:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 eamon;eamon; G:\WINDOWS\system32\DRIVERS\eamon.sys [2010-02-26 139192]
R2 epfw;epfw; G:\WINDOWS\system32\DRIVERS\epfw.sys [2010-02-26 134488]
R3 aeaudio;aeaudio; G:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 Epfwndis;Eset Personal Firewall; G:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-02-26 32584]
R3 nv;nv; G:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; G:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 smwdm;smwdm; G:\WINDOWS\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; G:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbprint;Třída USB Printer; G:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Ovladač skeneru USB; G:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; G:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; G:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S3 abiq03e8;abiq03e8; G:\WINDOWS\system32\drivers\abiq03e8.sys []
S3 Arp1394;Protokol 1394 ARP Client; G:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 NIC1394;1394 Net Driver; G:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 nmwcd;Nokia USB Phone Parent Driver; G:\WINDOWS\system32\drivers\ccdcmb.sys [2010-07-30 18048]
S3 nmwcdc;Nokia USB Communication Driver; G:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-07-30 23040]
S3 pccsmcfd;PCCS Mode Change Filter Driver; G:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; G:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-07-30 8192]
S3 usbser;USB Modem Driver; G:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; G:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-07-30 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; G:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VClone;VClone; G:\WINDOWS\system32\DRIVERS\VClone.sys [2009-08-09 29696]
S3 Wdf01000;Kernel Mode Driver Frameworks service; G:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; G:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; G:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-02-26 810120]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); G:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 JavaQuickStarterService;Java Quick Starter; G:\Program Files\Java\jre6\bin\jqs.exe [2011-03-21 153376]
R2 QipGuard;QipGuard; G:\Program Files\QipGuard\QipGuard.exe [2011-05-10 187776]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; G:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; G:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; G:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S2 gupdate;Služba Google Update (gupdate); G:\Program Files\Google\Update\GoogleUpdate.exe [2011-05-10 135664]
S3 EhttpSrv;ESET HTTP Server; G:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-02-26 33560]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; G:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; G:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; G:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; G:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]

-----------------EOF-----------------

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#2 Příspěvek od vyosek »

Zdravim a pekny den preji :)

:arrow: Poprosim i o druhy log z RSIT s nazvem info.txt, je ulozen v c:\rsit
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

munda
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 05 dub 2010 19:49

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#3 Příspěvek od munda »

info.txt logfile of random's system information tool 1.08 2011-05-12 11:59:06

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 G:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->G:\WINDOWS\system32\Macromed\Flash\FlashUtil10p_ActiveX.exe -maintain activex
Adobe Flash Player 10 Plugin-->G:\WINDOWS\system32\Macromed\Flash\FlashUtil10p_Plugin.exe -maintain plugin
Adobe Reader X (10.0.1) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AA0000000001}
Aktualizace systému Windows Internet Explorer 8 (KB976662)-->"G:\WINDOWS\ie8updates\KB976662-IE8\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB2141007)-->"G:\WINDOWS\$NtUninstallKB2141007$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB2345886)-->"G:\WINDOWS\$NtUninstallKB2345886$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB951978)-->"G:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB955759)-->"G:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB967715)-->"G:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB968389)-->"G:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB971029)-->"G:\WINDOWS\$NtUninstallKB971029$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB971737)-->"G:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB973687)-->"G:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB973815)-->"G:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB2378111)-->"G:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB952069)-->"G:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB954155)-->"G:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB973540)-->"G:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB973540)-->"G:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB975558)-->"G:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB978695)-->"G:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB979402)-->"G:\WINDOWS\$NtUninstallKB979402_WM9L$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2482017)-->"G:\WINDOWS\ie8updates\KB2482017-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2497640)-->"G:\WINDOWS\ie8updates\KB2497640-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2510531)-->"G:\WINDOWS\ie8updates\KB2510531-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB971961)-->"G:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB981332)-->"G:\WINDOWS\ie8updates\KB981332-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB982381)-->"G:\WINDOWS\ie8updates\KB982381-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2079403)-->"G:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2115168)-->"G:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2121546)-->"G:\WINDOWS\$NtUninstallKB2121546$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2229593)-->"G:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2259922)-->"G:\WINDOWS\$NtUninstallKB2259922$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2296011)-->"G:\WINDOWS\$NtUninstallKB2296011$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2347290)-->"G:\WINDOWS\$NtUninstallKB2347290$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2360937)-->"G:\WINDOWS\$NtUninstallKB2360937$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2387149)-->"G:\WINDOWS\$NtUninstallKB2387149$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2393802)-->"G:\WINDOWS\$NtUninstallKB2393802$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2412687)-->"G:\WINDOWS\$NtUninstallKB2412687$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2419632)-->"G:\WINDOWS\$NtUninstallKB2419632$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2423089)-->"G:\WINDOWS\$NtUninstallKB2423089$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2440591)-->"G:\WINDOWS\$NtUninstallKB2440591$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2443105)-->"G:\WINDOWS\$NtUninstallKB2443105$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2476687)-->"G:\WINDOWS\$NtUninstallKB2476687$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2478960)-->"G:\WINDOWS\$NtUninstallKB2478960$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2478971)-->"G:\WINDOWS\$NtUninstallKB2478971$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2479628)-->"G:\WINDOWS\$NtUninstallKB2479628$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2479943)-->"G:\WINDOWS\$NtUninstallKB2479943$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2481109)-->"G:\WINDOWS\$NtUninstallKB2481109$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2483185)-->"G:\WINDOWS\$NtUninstallKB2483185$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2485376)-->"G:\WINDOWS\$NtUninstallKB2485376$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2485663)-->"G:\WINDOWS\$NtUninstallKB2485663$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2503658)-->"G:\WINDOWS\$NtUninstallKB2503658$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2506212)-->"G:\WINDOWS\$NtUninstallKB2506212$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2506223)-->"G:\WINDOWS\$NtUninstallKB2506223$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2507618)-->"G:\WINDOWS\$NtUninstallKB2507618$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2508272)-->"G:\WINDOWS\$NtUninstallKB2508272$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2508429)-->"G:\WINDOWS\$NtUninstallKB2508429$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2509553)-->"G:\WINDOWS\$NtUninstallKB2509553$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2511455)-->"G:\WINDOWS\$NtUninstallKB2511455$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2524375)-->"G:\WINDOWS\$NtUninstallKB2524375$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB923561)-->"G:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB923789)-->G:\WINDOWS\system32\MacroMed\Flash\genuinst.exe G:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Aktualizace zabezpečení systému Windows XP (KB946648)-->"G:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB950762)-->"G:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB950974)-->"G:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB951376-v2)-->"G:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB951748)-->"G:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB952004)-->"G:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB952954)-->"G:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB955069)-->"G:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956572)-->"G:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956744)-->"G:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956802)-->"G:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956803)-->"G:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956844)-->"G:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB958644)-->"G:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB958869)-->"G:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB959426)-->"G:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960225)-->"G:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960803)-->"G:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960859)-->"G:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB961501)-->"G:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB969059)-->"G:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB970238)-->"G:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB970430)-->"G:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971468)-->"G:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971657)-->"G:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB972270)-->"G:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973507)-->"G:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973869)-->"G:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973904)-->"G:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974112)-->"G:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974318)-->"G:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974392)-->"G:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974571)-->"G:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975025)-->"G:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975467)-->"G:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975560)-->"G:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975561)-->"G:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975562)-->"G:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975713)-->"G:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB977816)-->"G:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB977914)-->"G:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978037)-->"G:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978338)-->"G:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978542)-->"G:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978601)-->"G:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978706)-->"G:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979309)-->"G:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979482)-->"G:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979559)-->"G:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979683)-->"G:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979687)-->"G:\WINDOWS\$NtUninstallKB979687$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980195)-->"G:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980218)-->"G:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980232)-->"G:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980436)-->"G:\WINDOWS\$NtUninstallKB980436$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB981322)-->"G:\WINDOWS\$NtUninstallKB981322$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB981997)-->"G:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982132)-->"G:\WINDOWS\$NtUninstallKB982132$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982214)-->"G:\WINDOWS\$NtUninstallKB982214$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982381)-->"G:\WINDOWS\$NtUninstallKB982381$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982665)-->"G:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe"
Balíček ovladače systému Windows - Nokia Modem (06/09/2010 7.01.0.8)-->G:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u G:\WINDOWS\system32\DRVSTORE\nokbtmdm_A6F4DB5C7B968742C0CEC6C3D94F498B3F04B319\nokbtmdm.inf
Balíček ovladače systému Windows - Nokia Modem (10/07/2010 4.6)-->G:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u G:\WINDOWS\system32\DRVSTORE\nokia_blue_0E737C5DBBFCF603DB03D27D4DE0E55B5A00309C\nokia_bluetooth.inf
Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)-->G:\PROGRA~1\DIFX\B4723E9A0713E5B1\dpinst.exe /u G:\WINDOWS\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.inf
Bosch Viewer-->I:\Bosch\ESITRO~1\MCVIEWER\UNWISE.EXE I:\Bosch\ESITRO~1\MCVIEWER\viewer_uninstall.log
Camera RAW Plug-In for EPSON Creativity Suite-->RunDll32 G:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "G:\Program Files\InstallShield Installation Information\{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}\SETUP.EXE" -l0x9 UNINST
CX4300_5500_DX4400 Manuál-->G:\Program Files\EPSON\TPMANUAL\CX4300_5500_DX4400\CZE\USE_G\DOCUNINS.EXE
DAEMON Tools Lite-->G:\Program Files\DAEMON Tools Lite\uninst.exe
DAEMON Tools Toolbar-->G:\Program Files\DAEMON Tools Toolbar\uninst.exe
Diagnostika elektronických systémů SD-SW-Setup:2009/1_1_10 KTS5-->"C:\Programme\Bosch\ESItronic\KTS500\uninst\unins000.exe"
DivX Setup-->G:\Documents and Settings\All Users\Data aplikací\DivX\Setup\DivXSetup.exe /uninstall /bundleGroupId divx.com
EPSON Attach To Email-->G:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 G:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "G:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x9 -UnInstall
EPSON Easy Photo Print-->RunDll32 G:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "G:\Program Files\InstallShield Installation Information\{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}\SETUP.EXE" -l0x9 UNINST
EPSON File Manager-->RunDll32 G:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "G:\Program Files\InstallShield Installation Information\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}\Setup.exe" -l0x9 UNINST
EPSON Scan Assistant-->RunDll32 G:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "G:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x9 -u
EPSON Scan-->G:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Web-To-Page-->RunDll32 G:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "G:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x9 -anything
ESI[tronic]-->I:\Bosch\ESITRO~1\Setup.exe -u
GeoGebra-->"G:\Program Files\GeoGebra\uninstaller.exe"
Google Chrome-->"G:\Program Files\Google\Chrome\Application\11.0.696.65\Installer\setup.exe" --uninstall --system-level
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Guitar Pro 5.2-->"G:\Program Files\Guitar Pro 5\unins000.exe"
Java(TM) 6 Update 24-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216024FF}
K-Lite Mega Codec Pack 4.1.7-->"G:\Program Files\K-Lite Codec Pack\unins000.exe"
Microsoft Compression Client Pack 1.0 for Windows XP-->"G:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9-->"G:\WINDOWS\$NtUninstallWdf01009$\spuninst\spuninst.exe"
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0405-0000-0000000FF1CE} /uninstall {E12F9D31-4025-4BC6-B1B2-AB262C5580B0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00BA-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"G:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0405-0000-0000000FF1CE} /uninstall {294B4278-CF7B-40B9-86A1-2D3FF0C2C524}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-041B-0000-0000000FF1CE} /uninstall {10EC59E5-9BCE-4884-BB1A-E28627220232}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.9-->"G:\WINDOWS\$NtUninstallWudf01009$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Mozilla Firefox 4.0.1 (x86 cs)-->G:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
Nokia Connectivity Cable Driver-->MsiExec.exe /I{4216D328-0FE8-48B8-85B8-BD300E6F080F}
Nokia PC Suite-->G:\Documents and Settings\All Users\Data aplikací\Installations\{F38FD0E4-B991-462B-873D-F2115EADD093}\Nokia_PC_Suite_cze_web.exe
Nokia PC Suite-->MsiExec.exe /I{F38FD0E4-B991-462B-873D-F2115EADD093}
Oprava Hotfix systému Windows XP (KB2443685)-->"G:\WINDOWS\$NtUninstallKB2443685$\spuninst\spuninst.exe"
Oprava Hotfix systému Windows XP (KB952287)-->"G:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Oprava Hotfix systému Windows XP (KB981793)-->"G:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"
ParadiseCasino-->C:\Casino\PARADI~1\UNWISE.EXE C:\Casino\PARADI~1\INSTALL.LOG
PC Connectivity Solution-->MsiExec.exe /I{D4AEC53C-1720-41D9-B6D7-6A60DE62D444}
PhotoFiltre-->"G:\Program Files\PhotoFiltre\Uninst.exe"
save2pc Light 4.16-->"G:\Program Files\FDRLab\save2pc\unins000.exe"
Security Update for 2007 Microsoft Office System (KB2288621)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5C497F0B-2061-4CC9-A61C-6B45B867354D}
Security Update for 2007 Microsoft Office System (KB2288931)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CD769337-C8AC-46DB-A7DC-643E50089263}
Security Update for 2007 Microsoft Office System (KB2345043)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {536FB502-775F-4494-BACE-C02CC90B7A5B}
Security Update for 2007 Microsoft Office System (KB2466156)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CEF209AB-F96D-404F-B5CC-44057C057CA3}
Security Update for 2007 Microsoft Office System (KB2509488)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {AD0DE453-0804-4495-9C91-33D0F9AA5463}
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB976321)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A}
Security Update for Microsoft Office Access 2007 (KB979440)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}
Security Update for Microsoft Office Access 2007 (KB979440)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5A4E43D5-858F-49BD-BA72-8F30E1793060}
Security Update for Microsoft Office Excel 2007 (KB2464583)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {151E2FEA-C3A6-4CB6-BE6B-16651FDF04BE}
Security Update for Microsoft Office Groove 2007 (KB2494047)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B91E2AEC-7F93-4E33-ACF6-EC90640CBE4F}
Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}
Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
Security Update for Microsoft Office PowerPoint 2007 (KB2535818)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8588DD11-6BD7-4400-B55C-DD5AB74B43E1}
Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {D75E6D0C-BADF-4F41-98B2-0C0F02C15062}
Security Update for Microsoft Office Publisher 2007 (KB2284697)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3A4CDE54-2403-483D-8D9A-15E3264410DF}
Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Security Update for Microsoft Office Word 2007 (KB2344993)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
Software tiskárny EPSON-->G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
SoundMAX-->RunDll32 G:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "G:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\Setup.exe"
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft Office OneNote 2007 (KB980729)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {329050A9-EF80-40F9-B633-74508F54C1FF}
Update for Microsoft Office Outlook 2007 (KB2509470)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {1365864D-4C58-489D-9982-844D75691CCC}
Update for Outlook 2007 Junk Email Filter (KB2536413)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {95DF5260-331D-4FFD-A2D5-C64164751945}
VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
Windows Media Format 11 runtime-->"G:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"G:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"G:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"G:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"G:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Xvid 1.2.1 final uninstall-->"G:\Program Files\Xvid\unins000.exe"
Zkušební hodnoty ESI-->G:\WINDOWS\IsUn0405.exe -fI:\Bosch\ESItronic\Uninst.isu

