csrss.exe a problém s ním spojený

[martinecek]

Tak jsem vse provedl dle vyborne zadaneho postupu a vse probehlo v poradku.
Dozvedel jsem se, ze adresar c:\windows\winsxs je opravdu systemovy a ze se nema mazat.
Jinak system vypada docela v poradku, nic zvlastniho se neprojevuje. Takze Vam dekuji za pomoc a snad se tu uz neuvidime a kdyby preci, tak budu vedet, ze tu jsou dobri lide, kteri mi budou schopni pomoci.

Dekuji.

[motji]

Já jsem Vám říkala, ať ten adresář nemažete .
Kdyby jste měl někdy zase problém s pc, klidně se ozvěte .


Ještě bych poprosila o ten nový log ze Rsitu .

[martinecek]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Barmar at 2010-08-28 10:00:00
Microsoft Windows 7 Professional
System drive C: has 17 GB (43%) free of 39 GB
Total RAM: 1023 MB (12% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:00:37, on 28.8.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\SOUNDMAN.EXE
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.Exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\Barmar\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Java\jre6\bin\javaw.exe
C:\Program Files\Miranda pack by sssugi 2.4.1m\miranda32.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\totalcmd\TOTALCMD.EXE
E:\download\RSIT.exe
C:\Program Files\trend micro\Barmar.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... tbid=60347
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.crawler.com/homepage.aspx?tbid=60347
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [TNOD UP] "C:\Program Files\TNod User & Password Finder\TNODUP.exe" /i
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [Google Update] "C:\Users\Barmar\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 6640 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2232105079-3074953530-982546561-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2232105079-3074953530-982546561-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-06-19 349640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-06-08 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-06-19 349640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-06-19 349640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-04-07 2145000]
"TNOD UP"=C:\Program Files\TNod User & Password Finder\TNODUP.exe [2010-04-02 1811968]
"SoundMan"=C:\Windows\SOUNDMAN.EXE [2009-04-14 604704]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-08-10 421888]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2010-08-23 2176512]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Barmar\AppData\Local\Google\Update\GoogleUpdate.exe [2010-06-08 136176]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2009-11-15 33120]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-08-23 3037696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2010-06-19 640440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2010-06-19 38840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
C:\Program Files\Cyberlink\Shared files\brs.exe [2010-04-02 75048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2010-07-21 141608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2010-08-10 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl10]
C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe [2010-02-03 87336]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 229376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - "C:\Program Files\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"

======List of files/folders created in the last 1 months======

2010-08-28 10:00:00 ----D---- C:\rsit
2010-08-27 08:41:06 ----D---- C:\Program Files\CCleaner
2010-08-25 19:29:20 ----A---- C:\Windows\system32\oleaut32.dll
2010-08-25 14:36:01 ----D---- C:\Users\Barmar\AppData\Roaming\download2
2010-08-24 16:43:10 ----D---- C:\Users\Barmar\AppData\Roaming\Malwarebytes
2010-08-24 16:42:53 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-08-24 16:42:50 ----D---- C:\ProgramData\Malwarebytes
2010-08-24 16:42:49 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-08-24 16:42:48 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-08-24 15:34:09 ----RA---- C:\Windows\system32\AdobePDFUI.dll
2010-08-24 14:13:11 ----D---- C:\Users\Barmar\AppData\Roaming\Nero
2010-08-24 14:00:16 ----D---- C:\ProgramData\Nero
2010-08-24 13:59:29 ----D---- C:\Program Files\Common Files\Nero
2010-08-24 13:59:21 ----D---- C:\Program Files\Nero
2010-08-24 13:50:06 ----D---- C:\Program Files\Microsoft.NET
2010-08-24 13:49:16 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-08-24 13:48:33 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-08-24 13:47:31 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-08-24 13:46:44 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-08-24 13:45:57 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-08-24 10:37:45 ----D---- C:\Program Files\trend micro
2010-08-23 17:35:49 ----D---- C:\Program Files\Emsisoft HiJackFree
2010-08-23 17:27:24 ----D---- C:\Program Files\RegGenie
2010-08-23 15:09:48 ----A---- C:\Windows\system32\drivers\sp_rsdrv2.sys
2010-08-23 15:09:47 ----D---- C:\Users\Barmar\AppData\Roaming\Spyware Terminator
2010-08-23 15:09:41 ----D---- C:\ProgramData\Spyware Terminator
2010-08-23 15:09:39 ----D---- C:\Program Files\Spyware Terminator
2010-08-23 14:56:13 ----AD---- C:\Windows\VDLL.DLL
2010-08-23 14:56:13 ----AD---- C:\Windows\system32\runouce.exe
2010-08-23 14:56:13 ----AD---- C:\Windows\rundll16.exe
2010-08-23 14:56:13 ----AD---- C:\Windows\RUNDL132.EXE
2010-08-23 14:56:13 ----AD---- C:\Windows\logo1_.exe
2010-08-23 14:56:13 ----AD---- C:\Windows\logo_1.exe
2010-08-23 14:51:52 ----A---- C:\Windows\system32\msvcr80.dll
2010-08-23 14:51:51 ----A---- C:\Windows\system32\msvcp80.dll
2010-08-23 14:51:50 ----A---- C:\Windows\system32\eEmpty.exe
2010-08-23 14:51:43 ----D---- C:\Program Files\Common Files\MicroWorld
2010-08-23 14:51:37 ----D---- C:\ProgramData\MicroWorld
2010-08-23 14:21:52 ----SHD---- C:\$RECYCLE.BIN
2010-08-23 14:02:43 ----A---- C:\Windows\PEV.exe
2010-08-23 14:02:43 ----A---- C:\Windows\MBR.exe
2010-08-23 14:02:30 ----D---- C:\Windows\ERDNT
2010-08-20 11:08:59 ----D---- C:\Program Files\QuickTime
2010-08-16 17:20:07 ----D---- C:\Users\Barmar\AppData\Roaming\WebSurf.ru
2010-08-16 09:54:32 ----D---- C:\Users\Barmar\AppData\Roaming\WebMoney
2010-08-16 09:37:15 ----D---- C:\Program Files\WebMoney
2010-08-15 15:09:12 ----D---- C:\Program Files\BOINC
2010-08-15 14:57:31 ----D---- C:\ProgramData\BOINC
2010-08-13 11:38:42 ----D---- C:\ProgramData\Google
2010-08-11 20:50:48 ----D---- C:\Program Files\WinRAR
2010-08-11 12:12:38 ----A---- C:\Windows\system32\AdobePDF.dll
2010-08-11 11:09:53 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-08-11 11:09:52 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-11 11:09:17 ----A---- C:\Windows\system32\mshtml.dll
2010-08-11 11:09:12 ----A---- C:\Windows\system32\ieframe.dll
2010-08-11 11:09:10 ----A---- C:\Windows\system32\urlmon.dll
2010-08-11 11:09:09 ----A---- C:\Windows\system32\wininet.dll
2010-08-11 11:09:09 ----A---- C:\Windows\system32\iepeers.dll
2010-08-11 11:09:08 ----A---- C:\Windows\system32\mstime.dll
2010-08-11 11:09:08 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-08-11 11:09:08 ----A---- C:\