======Hosts File======

127.0.0.1 activation.guitar-pro.com

======Security center information======

AV: ESET Smart Security 4.2
FW: ESET personal firewall

======System event log======

Computer Name: AAAA-F89265598F
Event Code: 7036
Message: Stav služby Služba brány aplikačního rozhraní byl změněn na: Spuštěno

Record Number: 1581
Source Name: Service Control Manager
Time Written: 20110309135549.000000+060
Event Type: Informace
User:

Computer Name: AAAA-F89265598F
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě Služba brány aplikačního rozhraní úspěšně odeslán.

Record Number: 1580
Source Name: Service Control Manager
Time Written: 20110309135549.000000+060
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: AAAA-F89265598F
Event Code: 7036
Message: Stav služby Sledování umístění v síti (NLA) byl změněn na: Spuštěno

Record Number: 1579
Source Name: Service Control Manager
Time Written: 20110309135549.000000+060
Event Type: Informace
User:

Computer Name: AAAA-F89265598F
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě Sledování umístění v síti (NLA) úspěšně odeslán.

Record Number: 1578
Source Name: Service Control Manager
Time Written: 20110309135549.000000+060
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: AAAA-F89265598F
Event Code: 6005
Message: Služba Event Log byla spuštěna.

Record Number: 1577
Source Name: EventLog
Time Written: 20110309135537.000000+060
Event Type: Informace
User:

=====Application event log=====

Computer Name: AAAA-F89265598F
Event Code: 4097
Message: Aplikace I:\Bosch\ESItronic\Esi2.exe vygenerovala aplikační chybu.
K chybě došlo dne 15. 02. 2011 v 19:39:56,250
Vygenerovaná výjimka: c0000005 na adrese 00000000 (<nosymbols>)

Record Number: 117
Source Name: DrWatson
Time Written: 20110215193956.000000+060
Event Type: Informace
User:

Computer Name: AAAA-F89265598F
Event Code: 1000
Message: Chybující aplikace esi2.exe, verze 9.1.0.4, chybující modul unknown, verze 0.0.0.0, adresa chyby 0x00000000.

Record Number: 116
Source Name: Application Error
Time Written: 20110215193953.000000+060
Event Type: Chyba
User:

Computer Name: AAAA-F89265598F
Event Code: 1800
Message: Služba Centrum zabezpečení systému Windows byla spuštěna.

Record Number: 115
Source Name: SecurityCenter
Time Written: 20110215193423.000000+060
Event Type: Informace
User:

Computer Name: AAAA-F89265598F
Event Code: 1517
Message: Systém Windows uložil registr uživatele AAAA-F89265598F\Munďa, ale některá z aplikací nebo služeb během odhlášení registr nadále používala. Paměť používaná registrem uživatele nebyla uvolněna. Registr bude uvolněn, jakmile již nebude používán.


To je často způsobeno tím, že jsou služby spuštěny pomocí uživatelského účtu. Zkuste služby konfigurovat pro spuštění pomocí účtu místní nebo síťové služby.

Record Number: 114
Source Name: Userenv
Time Written: 20110215193318.000000+060
Event Type: Upozornění
User: NT AUTHORITY\SYSTEM

Computer Name: AAAA-F89265598F
Event Code: 1800
Message: Služba Centrum zabezpečení systému Windows byla spuštěna.

Record Number: 113
Source Name: SecurityCenter
Time Written: 20110215190915.000000+060
Event Type: Informace
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=G:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0209
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#4 Příspěvek od vyosek »

:arrow: Predpokladam ze te ESET Smart Security mate legalni = zakoupena licence :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

munda
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 05 dub 2010 19:49

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#5 Příspěvek od munda »

No legální momentálně moc neni ale aktualizace mi to vždycky stahovalo.

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#6 Příspěvek od vyosek »

Vzhledem k tomu, ze pouzivate nelegalni SW Obrázek se nedivim, ze jste navstevnikem naseho fora :?:
Dle pravidel fora (viz zde a a zde bod c.3 ) se vsak nelegalnim SW nezabyvame, jelikoz nelegalni programy jsou vetsinou zdrojem haveti. Navic tim porusujete i autorska prava Obrázek, pachate trestny cin a ten jako takovy nebude nasim forem podporovan. Uvedomte si, ze jste na bezpecnostnim foru - podpora warezu (zvlaste bezpecnostnich programu) by byla zcela proti logice fora :!:
Obstarejte si proto legalni ochranu Vaseho PC (antivir), pote sem vlozte novy log z RSITu a CKScanneru - viz nize.

Osobne Vam doporucuji Avast, AViru ci MSE. Prehled antiviru mate ZDE.

:arrow: Log z RSITu - viz muj podpis
:arrow: Stahnete na plochu CKScanner
  • Spustte a kliknete na Search for files
  • Po dokonceni skenu kliknete na Save List to File a nasledne OK
  • Na plose se Vam vytvori log s nazvem ckfiles.txt, jeho obsah mi sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

munda
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 05 dub 2010 19:49

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#7 Příspěvek od munda »

Ja měl vždycky za to, že nod je nejlepší proto jsem ho na internetu sháněl všude možně, ale rád si nechám poradit od odborníků takže jsem nainstalova aviru.

log z rsit:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Munďa at 2011-05-12 14:38:12
Systém Microsoft Windows XP Professional Service Pack 3
System drive G: has 26 GB (51%) free of 50 GB
Total RAM: 1535 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:38:16, on 12.5.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE
G:\Program Files\Java\jre6\bin\jqs.exe
G:\Program Files\QipGuard\QipGuard.exe
G:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\Explorer.exe
G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
G:\Program Files\Analog Devices\SoundMAX\SMTray.exe
G:\Program Files\Common Files\Java\Java Update\jusched.exe
G:\Program Files\DivX\DivX Update\DivXUpdate.exe
G:\WINDOWS\system32\ctfmon.exe
G:\Program Files\DAEMON Tools Lite\DTLite.exe
G:\Program Files\QIP 2010\qip.exe
G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE
G:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
G:\Documents and Settings\Munďa\Data aplikací\QipGuard\QipGuard.exe
G:\Program Files\PC Connectivity Solution\ServiceLayer.exe
G:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
G:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
G:\WINDOWS\system32\msiexec.exe
G:\Program Files\Avira\AntiVir Desktop\avguard.exe
G:\Program Files\Avira\AntiVir Desktop\avshadow.exe
G:\Program Files\Avira\AntiVir Desktop\sched.exe
G:\Program Files\Avira\AntiVir Desktop\avgnt.exe
G:\WINDOWS\System32\vssvc.exe
G:\WINDOWS\system32\dllhost.exe
G:\WINDOWS\system32\dllhost.exe
G:\Documents and Settings\Munďa\Plocha\RSIT.exe
G:\Program Files\trend micro\Munďa.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: Shell=Explorer.exe csrcs.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - G:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - G:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - G:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: QipLI - {6B5863A0-C43F-4C0A-982B-CC0E9125783F} - G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qstatsrv.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - G:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - G:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - G:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - G:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - G:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - G:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [GrooveMonitor] "G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Smapp] G:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "G:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "G:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "G:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "G:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [avgnt] "G:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\RunServices: [csrcs] G:\WINDOWS\system32\csrcs.exe
O4 - HKCU\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "G:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Infium] "G:\Program Files\QIP 2010\qip.exe" /autorun
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "G:\WINDOWS\TEMP\E_S63A.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [PC Suite Tray] "G:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [QIP Internet Guardian] G:\Documents and Settings\Munďa\Data aplikací\QipGuard\QipGuard.exe /p
O4 - HKLM\..\Policies\Explorer\Run: [csrcs] G:\WINDOWS\system32\csrcs.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://G:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - G:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - G:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - G:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - G:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - G:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - G:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - G:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - G:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: QipGuard - QIP.ru - G:\Program Files\QipGuard\QipGuard.exe
O23 - Service: ServiceLayer - Nokia - G:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - G:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 8938 bytes

======Scheduled tasks folder======

G:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
G:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - G:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - G:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - G:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6B5863A0-C43F-4C0A-982B-CC0E9125783F}]
QipLI Class - G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qstatsrv.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - G:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2011-05-10 141184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - G:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-21 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - G:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-03-21 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - G:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - G:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - G:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"Smapp"=G:\Program Files\Analog Devices\SoundMAX\SMTray.exe [2003-05-05 143360]
"Adobe Reader Speed Launcher"=G:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=G:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"SunJavaUpdateSched"=G:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"DivXUpdate"=G:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]
"avgnt"=G:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2011-03-28 281768]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"csrcs"=G:\WINDOWS\system32\csrcs.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=G:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=G:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"Infium"=G:\Program Files\QIP 2010\qip.exe [2011-05-10 6789504]
"EPSON Stylus DX4400 Series"=G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [2007-03-01 180736]
"PC Suite Tray"=G:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-12-21 1483264]
"QIP Internet Guardian"=G:\Documents and Settings\Munďa\Data aplikací\QipGuard\QipGuard.exe [2011-05-10 187776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
G:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - G:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=G:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"G:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="G:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"G:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="G:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"G:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="G:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"G:\Program Files\QIP 2010\qip.exe"="G:\Program Files\QIP 2010\qip.exe:*:Enabled:QIP 2010"
"C:\Casino\ParadiseCasino\casino.exe"="C:\Casino\ParadiseCasino\casino.exe:*:Enabled:casino"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-05-12 14:35:18 ----D---- G:\WINDOWS\system32\NtmsData
2011-05-12 14:32:22 ----D---- G:\Documents and Settings\Munďa\Data aplikací\Avira
2011-05-12 14:30:53 ----A---- G:\WINDOWS\system32\drivers\ssmdrv.sys
2011-05-12 14:30:51 ----A---- G:\WINDOWS\system32\drivers\avipbb.sys
2011-05-12 14:30:51 ----A---- G:\WINDOWS\system32\drivers\avgntmgr.sys
2011-05-12 14:30:51 ----A---- G:\WINDOWS\system32\drivers\avgntflt.sys
2011-05-12 14:30:51 ----A---- G:\WINDOWS\system32\drivers\avgntdd.sys
2011-05-12 14:30:50 ----D---- G:\Program Files\Avira
2011-05-12 14:30:50 ----D---- G:\Documents and Settings\All Users\Data aplikací\Avira
2011-05-12 11:58:51 ----D---- G:\Program Files\trend micro
2011-05-12 11:58:50 ----D---- G:\rsit
2011-05-12 11:16:05 ----D---- G:\Program Files\QipGuard
2011-05-12 11:16:05 ----D---- G:\Documents and Settings\Munďa\Data aplikací\QipGuard
2011-05-11 17:25:31 ----D---- G:\Documents and Settings\Munďa\Data aplikací\EPSON
2011-05-10 14:10:44 ----D---- G:\Documents and Settings\Munďa\Data aplikací\DivX
2011-05-10 14:10:22 ----N---- G:\WINDOWS\system32\drivers\PxHelp20.sys
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\vxblock.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxwave.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxsfs.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxmas.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxinsi64.exe
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxinsa64.exe
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxhpinst.exe
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxdrv.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxcpyi64.exe
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxcpya64.exe
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\pxafs.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\px.dll
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\drivers\cdralw2k.sys
2011-05-10 14:10:21 ----N---- G:\WINDOWS\system32\drivers\cdr4_xp.sys
2011-05-10 14:09:29 ----D---- G:\Program Files\Common Files\DivX Shared
2011-05-10 13:55:54 ----D---- G:\Program Files\Google
2011-05-10 13:55:31 ----D---- G:\Program Files\DivX
2011-05-10 13:53:34 ----D---- G:\Documents and Settings\All Users\Data aplikací\DivX
2011-05-10 13:02:07 ----D---- G:\Documents and Settings\All Users\Data aplikací\Guitar Pro 6
2011-04-29 12:37:27 ----HDC---- G:\WINDOWS\$NtUninstallWudf01009$
2011-04-29 12:37:04 ----A---- G:\WINDOWS\system32\drivers\usbser.sys
2011-04-29 12:36:36 ----N---- G:\WINDOWS\system32\spmsgXP_2k3.dll
2011-04-29 12:36:30 ----HDC---- G:\WINDOWS\$NtUninstallWdf01009$
2011-04-29 12:35:32 ----D---- G:\Documents and Settings\Munďa\Data aplikací\Nokia
2011-04-29 12:35:28 ----D---- G:\Documents and Settings\Munďa\Data aplikací\PC Suite
2011-04-29 12:35:28 ----D---- G:\Documents and Settings\All Users\Data aplikací\PC Suite
2011-04-29 12:34:56 ----D---- G:\Program Files\Common Files\PCSuite
2011-04-29 12:34:49 ----D---- G:\Program Files\Common Files\Nokia
2011-04-29 12:34:37 ----D---- G:\Program Files\DIFX
2011-04-29 12:34:35 ----A---- G:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-04-29 12:34:28 ----D---- G:\Program Files\PC Connectivity Solution
2011-04-29 12:33:49 ----A---- G:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2011-04-29 12:33:47 ----A---- G:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2011-04-29 12:33:46 ----A---- G:\WINDOWS\system32\drivers\ccdcmbo.sys
2011-04-29 12:33:43 ----DC---- G:\WINDOWS\system32\DRVSTORE
2011-04-29 12:33:43 ----A---- G:\WINDOWS\system32\wdfcoinstaller01009.dll
2011-04-29 12:33:43 ----A---- G:\WINDOWS\system32\nmwcdcocls.dll
2011-04-29 12:33:43 ----A---- G:\WINDOWS\system32\drivers\ccdcmb.sys
2011-04-29 12:33:43 ----A---- G:\WINDOWS\system32\ccdcmbwu.dll
2011-04-29 12:33:42 ----A---- G:\WINDOWS\system32\nmwcdcls.dll
2011-04-29 12:33:41 ----D---- G:\Program Files\Nokia
2011-04-29 12:32:34 ----D---- G:\Documents and Settings\All Users\Data aplikací\Installations
2011-04-19 21:39:06 ----D---- G:\Documents and Settings\Munďa\Data aplikací\GetRightToGo
2011-04-15 11:55:46 ----HDC---- G:\WINDOWS\$NtUninstallKB2509553$
2011-04-15 11:45:12 ----HDC---- G:\WINDOWS\$NtUninstallKB2412687$
2011-04-15 11:43:49 ----HDC---- G:\WINDOWS\$NtUninstallKB2507618$
2011-04-15 11:42:12 ----HDC---- G:\WINDOWS\$NtUninstallKB2508272$
2011-04-15 11:42:00 ----HDC---- G:\WINDOWS\$NtUninstallKB2503658$
2011-04-15 11:41:48 ----HDC---- G:\WINDOWS\$NtUninstallKB2511455$
2011-04-15 11:41:18 ----HDC---- G:\WINDOWS\$NtUninstallKB2506223$
2011-04-15 11:40:57 ----HDC---- G:\WINDOWS\$NtUninstallKB2506212$
2011-04-15 11:40:34 ----HDC---- G:\WINDOWS\$NtUninstallKB2508429$
2011-04-15 11:40:09 ----HDC---- G:\WINDOWS\$NtUninstallKB2485663$

======List of files/folders modified in the last 1 months======

2011-05-12 14:37:29 ----D---- G:\WINDOWS\Prefetch
2011-05-12 14:35:30 ----HD---- G:\WINDOWS\inf
2011-05-12 14:35:18 ----D---- G:\WINDOWS\system32
2011-05-12 14:35:18 ----D---- G:\WINDOWS\repair
2011-05-12 14:35:06 ----D---- G:\WINDOWS\Registration
2011-05-12 14:31:33 ----D---- G:\WINDOWS\Temp
2011-05-12 14:31:31 ----D---- G:\WINDOWS\system32\CatRoot2
2011-05-12 14:30:53 ----D---- G:\WINDOWS\system32\drivers
2011-05-12 14:30:50 ----RD---- G:\Program Files
2011-05-12 14:29:29 ----SHD---- G:\WINDOWS\Installer
2011-05-12 14:29:28 ----D---- G:\WINDOWS\WinSxS
2011-05-12 14:27:05 ----D---- G:\Program Files\QIP 2010
2011-05-12 14:26:51 ----D---- G:\WINDOWS
2011-05-12 14:23:17 ----A---- G:\WINDOWS\SchedLgU.Txt
2011-05-11 23:42:32 ----D---- G:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-05-11 23:38:43 ----A---- G:\WINDOWS\system32\MRT.exe
2011-05-11 17:50:50 ----SD---- G:\Documents and Settings\Munďa\Data aplikací\Microsoft
2011-05-10 14:09:29 ----D---- G:\Program Files\Common Files
2011-05-10 13:56:08 ----SD---- G:\WINDOWS\Tasks
2011-05-10 12:32:43 ----SD---- G:\WINDOWS\Downloaded Program Files
2011-05-08 20:41:33 ----D---- G:\Program Files\Mozilla Firefox
2011-05-04 14:18:12 ----A---- G:\WINDOWS\win.ini
2011-05-03 14:52:30 ----D---- G:\Program Files\Common Files\Microsoft Shared
2011-04-29 13:05:13 ----A---- G:\WINDOWS\system32\PerfStringBackup.INI
2011-04-29 13:04:13 ----D---- G:\WINDOWS\system32\drivers\UMDF
2011-04-29 12:37:10 ----RSHDC---- G:\WINDOWS\system32\dllcache
2011-04-29 12:36:45 ----A---- G:\WINDOWS\imsins.BAK
2011-04-15 14:05:04 ----D---- G:\Program Files\Internet Explorer
2011-04-15 11:44:06 ----HD---- G:\WINDOWS\$hf_mig$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; G:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; G:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; G:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 sptd;sptd; G:\WINDOWS\System32\Drivers\sptd.sys [2011-02-14 431672]
R1 avgio;avgio; \??\G:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; G:\WINDOWS\system32\DRIVERS\avipbb.sys [2011-04-01 137656]
R1 intelppm;Řadič procesoru Intel; G:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 avgntflt;avgntflt; G:\WINDOWS\system32\DRIVERS\avgntflt.sys [2011-04-01 61960]
R3 aeaudio;aeaudio; G:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 nv;nv; G:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; G:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 smwdm;smwdm; G:\WINDOWS\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; G:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbprint;Třída USB Printer; G:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Ovladač skeneru USB; G:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; G:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; G:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S1 ssmdrv;ssmdrv; G:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
S3 akyljmut;akyljmut; G:\WINDOWS\system32\drivers\akyljmut.sys []
S3 Arp1394;Protokol 1394 ARP Client; G:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 NIC1394;1394 Net Driver; G:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 nmwcd;Nokia USB Phone Parent Driver; G:\WINDOWS\system32\drivers\ccdcmb.sys [2010-07-30 18048]
S3 nmwcdc;Nokia USB Communication Driver; G:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-07-30 23040]
S3 pccsmcfd;PCCS Mode Change Filter Driver; G:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; G:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-07-30 8192]
S3 usbser;USB Modem Driver; G:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; G:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-07-30 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; G:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VClone;VClone; G:\WINDOWS\system32\DRIVERS\VClone.sys [2009-08-09 29696]
S3 Wdf01000;Kernel Mode Driver Frameworks service; G:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; G:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; G:\Program Files\Avira\AntiVir Desktop\avguard.exe [2011-03-28 269480]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; G:\Program Files\Avira\AntiVir Desktop\sched.exe [2011-03-28 136360]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); G:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 JavaQuickStarterService;Java Quick Starter; G:\Program Files\Java\jre6\bin\jqs.exe [2011-03-21 153376]
R2 QipGuard;QipGuard; G:\Program Files\QipGuard\QipGuard.exe [2011-05-10 187776]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; G:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; G:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; G:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S2 gupdate;Služba Google Update (gupdate); G:\Program Files\Google\Update\GoogleUpdate.exe [2011-05-10 135664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; G:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; G:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; G:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; G:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]

-----------------EOF-----------------
Log z CKScanneru:
CKScanner - Additional Security Risks - These are not necessarily bad
scanner sequence 3.MN.11
----- EOF -----

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#8 Příspěvek od vyosek »

:arrow: NOD jiz davno nepatri mezi nejvepsi - nejlepsi zabezpeceni (ale placene) jsou balicky NIS ci KIS. Z free je nejlepsi zrejme Avast - hrave ve sve sestkove verzi strci NODa do kapsy. AVira je vhodna na slabsi PC, bohuzel je anglicky. Pokud chcete prehled o nami doporucenem zabezpeceni, pak je zde http://www.viry.cz/forum/viewtopic.php?f=29&t=6152

:arrow: Stahnete OTL (viz muj podpis) a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
  • Zaskrtnete okenko Pro vsechny uzivatele
  • Zaskrtnete okenko Kontrola na havet "LOP"
  • Zaskrtnete okenko Kontrola na havet "Purity"
  • Stari souboru zmente z 30 dnu na 7 dnu
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
  • Kód: Vybrat vše

    netsvcs
    drivers32
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
    c:\windows\*.* /U
    %SYSTEMDRIVE%\*.exe
    %ALLUSERSPROFILE%\Application Data\*.
    %ALLUSERSPROFILE%\Application Data\*.exe /s
    %APPDATA%\*.
    %APPDATA%\*.exe /s
    /md5start
    adp3132.sys
    AGP440.sys
    ahcix86.sys
    ahcix86s.sys
    atapi.sys
    autochk.exe
    cdrom.sys
    cngaudit.dll
    cryptsvc.dll
    eNetHook.dll
    eventlog.dll
    explorer.exe
    hal.dll
    Changer.sys
    iaStor.sys
    iastorv.sys
    IdeChnDr.sys
    isapnp.sys
    JakNDis.sys
    KR10N.sys
    logevent.dll
    lsass.exe
    mv61xx.sys
    ndis.sys
    netlogon.dll
    ntelogon.dll
    nvata.sys
    nvatabus.sys
    nvgts.sys
    nvraid.sys
    nvrd32.sys
    nvstor.sys
    nvstor32.sys
    scecli.dll
    sceclt.dll
    smss.exe
    svchost.exe
    symmpi.sys
    tcpip.sys
    userinit.exe
    vaxscsi.sys
    viamraid.sys
    viasraid.sys
    ViPrt.sys
    winlogon.exe
    ws2_32.dll
    /md5stop
    %systemroot%\*. /mp /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\system32\drivers\*.sys /3
    %systemroot%\system32\*.* /3
    CREATERESTOREPOINT
  • Kliknete na tlacitko Prohledat
  • Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

munda
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 05 dub 2010 19:49

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#9 Příspěvek od munda »

:arrow: Extras.txt:
OTL Extras logfile created on: 12.5.2011 15:30:19 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = G:\Documents and Settings\Munďa\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 64,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 86,00% Paging File free
Paging file location(s): G:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = G: | %SystemRoot% = G:\WINDOWS | %ProgramFiles% = G:\Program Files
Drive C: | 19,53 Gb Total Space | 0,70 Gb Free Space | 3,59% Space Free | Partition Type: NTFS
Drive D: | 92,25 Gb Total Space | 72,18 Gb Free Space | 78,24% Space Free | Partition Type: NTFS
Drive G: | 48,83 Gb Total Space | 25,02 Gb Free Space | 51,25% Space Free | Partition Type: NTFS
Drive I: | 547,33 Gb Total Space | 483,21 Gb Free Space | 88,28% Space Free | Partition Type: NTFS

Computer Name: AAAA-F89265598F | User Name: Munďa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = ChromeHTML] -- G:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_USERS\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- G:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
http [open] -- "G:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "G:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"G:\Program Files\QIP 2010\qip.exe" = G:\Program Files\QIP 2010\qip.exe:*:Enabled:QIP 2010 -- (QIP)
"C:\Casino\ParadiseCasino\casino.exe" = C:\Casino\ParadiseCasino\casino.exe:*:Enabled:casino -- ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"{26A24AE4-039D-4CA4-87B4-2F83216024FF}" = Java(TM) 6 Update 24
"{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
"{2EB81825-E9EE-44F4-8F51-1240C3898DC6}" = EPSON File Manager
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4216D328-0FE8-48B8-85B8-BD300E6F080F}" = Nokia Connectivity Cable Driver
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{67EDD823-135A-4D59-87BD-950616D6E857}" = EPSON Copy Utility 3
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}" = EPSON Web-To-Page
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}" = Camera RAW Plug-In for EPSON Creativity Suite
"{90120000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 12
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{294B4278-CF7B-40B9-86A1-2D3FF0C2C524}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{10EC59E5-9BCE-4884-BB1A-E28627220232}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Czech
"{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}" = EPSON Easy Photo Print
"{D4AEC53C-1720-41D9-B6D7-6A60DE62D444}" = PC Connectivity Solution
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F38FD0E4-B991-462B-873D-F2115EADD093}" = Nokia PC Suite
"504244733D18C8F63FF584AEB290E3904E791693" = Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"6DA48AFDE796708D5A4C9121A83E7617A63A9A15" = Balíček ovladače systému Windows - Nokia Modem (10/07/2010 4.6)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Bosch Viewer" = Bosch Viewer
"CX4300_5500_DX4400 Manuál" = CX4300_5500_DX4400 Manuál
"DAEMON Tools Lite" = DAEMON Tools Lite
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Diagnostika elektronických systémů_is1" = Diagnostika elektronických systémů SD-SW-Setup:2009/1_1_10 KTS5
"DivX Setup.divx.com" = DivX Setup
"E5372C32E8562C76C24DBA6525002B1031495F34" = Balíček ovladače systému Windows - Nokia Modem (06/09/2010 7.01.0.8)
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EPSON Printer and Utilities" = Software tiskárny EPSON
"EPSON Scanner" = EPSON Scan
"ESI[tronic]" = ESI[tronic]
"GeoGebra" = GeoGebra
"Google Chrome" = Google Chrome
"Guitar Pro 5_is1" = Guitar Pro 5.2
"ie8" = Windows Internet Explorer 8
"InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 4.1.7
"Mozilla Firefox 4.0.1 (x86 cs)" = Mozilla Firefox 4.0.1 (x86 cs)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Nokia PC Suite" = Nokia PC Suite
"ParadiseCasino" = ParadiseCasino
"PhotoFiltre" = PhotoFiltre
"save2pc Light_is1" = save2pc Light 4.16
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9
"Xvid_is1" = Xvid 1.2.1 final uninstall
"Zkušební hodnoty ESI" = Zkušební hodnoty ESI

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"QIP 2010" = QIP 2010 3.1.5488
"QipGuard" = QIP Internet Guardian

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 3.5.2011 9:06:42 | Computer Name = AAAA-F89265598F | Source = Application Error | ID = 1000
Description = Chybující aplikace guitarpro.exe, verze 0.0.0.0, chybující modul msvcr80.dll,
verze 8.0.50727.4053, adresa chyby 0x000046b4.

Error - 3.5.2011 9:07:03 | Computer Name = AAAA-F89265598F | Source = Application Error | ID = 1000
Description = Chybující aplikace guitarpro.exe, verze 0.0.0.0, chybující modul msvcr80.dll,
verze 8.0.50727.4053, adresa chyby 0x000046b4.

Error - 3.5.2011 9:07:41 | Computer Name = AAAA-F89265598F | Source = Application Error | ID = 1000
Description = Chybující aplikace guitarpro.exe, verze 0.0.0.0, chybující modul msvcr80.dll,
verze 8.0.50727.4053, adresa chyby 0x000046b4.

Error - 3.5.2011 9:10:36 | Computer Name = AAAA-F89265598F | Source = Application Error | ID = 1000
Description = Chybující aplikace guitarpro.exe, verze 0.0.0.0, chybující modul msvcr80.dll,
verze 8.0.50727.4053, adresa chyby 0x000046b4.

Error - 3.5.2011 9:11:45 | Computer Name = AAAA-F89265598F | Source = Application Error | ID = 1000
Description = Chybující aplikace guitarpro.exe, verze 0.0.0.0, chybující modul msvcr80.dll,
verze 8.0.50727.4053, adresa chyby 0x000046b4.

Error - 3.5.2011 14:29:02 | Computer Name = AAAA-F89265598F | Source = Application Error | ID = 1000
Description = Chybující aplikace guitarpro.exe, verze 0.0.0.0, chybující modul msvcr80.dll,
verze 8.0.50727.4053, adresa chyby 0x000046b4.

Error - 3.5.2011 14:29:46 | Computer Name = AAAA-F89265598F | Source = Application Error | ID = 1000
Description = Chybující aplikace guitarpro.exe, verze 0.0.0.0, chybující modul msvcr80.dll,
verze 8.0.50727.4053, adresa chyby 0x000046b4.

Error - 3.5.2011 14:32:52 | Computer Name = AAAA-F89265598F | Source = Application Error | ID = 1000
Description = Chybující aplikace guitarpro.exe, verze 0.0.0.0, chybující modul msvcr80.dll,
verze 8.0.50727.4053, adresa chyby 0x000046b4.

Error - 3.5.2011 14:33:04 | Computer Name = AAAA-F89265598F | Source = Application Error | ID = 1000
Description = Chybující aplikace guitarpro.exe, verze 0.0.0.0, chybující modul msvcr80.dll,
verze 8.0.50727.4053, adresa chyby 0x000046b4.

Error - 3.5.2011 14:34:01 | Computer Name = AAAA-F89265598F | Source = Application Error | ID = 1000
Description = Chybující aplikace guitarpro.exe, verze 0.0.0.0, chybující modul msvcr80.dll,
verze 8.0.50727.4053, adresa chyby 0x000046b4.

[ System Events ]
Error - 11.3.2011 7:31:22 | Computer Name = AAAA-F89265598F | Source = W32Time | ID = 39452701
Description = Klient NTP zprostředkovatele časových údajů je konfigurován pro získávání
časových údajů z jednoho nebo více zdrojů času. Žádný z těchto zdrojů však není
aktuálně k dispozici. Po dobu 14 minut nebude proveden žádný pokus o kontaktování
zdroje. Klient NTP nemá k dispozici žádný zdroj času.

Error - 11.3.2011 7:46:22 | Computer Name = AAAA-F89265598F | Source = W32Time | ID = 39452689
Description = Klient NTP zprostředkovatele časových údajů: Při vyhledávání DNS ručně
nakonfigurovaného partnera time.windows.com,0x1 došlo k chybě. Klient NTP se pokusí
o vyhledání pomocí služby DNS znovu za 30 minut. Chyba: Došlo k pokusu o operaci
se soketem v okamžiku nedosažitelnosti hostitele. (0x80072751)

Error - 11.3.2011 7:46:22 | Computer Name = AAAA-F89265598F | Source = W32Time | ID = 39452701
Description = Klient NTP zprostředkovatele časových údajů je konfigurován pro získávání
časových údajů z jednoho nebo více zdrojů času. Žádný z těchto zdrojů však není
aktuálně k dispozici. Po dobu 30 minut nebude proveden žádný pokus o kontaktování
zdroje. Klient NTP nemá k dispozici žádný zdroj času.

Error - 11.3.2011 8:44:22 | Computer Name = AAAA-F89265598F | Source = W32Time | ID = 39452689
Description = Klient NTP zprostředkovatele časových údajů: Při vyhledávání DNS ručně
nakonfigurovaného partnera time.windows.com,0x1 došlo k chybě. Klient NTP se pokusí
o vyhledání pomocí služby DNS znovu za 15 minut. Chyba: Došlo k pokusu o operaci
se soketem v okamžiku nedosažitelnosti hostitele. (0x80072751)

Error - 11.3.2011 8:44:22 | Computer Name = AAAA-F89265598F | Source = W32Time | ID = 39452701
Description = Klient NTP zprostředkovatele časových údajů je konfigurován pro získávání
časových údajů z jednoho nebo více zdrojů času. Žádný z těchto zdrojů však není
aktuálně k dispozici. Po dobu 14 minut nebude proveden žádný pokus o kontaktování
zdroje. Klient NTP nemá k dispozici žádný zdroj času.

Error - 11.3.2011 8:56:39 | Computer Name = AAAA-F89265598F | Source = Windows Update Agent | ID = 16
Description = Připojení se nezdařilo: Připojení ke službě automatických aktualizací
nelze navázat. Stažení a instalaci aktualizací podle tohoto plánu nelze spustit.
Pokus o navázání spojení bude opakován.

Error - 11.3.2011 8:59:22 | Computer Name = AAAA-F89265598F | Source = W32Time | ID = 39452689
Description = Klient NTP zprostředkovatele časových údajů: Při vyhledávání DNS ručně
nakonfigurovaného partnera time.windows.com,0x1 došlo k chybě. Klient NTP se pokusí
o vyhledání pomocí služby DNS znovu za 30 minut. Chyba: Došlo k pokusu o operaci
se soketem v okamžiku nedosažitelnosti hostitele. (0x80072751)

Error - 11.3.2011 8:59:22 | Computer Name = AAAA-F89265598F | Source = W32Time | ID = 39452701
Description = Klient NTP zprostředkovatele časových údajů je konfigurován pro získávání
časových údajů z jednoho nebo více zdrojů času. Žádný z těchto zdrojů však není
aktuálně k dispozici. Po dobu 30 minut nebude proveden žádný pokus o kontaktování
zdroje. Klient NTP nemá k dispozici žádný zdroj času.

Error - 11.3.2011 9:29:22 | Computer Name = AAAA-F89265598F | Source = W32Time | ID = 39452689
Description = Klient NTP zprostředkovatele časových údajů: Při vyhledávání DNS ručně
nakonfigurovaného partnera time.windows.com,0x1 došlo k chybě. Klient NTP se pokusí
o vyhledání pomocí služby DNS znovu za 60 minut. Chyba: Došlo k pokusu o operaci
se soketem v okamžiku nedosažitelnosti hostitele. (0x80072751)

Error - 11.3.2011 9:29:22 | Computer Name = AAAA-F89265598F | Source = W32Time | ID = 39452701
Description = Klient NTP zprostředkovatele časových údajů je konfigurován pro získávání
časových údajů z jednoho nebo více zdrojů času. Žádný z těchto zdrojů však není
aktuálně k dispozici. Po dobu 60 minut nebude proveden žádný pokus o kontaktování
zdroje. Klient NTP nemá k dispozici žádný zdroj času.


< End of report >


:arrow: Otl.txt:
OTL logfile created on: 12.5.2011 15:30:19 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = G:\Documents and Settings\Munďa\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 64,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 86,00% Paging File free
Paging file location(s): G:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = G: | %SystemRoot% = G:\WINDOWS | %ProgramFiles% = G:\Program Files
Drive C: | 19,53 Gb Total Space | 0,70 Gb Free Space | 3,59% Space Free | Partition Type: NTFS
Drive D: | 92,25 Gb Total Space | 72,18 Gb Free Space | 78,24% Space Free | Partition Type: NTFS
Drive G: | 48,83 Gb Total Space | 25,02 Gb Free Space | 51,25% Space Free | Partition Type: NTFS
Drive I: | 547,33 Gb Total Space | 483,21 Gb Free Space | 88,28% Space Free | Partition Type: NTFS

Computer Name: AAAA-F89265598F | User Name: Munďa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2011.05.12 15:27:54 | 000,580,608 | ---- | M] (OldTimer Tools) -- G:\Documents and Settings\Munďa\Plocha\OTL.exe
PRC - [2011.05.10 17:14:18 | 006,789,504 | ---- | M] (QIP) -- G:\Program Files\QIP 2010\qip.exe
PRC - [2011.05.10 17:14:10 | 000,187,776 | ---- | M] (QIP.ru) -- G:\Program Files\QipGuard\QipGuard.exe
PRC - [2011.05.10 17:14:10 | 000,187,776 | ---- | M] (QIP.ru) -- G:\Documents and Settings\Munďa\Data aplikací\QipGuard\QipGuard.exe
PRC - [2011.05.08 20:41:04 | 000,924,632 | ---- | M] (Mozilla Corporation) -- G:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.03.28 16:15:53 | 000,076,968 | ---- | M] (Avira GmbH) -- G:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.03.28 16:15:40 | 000,136,360 | ---- | M] (Avira GmbH) -- G:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2011.03.28 16:15:30 | 000,269,480 | ---- | M] (Avira GmbH) -- G:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.03.28 16:15:29 | 000,281,768 | ---- | M] (Avira GmbH) -- G:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011.03.21 20:56:16 | 001,230,704 | ---- | M] () -- G:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2011.01.20 11:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd) -- G:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2010.12.21 11:53:40 | 001,483,264 | ---- | M] (Nokia) -- G:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
PRC - [2010.12.08 14:31:06 | 000,628,736 | ---- | M] (Nokia) -- G:\Program Files\PC Connectivity Solution\ServiceLayer.exe
PRC - [2010.11.16 14:48:32 | 000,152,576 | ---- | M] (Nokia) -- G:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
PRC - [2009.10.27 09:15:02 | 000,120,832 | ---- | M] (Nokia) -- G:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- G:\WINDOWS\explorer.exe
PRC - [2007.03.01 08:01:00 | 000,180,736 | ---- | M] (SEIKO EPSON CORPORATION) -- G:\WINDOWS\system32\spool\drivers\w32x86\3\E_FATICAE.EXE
PRC - [2007.01.11 06:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) -- G:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE
PRC - [2003.05.05 09:57:30 | 000,143,360 | ---- | M] (Analog Devices, Inc.) -- G:\Program Files\Analog Devices\SoundMAX\SMTray.exe
PRC - [2002.09.20 17:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) -- G:\Program Files\Analog Devices\SoundMAX\SMAgent.exe


========== Modules (SafeList) ==========

MOD - [2011.05.12 15:27:54 | 000,580,608 | ---- | M] (OldTimer Tools) -- G:\Documents and Settings\Munďa\Plocha\OTL.exe
MOD - [2010.08.23 18:12:33 | 001,054,208 | ---- | M] (Microsoft Corporation) -- G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2011.05.10 17:14:10 | 000,187,776 | ---- | M] (QIP.ru) [Auto | Running] -- G:\Program Files\QipGuard\QipGuard.exe -- (QipGuard)
SRV - [2011.03.28 16:15:40 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- G:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.03.28 16:15:30 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- G:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010.12.08 14:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Running] -- G:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2007.01.11 06:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- G:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)
SRV - [2002.09.20 17:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- G:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))


========== Driver Services (SafeList) ==========

DRV - [2011.04.01 17:07:59 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- G:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011.04.01 17:07:59 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- G:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.02.14 23:55:38 | 000,431,672 | ---- | M] () [Kernel | Boot | Running] -- G:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010.07.30 14:16:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- G:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010.07.30 14:16:44 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- G:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010.07.30 14:16:42 | 000,023,040 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- G:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010.07.30 14:16:38 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- G:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010.06.17 15:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- G:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.06.17 15:27:12 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- G:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008.08.26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- G:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2004.08.04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- G:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [binary data]
IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: bkmrksync@nokia.com:1.0.0.736

FF - HKLM\software\mozilla\Firefox\extensions\\bkmrksync@nokia.com: G:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2011.04.29 12:34:54 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: G:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011.05.10 14:10:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: G:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011.05.10 14:10:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: G:\Program Files\Mozilla Firefox\components [2011.05.08 20:41:18 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: G:\Program Files\Mozilla Firefox\plugins [2011.05.08 20:41:18 | 000,000,000 | ---D | M]

[2011.02.14 21:20:31 | 000,000,000 | ---D | M] (No name found) -- G:\Documents and Settings\Munďa\Data aplikací\Mozilla\Extensions
[2011.03.02 15:06:25 | 000,000,000 | ---D | M] (No name found) -- G:\Documents and Settings\Munďa\Data aplikací\Mozilla\Firefox\Profiles\ymtxbzg0.default\extensions
[2011.05.12 11:13:30 | 000,000,000 | ---D | M] (QipAuthorizer) -- G:\Documents and Settings\Munďa\Data aplikací\Mozilla\Firefox\Profiles\ymtxbzg0.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
[2011.02.14 23:55:41 | 000,002,059 | ---- | M] () -- G:\Documents and Settings\Munďa\Data aplikací\Mozilla\Firefox\Profiles\ymtxbzg0.default\searchplugins\daemon-search.xml
[2011.05.12 11:16:07 | 000,002,062 | ---- | M] () -- G:\Documents and Settings\Munďa\Data aplikací\Mozilla\Firefox\Profiles\ymtxbzg0.default\searchplugins\qip-search.xml
[2011.05.08 13:41:59 | 000,000,000 | ---D | M] (No name found) -- G:\Program Files\Mozilla Firefox\extensions
[2011.03.21 22:32:19 | 000,000,000 | ---D | M] (Java Console) -- G:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) --
File not found (No name found) -- G:\DOCUMENTS AND SETTINGS\MUNÄŹA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\YMTXBZG0.DEFAULT\EXTENSIONS\{32A1FD71-835E-4B11-8E54-886FDA0B4C89}
[2011.03.21 22:32:06 | 000,000,000 | ---D | M] (Java Quick Starter) -- G:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011.05.08 20:41:03 | 000,142,296 | ---- | M] (Mozilla Foundation) -- G:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2011.03.21 22:32:05 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- G:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2011.05.08 20:41:08 | 000,002,208 | ---- | M] () -- G:\Program Files\Mozilla Firefox\searchplugins\heureka-cz.xml
[2011.05.08 20:41:08 | 000,000,638 | ---- | M] () -- G:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.12.03 20:08:29 | 000,001,687 | ---- | M] () -- G:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2011.05.08 20:41:08 | 000,001,367 | ---- | M] () -- G:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2011.05.08 20:41:08 | 000,000,654 | ---- | M] () -- G:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2011.05.08 20:41:08 | 000,001,179 | ---- | M] () -- G:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2011.05.10 13:00:35 | 000,000,774 | ---- | M]) - G:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 activation.guitar-pro.com
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - G:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - G:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (QipLI Class) - {6B5863A0-C43F-4C0A-982B-CC0E9125783F} - File not found
O2 - BHO: (QIPBHO Class) - {95289393-33EA-4F8D-B952-483415B9C955} - G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - G:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - G:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - G:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKU\S-1-5-21-606747145-682003330-1017068236-1003\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - G:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\S-1-5-21-606747145-682003330-1017068236-1003\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - G:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] G:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] G:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] G:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Smapp] G:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
O4 - HKU\S-1-5-21-606747145-682003330-1017068236-1003..\Run: [DAEMON Tools Lite] G:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-606747145-682003330-1017068236-1003..\Run: [EPSON Stylus DX4400 Series] G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE (SEIKO EPSON CORPORATION)
O4 - HKU\S-1-5-21-606747145-682003330-1017068236-1003..\Run: [Infium] G:\Program Files\QIP 2010\qip.exe (QIP)
O4 - HKU\S-1-5-21-606747145-682003330-1017068236-1003..\Run: [PC Suite Tray] G:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - HKU\S-1-5-21-606747145-682003330-1017068236-1003..\Run: [QIP Internet Guardian] G:\Documents and Settings\Munďa\Data aplikací\QipGuard\QipGuard.exe (QIP.ru)
O4 - HKLM..\RunServices: [csrcs] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: csrcs = G:\WINDOWS\system32\csrcs.exe
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... mv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 77.48.78.236 77.48.254.254
O20 - HKLM Winlogon: Shell - (Explorer.exe) - G:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (csrcs.exe) - File not found
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: G:\WINDOWS\Web\Wallpaper\Nebe.bmp
O24 - Desktop BackupWallPaper: G:\WINDOWS\Web\Wallpaper\Nebe.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.09.05 17:14:25 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: MIDI1 - G:\WINDOWS\System32\Syncor11.dll (SoundMAX)
Drivers32: msacm.ac3acm - G:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - G:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - G:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - G:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - G:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - G:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - G:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - G:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - G:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - G:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - G:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - G:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - G:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.WMV3 - G:\WINDOWS\System32\wmv9vcm.dll (Microsoft Corporation)
Drivers32: VIDC.XVID - G:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - G:\WINDOWS\System32\DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (56027131116781568)

========== Files/Folders - Created Within 7 Days ==========

[2011.05.12 15:27:52 | 000,580,608 | ---- | C] (OldTimer Tools) -- G:\Documents and Settings\Munďa\Plocha\OTL.exe
[2011.05.12 14:35:18 | 000,000,000 | ---D | C] -- G:\WINDOWS\System32\NtmsData
[2011.05.12 14:32:22 | 000,000,000 | ---D | C] -- G:\Documents and Settings\Munďa\Data aplikací\Avira
[2011.05.12 14:31:03 | 000,000,000 | ---D | C] -- G:\Documents and Settings\All Users\Nabídka Start\Programy\Avira
[2011.05.12 14:30:53 | 000,028,520 | ---- | C] (Avira GmbH) -- G:\WINDOWS\System32\drivers\ssmdrv.sys
[2011.05.12 14:30:51 | 000,137,656 | ---- | C] (Avira GmbH) -- G:\WINDOWS\System32\drivers\avipbb.sys
[2011.05.12 14:30:51 | 000,061,960 | ---- | C] (Avira GmbH) -- G:\WINDOWS\System32\drivers\avgntflt.sys
[2011.05.12 14:30:51 | 000,045,416 | ---- | C] (Avira GmbH) -- G:\WINDOWS\System32\drivers\avgntdd.sys
[2011.05.12 14:30:51 | 000,022,360 | ---- | C] (Avira GmbH) -- G:\WINDOWS\System32\drivers\avgntmgr.sys
[2011.05.12 14:30:50 | 000,000,000 | ---D | C] -- G:\Program Files\Avira
[2011.05.12 14:30:50 | 000,000,000 | ---D | C] -- G:\Documents and Settings\All Users\Data aplikací\Avira
[2011.05.12 11:58:51 | 000,000,000 | ---D | C] -- G:\Program Files\trend micro
[2011.05.12 11:58:50 | 000,000,000 | ---D | C] -- G:\rsit
[2011.05.12 11:16:05 | 000,000,000 | ---D | C] -- G:\Program Files\QipGuard
[2011.05.12 11:16:05 | 000,000,000 | ---D | C] -- G:\Documents and Settings\Munďa\Data aplikací\QipGuard
[2011.05.11 17:25:31 | 000,000,000 | ---D | C] -- G:\Documents and Settings\Munďa\Data aplikací\EPSON
[2011.05.10 14:10:44 | 000,000,000 | ---D | C] -- G:\Documents and Settings\Munďa\Data aplikací\DivX
[2011.05.10 14:10:21 | 002,120,176 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\pxsfs.dll
[2011.05.10 14:10:21 | 000,698,864 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\px.dll
[2011.05.10 14:10:21 | 000,567,792 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\pxdrv.dll
[2011.05.10 14:10:21 | 000,440,816 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\pxwave.dll
[2011.05.10 14:10:21 | 000,219,632 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\pxmas.dll
[2011.05.10 14:10:21 | 000,133,616 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\pxafs.dll
[2011.05.10 14:10:21 | 000,126,448 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\pxinsi64.exe
[2011.05.10 14:10:21 | 000,123,888 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\pxcpyi64.exe
[2011.05.10 14:10:21 | 000,100,848 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\vxblock.dll
[2011.05.10 14:10:21 | 000,072,176 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\pxhpinst.exe
[2011.05.10 14:10:21 | 000,068,592 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\pxinsa64.exe
[2011.05.10 14:10:21 | 000,068,080 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\pxcpya64.exe
[2011.05.10 14:10:21 | 000,009,200 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\drivers\cdralw2k.sys
[2011.05.10 14:10:21 | 000,009,072 | ---- | C] (Sonic Solutions) -- G:\WINDOWS\System32\drivers\cdr4_xp.sys
[2011.05.10 14:10:07 | 000,000,000 | ---D | C] -- G:\Documents and Settings\All Users\Nabídka Start\Programy\DivX Plus
[2011.05.10 14:09:48 | 000,000,000 | ---D | C] -- G:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome
[2011.05.10 14:09:29 | 000,000,000 | ---D | C] -- G:\Program Files\Common Files\DivX Shared
[2011.05.10 14:01:00 | 000,000,000 | ---D | C] -- G:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Google
[2011.05.10 13:56:14 | 000,000,000 | ---D | C] -- G:\Documents and Settings\LocalService\Local Settings\Data aplikací\Google
[2011.05.10 13:55:55 | 000,000,000 | ---D | C] -- G:\Documents and Settings\Munďa\Local Settings\Data aplikací\Google
[2011.05.10 13:55:54 | 000,000,000 | ---D | C] -- G:\Program Files\Google
[2011.05.10 13:55:31 | 000,000,000 | ---D | C] -- G:\Program Files\DivX
[2011.05.10 13:53:34 | 000,000,000 | ---D | C] -- G:\Documents and Settings\All Users\Data aplikací\DivX
[2011.05.10 13:02:07 | 000,000,000 | ---D | C] -- G:\Documents and Settings\All Users\Data aplikací\Guitar Pro 6
[2011.05.08 19:00:55 | 000,000,000 | ---D | C] -- G:\Documents and Settings\Munďa\Dokumenty\SEGRA
[4 G:\WINDOWS\*.tmp files -> G:\WINDOWS\*.tmp -> ]
[1 G:\WINDOWS\System32\*.tmp files -> G:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2011.05.12 15:27:54 | 000,580,608 | ---- | M] (OldTimer Tools) -- G:\Documents and Settings\Munďa\Plocha\OTL.exe
[2011.05.12 15:01:01 | 000,000,938 | ---- | M] () -- G:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011.05.12 14:40:23 | 000,453,632 | ---- | M] () -- G:\Documents and Settings\Munďa\Plocha\CKScanner.exe
[2011.05.12 14:31:03 | 000,001,750 | ---- | M] () -- G:\Documents and Settings\All Users\Plocha\Avira AntiVir Control Center.lnk
[2011.05.12 14:26:56 | 000,002,206 | ---- | M] () -- G:\WINDOWS\System32\wpa.dbl
[2011.05.12 14:26:54 | 000,000,934 | ---- | M] () -- G:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011.05.12 14:24:41 | 000,002,048 | --S- | M] () -- G:\WINDOWS\bootstat.dat
[2011.05.12 14:24:39 | 1609,879,552 | -HS- | M] () -- G:\hiberfil.sys
[2011.05.12 11:56:59 | 000,339,991 | ---- | M] () -- G:\Documents and Settings\Munďa\Plocha\RSIT.exe
[2011.05.12 11:16:04 | 000,000,690 | ---- | M] () -- G:\Documents and Settings\Munďa\Plocha\QIP 2010.lnk
[2011.05.12 11:02:22 | 000,015,360 | ---- | M] () -- G:\Documents and Settings\Munďa\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.05.10 14:11:01 | 000,001,800 | ---- | M] () -- G:\Documents and Settings\All Users\Plocha\DivX Plus Converter.lnk
[2011.05.10 14:11:01 | 000,001,484 | ---- | M] () -- G:\Documents and Settings\Munďa\Plocha\DivX Movies.lnk
[2011.05.10 14:10:38 | 000,000,820 | ---- | M] () -- G:\Documents and Settings\All Users\Plocha\DivX Plus Player.lnk
[2011.05.10 14:09:48 | 000,001,856 | ---- | M] () -- G:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
[4 G:\WINDOWS\*.tmp files -> G:\WINDOWS\*.tmp -> ]
[1 G:\WINDOWS\System32\*.tmp files -> G:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.05.12 14:40:22 | 000,453,632 | ---- | C] () -- G:\Documents and Settings\Munďa\Plocha\CKScanner.exe
[2011.05.12 14:31:03 | 000,001,750 | ---- | C] () -- G:\Documents and Settings\All Users\Plocha\Avira AntiVir Control Center.lnk
[2011.05.12 11:56:56 | 000,339,991 | ---- | C] () -- G:\Documents and Settings\Munďa\Plocha\RSIT.exe
[2011.05.10 14:11:01 | 000,001,484 | ---- | C] () -- G:\Documents and Settings\Munďa\Plocha\DivX Movies.lnk
[2011.05.10 14:10:38 | 000,000,820 | ---- | C] () -- G:\Documents and Settings\All Users\Plocha\DivX Plus Player.lnk
[2011.05.10 14:10:16 | 000,001,800 | ---- | C] () -- G:\Documents and Settings\All Users\Plocha\DivX Plus Converter.lnk
[2011.05.10 14:09:48 | 000,001,856 | ---- | C] () -- G:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
[2011.05.10 13:56:08 | 000,000,938 | ---- | C] () -- G:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011.05.10 13:56:07 | 000,000,934 | ---- | C] () -- G:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011.05.08 20:41:19 | 000,000,773 | ---- | C] () -- G:\Documents and Settings\All Users\Nabídka Start\Programy\Mozilla Firefox.lnk
[2011.02.19 13:06:04 | 000,111,932 | ---- | C] () -- G:\WINDOWS\System32\EPPICPrinterDB.dat
[2011.02.19 13:06:04 | 000,001,146 | ---- | C] () -- G:\WINDOWS\System32\EPPICPresetData_DU.dat
[2011.02.19 13:06:04 | 000,001,136 | ---- | C] () -- G:\WINDOWS\System32\EPPICPresetData_ES.dat
[2011.02.19 13:06:04 | 000,001,129 | ---- | C] () -- G:\WINDOWS\System32\EPPICPresetData_CF.dat
[2011.02.19 13:06:04 | 000,001,120 | ---- | C] () -- G:\WINDOWS\System32\EPPICPresetData_IT.dat
[2011.02.19 13:06:04 | 000,001,107 | ---- | C] () -- G:\WINDOWS\System32\EPPICPresetData_GE.dat
[2011.02.19 13:06:04 | 000,001,104 | ---- | C] () -- G:\WINDOWS\System32\EPPICPresetData_EN.dat
[2011.02.19 13:06:04 | 000,000,097 | ---- | C] () -- G:\WINDOWS\System32\PICSDK.ini
[2011.02.19 13:06:03 | 000,031,053 | ---- | C] () -- G:\WINDOWS\System32\EPPICPattern131.dat
[2011.02.19 13:06:03 | 000,027,417 | ---- | C] () -- G:\WINDOWS\System32\EPPICPattern121.dat
[2011.02.19 13:06:03 | 000,026,154 | ---- | C] () -- G:\WINDOWS\System32\EPPICPattern1.dat
[2011.02.19 13:06:03 | 000,024,903 | ---- | C] () -- G:\WINDOWS\System32\EPPICPattern3.dat
[2011.02.19 13:06:03 | 000,021,390 | ---- | C] () -- G:\WINDOWS\System32\EPPICPattern5.dat
[2011.02.19 13:06:03 | 000,020,148 | ---- | C] () -- G:\WINDOWS\System32\EPPICPattern2.dat
[2011.02.19 13:06:03 | 000,011,811 | ---- | C] () -- G:\WINDOWS\System32\EPPICPattern4.dat
[2011.02.19 13:06:03 | 000,004,943 | ---- | C] () -- G:\WINDOWS\System32\EPPICPattern6.dat
[2011.02.19 13:06:03 | 000,001,139 | ---- | C] () -- G:\WINDOWS\System32\EPPICPresetData_PT.dat
[2011.02.19 13:06:03 | 000,001,139 | ---- | C] () -- G:\WINDOWS\System32\EPPICPresetData_BP.dat
[2011.02.19 13:06:03 | 000,001,129 | ---- | C] () -- G:\WINDOWS\System32\EPPICPresetData_FR.dat
[2011.02.19 12:50:02 | 000,000,026 | ---- | C] () -- G:\WINDOWS\CDE DX4400DEFGIPS.ini
[2011.02.15 19:33:35 | 000,015,360 | ---- | C] () -- G:\Documents and Settings\Munďa\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.02.15 00:29:05 | 000,040,960 | ---- | C] () -- G:\WINDOWS\System32\xcd73532.dll
[2011.02.15 00:29:05 | 000,012,800 | ---- | C] () -- G:\WINDOWS\System32\PWUtility.dll
[2011.02.15 00:29:05 | 000,007,168 | ---- | C] () -- G:\WINDOWS\System32\dtctrace.dll
[2011.02.15 00:05:43 | 000,002,725 | ---- | C] () -- G:\WINDOWS\RBSystem.ini
[2011.02.15 00:04:04 | 000,397,312 | ---- | C] () -- G:\WINDOWS\esi_kl01.dat
[2011.02.15 00:03:55 | 000,655,360 | ---- | C] () -- G:\WINDOWS\System32\dslang32.dll
[2011.02.15 00:03:55 | 000,327,680 | ---- | C] () -- G:\WINDOWS\System32\ldf251.dll
[2011.02.14 22:49:40 | 000,164,352 | ---- | C] () -- G:\WINDOWS\System32\unrar.dll
[2011.02.14 22:49:39 | 000,000,038 | ---- | C] () -- G:\WINDOWS\avisplitter.ini
[2011.02.14 22:49:37 | 000,815,104 | ---- | C] () -- G:\WINDOWS\System32\xvidcore.dll
[2011.02.14 22:49:37 | 000,180,224 | ---- | C] () -- G:\WINDOWS\System32\xvidvfw.dll
[2011.02.14 22:49:36 | 003,596,288 | ---- | C] () -- G:\WINDOWS\System32\qt-dx331.dll
[2011.02.14 22:49:35 | 000,007,680 | ---- | C] () -- G:\WINDOWS\System32\ff_vfw.dll
[2011.02.14 22:31:59 | 000,000,044 | ---- | C] () -- G:\WINDOWS\System32\msssc.dll
[2011.02.14 22:31:13 | 000,002,778 | ---- | C] () -- G:\WINDOWS\Ascd_tmp.ini
[2011.02.14 22:31:12 | 000,005,824 | ---- | C] () -- G:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2011.02.14 21:42:48 | 000,004,249 | ---- | C] () -- G:\WINDOWS\ODBCINST.INI
[2011.02.14 21:40:26 | 000,395,960 | ---- | C] () -- G:\WINDOWS\System32\FNTCACHE.DAT
[2011.02.14 21:20:32 | 000,000,000 | ---- | C] () -- G:\WINDOWS\nsreg.dat
[2011.02.14 20:56:58 | 000,002,048 | --S- | C] () -- G:\WINDOWS\bootstat.dat
[2011.02.14 20:50:13 | 000,021,812 | ---- | C] () -- G:\WINDOWS\System32\emptyregdb.dat
[2004.08.17 15:58:58 | 000,001,804 | ---- | C] () -- G:\WINDOWS\System32\dcache.bin
[2004.08.02 14:20:40 | 000,004,569 | ---- | C] () -- G:\WINDOWS\System32\secupd.dat
[2001.10.25 16:00:00 | 013,107,200 | ---- | C] () -- G:\WINDOWS\System32\oembios.bin
[2001.10.25 16:00:00 | 000,673,088 | ---- | C] () -- G:\WINDOWS\System32\mlang.dat
[2001.10.25 16:00:00 | 000,311,604 | ---- | C] () -- G:\WINDOWS\System32\perfh009.dat
[2001.10.25 16:00:00 | 000,309,716 | ---- | C] () -- G:\WINDOWS\System32\perfh005.dat
[2001.10.25 16:00:00 | 000,272,128 | ---- | C] () -- G:\WINDOWS\System32\perfi009.dat
[2001.10.25 16:00:00 | 000,269,162 | ---- | C] () -- G:\WINDOWS\System32\perfi005.dat
[2001.10.25 16:00:00 | 000,218,003 | ---- | C] () -- G:\WINDOWS\System32\dssec.dat
[2001.10.25 16:00:00 | 000,046,258 | ---- | C] () -- G:\WINDOWS\System32\mib.bin
[2001.10.25 16:00:00 | 000,046,016 | ---- | C] () -- G:\WINDOWS\System32\perfc005.dat
[2001.10.25 16:00:00 | 000,039,992 | ---- | C] () -- G:\WINDOWS\System32\perfc009.dat
[2001.10.25 16:00:00 | 000,032,072 | ---- | C] () -- G:\WINDOWS\System32\perfd005.dat
[2001.10.25 16:00:00 | 000,028,626 | ---- | C] () -- G:\WINDOWS\System32\perfd009.dat
[2001.10.25 16:00:00 | 000,004,463 | ---- | C] () -- G:\WINDOWS\System32\oembios.dat
[2001.10.25 16:00:00 | 000,000,741 | ---- | C] () -- G:\WINDOWS\System32\noise.dat

========== LOP Check ==========

[2011.02.14 23:55:23 | 000,000,000 | ---D | M] -- G:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2011.02.19 13:05:06 | 000,000,000 | ---D | M] -- G:\Documents and Settings\All Users\Data aplikací\EPSON
[2011.05.10 13:02:07 | 000,000,000 | ---D | M] -- G:\Documents and Settings\All Users\Data aplikací\Guitar Pro 6
[2011.04.29 12:32:35 | 000,000,000 | ---D | M] -- G:\Documents and Settings\All Users\Data aplikací\Installations
[2011.04.29 12:37:10 | 000,000,000 | ---D | M] -- G:\Documents and Settings\All Users\Data aplikací\PC Suite
[2011.02.19 13:10:34 | 000,000,000 | ---D | M] -- G:\Documents and Settings\All Users\Data aplikací\UDL
[2011.02.14 23:59:08 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\DAEMON Tools Lite
[2011.05.11 17:25:31 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\EPSON
[2011.02.14 22:58:57 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\ESET
[2011.04.19 21:44:39 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\GetRightToGo
[2011.04.29 12:35:39 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\Nokia
[2011.04.29 13:04:10 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\PC Suite
[2011.05.12 11:16:05 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\QipGuard
[2011.02.24 11:49:50 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Máma\Data aplikací\ESET
[2011.05.07 22:56:10 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Máma\Data aplikací\PC Suite
[2011.02.25 19:22:18 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Pavla\Data aplikací\ESET

========== Purity Check ==========



========== Custom Scans ==========


< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = G:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 05:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)
"DAEMON Tools Lite" = "G:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun -- [2011.01.20 11:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd)
"Infium" = "G:\Program Files\QIP 2010\qip.exe" /autorun -- [2011.05.10 17:14:18 | 006,789,504 | ---- | M] (QIP)
"EPSON Stylus DX4400 Series" = G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "G:\WINDOWS\TEMP\E_S63A.tmp" /EF "HKCU" -- [2007.03.01 08:01:00 | 000,180,736 | ---- | M] (SEIKO EPSON CORPORATION)
"PC Suite Tray" = "G:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray -- [2010.12.21 11:53:40 | 001,483,264 | ---- | M] (Nokia)
"QIP Internet Guardian" = G:\Documents and Settings\Munďa\Data aplikací\QipGuard\QipGuard.exe /p -- [2011.05.10 17:14:10 | 000,187,776 | ---- | M] (QIP.ru)

< c:\windows\*.* /U >
[9 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.03.10 22:49:00 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\ABBYY
[2011.02.18 17:57:22 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\Adobe
[2011.05.12 14:32:22 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\Avira
[2011.02.14 23:59:08 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\DAEMON Tools Lite
[2011.05.11 18:52:04 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\DivX
[2011.05.11 17:25:31 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\EPSON
[2011.02.14 22:58:57 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\ESET
[2011.04.19 21:44:39 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\GetRightToGo
[2011.02.14 21:01:20 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\Identities
[2011.02.19 13:05:59 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\InstallShield
[2011.02.14 22:24:29 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\Macromedia
[2011.02.15 19:33:44 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\Media Player Classic
[2011.05.11 17:50:50 | 000,000,000 | --SD | M] -- G:\Documents and Settings\Munďa\Data aplikací\Microsoft
[2011.02.14 21:20:31 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\Mozilla
[2011.04.29 12:35:39 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\Nokia
[2011.04.29 13:04:10 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\PC Suite
[2011.05.12 11:16:05 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\QipGuard
[2011.02.19 14:51:12 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\Real
[2011.03.21 22:28:53 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\Sun
[2011.02.14 22:51:18 | 000,000,000 | ---D | M] -- G:\Documents and Settings\Munďa\Data aplikací\WinRAR

< %APPDATA%\*.exe /s >
[2011.05.08 23:45:09 | 002,871,968 | ---- | M] (Adobe Systems, Inc.) -- G:\Documents and Settings\Munďa\Data aplikací\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
[2011.05.10 17:14:10 | 000,187,776 | ---- | M] (QIP.ru) -- G:\Documents and Settings\Munďa\Data aplikací\QipGuard\QipGuard.exe


< MD5 for: AGP440.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- G:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- G:\WINDOWS\system32\drivers\agp440.sys
[2004.08.04 01:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- G:\WINDOWS\$NtServicePackUninstall$\agp440.sys
[2004.08.04 01:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- G:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\AGP440.SYS

< MD5 for: ATAPI.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- G:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- G:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- G:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- G:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- G:\WINDOWS\system32\autochk.exe
[2004.08.17 15:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- G:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- G:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- G:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.03 22:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- G:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2004.08.17 15:49:04 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- G:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- G:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- G:\WINDOWS\system32\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- G:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- G:\WINDOWS\system32\eventlog.dll
[2004.08.17 15:49:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- G:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- G:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- G:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 15:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- G:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- G:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.13 20:31:28 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- G:\WINDOWS\system32\HAL.DLL
[2004.08.03 22:59:10 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- G:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: CHANGER.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- G:\WINDOWS\ServicePackFiles\i386\changer.sys

< MD5 for: ISAPNP.SYS >
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2011.02.15 16:16:50 | 023,890,583 | ---- | M] () .cab file -- G:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2001.10.25 16:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- G:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2001.10.25 16:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- G:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- G:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- G:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2004.08.17 15:49:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- G:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- G:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- G:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- G:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- G:\WINDOWS\system32\drivers\ndis.sys
[2004.08.03 23:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- G:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- G:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- G:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2004.08.17 15:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- G:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- G:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- G:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 15:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- G:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- G:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- G:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2004.08.17 15:49:28 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- G:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- G:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- G:\WINDOWS\system32\smss.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- G:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- G:\WINDOWS\system32\svchost.exe
[2004.08.17 15:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- G:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.06.20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- G:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- G:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- G:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- G:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- G:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- G:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- G:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.03 23:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- G:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- G:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- G:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- G:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- G:\WINDOWS\system32\userinit.exe
[2004.08.17 15:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- G:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 15:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- G:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- G:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- G:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2004.08.17 15:49:22 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- G:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- G:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- G:\WINDOWS\system32\ws2_32.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2008.04.14 05:21:38 | 001,267,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- G:\WINDOWS\system32\comsvcs.dll
[1 G:\WINDOWS\system32\*.tmp files -> G:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2011.02.14 23:55:38 | 000,431,672 | ---- | M] () Unable to obtain MD5 -- G:\WINDOWS\system32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >
[2011.02.14 21:39:52 | 000,094,208 | ---- | M] () -- G:\WINDOWS\system32\config\default.sav
[2011.02.14 21:39:52 | 000,663,552 | ---- | M] () -- G:\WINDOWS\system32\config\software.sav
[2011.02.14 21:39:52 | 000,475,136 | ---- | M] () -- G:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[2008.04.14 05:21:38 | 001,267,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- G:\WINDOWS\system32\comsvcs.dll
[1 G:\WINDOWS\system32\*.tmp files -> G:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2011.05.11 23:38:43 | 042,829,768 | ---- | M] (Microsoft Corporation) -- G:\WINDOWS\system32\MRT.exe
[2011.05.12 14:26:56 | 000,002,206 | ---- | M] () -- G:\WINDOWS\system32\wpa.dbl
[1 G:\WINDOWS\system32\*.tmp files -> G:\WINDOWS\system32\*.tmp -> ]

< End of report >

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#10 Příspěvek od vyosek »

:arrow: Spustte znovu OTL
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
  • Kód: Vybrat vše

    :otl
    SRV - File not found [Disabled | Stopped] -- -- (HidServ)
    IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
    IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
    IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
    IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [binary data]
    IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
    IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
    IE - HKU\S-1-5-21-606747145-682003330-1017068236-1003\..\URLSearchHook: - Reg Error: Key error. File not found
    File not found (No name found) --
    File not found (No name found) -- G:\DOCUMENTS AND SETTINGS\MUNÄŹA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\YMTXBZG0.DEFAULT\EXTENSIONS\{32A1FD71-835E-4B11-8E54-886FDA0B4C89}
    O2 - BHO: (QipLI Class) - {6B5863A0-C43F-4C0A-982B-CC0E9125783F} - File not found
    O2 - BHO: (QIPBHO Class) - {95289393-33EA-4F8D-B952-483415B9C955} - G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
    O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - G:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
    O3 - HKU\S-1-5-21-606747145-682003330-1017068236-1003\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - G:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
    O4 - HKLM..\RunServices: [csrcs] File not found
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: csrcs = G:\WINDOWS\system32\csrcs.exe
    O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... mv9VCM.CAB (Reg Error: Key error.)
    O20 - HKLM Winlogon: Shell - (csrcs.exe) - File not found
    [4 G:\WINDOWS\*.tmp files -> G:\WINDOWS\*.tmp -> ]
    [1 G:\WINDOWS\System32\*.tmp files -> G:\WINDOWS\System32\*.tmp -> ]
    
    :reg
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Adobe Reader Speed Launcher"=-
    "Adobe ARM"=-
    "SunJavaUpdateSched"=-
    "DivXUpdate"=-
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "DAEMON Tools Lite"=-
    
    :services
    gupdate
    
    :files
    G:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
    G:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
    %windir%\system32\*.tmp.dll /s
    %windir%\system32\SET*.tmp /s
    %windir%\*.tmp /s
    
    :commands
    [RESETHOSTS]
    [EMPTYTEMP]
    [EMPTYFLASH]
  • Nasledne kliknete na Opravit
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

munda
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 05 dub 2010 19:49

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#11 Příspěvek od munda »

All processes killed
========== OTL ==========
Service HidServ stopped successfully!
Service HidServ deleted successfully!
HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Search_URL| /E : value set successfully!
HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully!
HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Secondary Start Pages| /E : value set successfully!
HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-606747145-682003330-1017068236-1003\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-606747145-682003330-1017068236-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6B5863A0-C43F-4C0A-982B-CC0E9125783F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B5863A0-C43F-4C0A-982B-CC0E9125783F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95289393-33EA-4F8D-B952-483415B9C955}\ deleted successfully.
G:\Documents and Settings\Munďa\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully.
G:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll moved successfully.
Registry value HKEY_USERS\S-1-5-21-606747145-682003330-1017068236-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
File G:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\\csrcs deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\csrcs deleted successfully.
Starting removal of ActiveX control {33564D57-0000-0010-8000-00AA00389B71}
G:\WINDOWS\Downloaded Program Files\WMV9VCM.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{33564D57-0000-0010-8000-00AA00389B71}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:csrcs.exe deleted successfully.
G:\WINDOWS\002712_.tmp deleted successfully.
G:\WINDOWS\SET3.tmp deleted successfully.
G:\WINDOWS\SET4.tmp deleted successfully.
G:\WINDOWS\SET8.tmp deleted successfully.
G:\WINDOWS\System32\CONFIG.TMP deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DivXUpdate deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
========== FILES ==========
G:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
G:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
File/Folder G:\WINDOWS\system32\*.tmp.dll not found.
File/Folder G:\WINDOWS\system32\SET*.tmp not found.
G:\WINDOWS\Installer\MSI6F6.tmp moved successfully.
G:\WINDOWS\SoftwareDistribution\Download\05f562e80f1baf9b1428b40a99bcc0ec\BIT1.tmp moved successfully.
G:\WINDOWS\SoftwareDistribution\Download\a8ce4e6bedbaaf983743e1ce94354752\BITB1D.tmp moved successfully.
G:\WINDOWS\Temp\E_S63A.tmp moved successfully.
G:\WINDOWS\Temp\WDF46F6.tmp folder moved successfully.
========== COMMANDS ==========
G:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Munďa
->Temp folder emptied: 41310301 bytes
->Temporary Internet Files folder emptied: 123300121 bytes
->Java cache emptied: 1954188 bytes
->FireFox cache emptied: 347940421 bytes
->Google Chrome cache emptied: 20587041 bytes
->Flash cache emptied: 2886544 bytes

User: Máma
->Temp folder emptied: 406544 bytes
->Temporary Internet Files folder emptied: 1168406 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 71676135 bytes
->Flash cache emptied: 937 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Pavla
->Temp folder emptied: 939 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 86867801 bytes
->Flash cache emptied: 814 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 16072781 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 116 bytes

Total Files Cleaned = 681,00 mb


[EMPTYFLASH]

User: All Users

User: Default User

User: LocalService

User: Munďa
->Flash cache emptied: 0 bytes

User: Máma
->Flash cache emptied: 0 bytes

User: NetworkService

User: Pavla
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.22.3 log created on 05122011_162801

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#12 Příspěvek od vyosek »

Jak se chova PC :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

munda
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 05 dub 2010 19:49

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#13 Příspěvek od munda »

Tak pc běhá o hodně líp při startu to už nic nechce, videa se přehrávají bez sekání je to paráda díky moc za tvoji pomoc! :clapping:

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o pomoc, pc se seká a naskakuje csrss.exe

#14 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner (viz muj podpis)
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za 14 dni

:arrow: A pokud nejsou problemy ci dotazy, je to z me stany vse :turned:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět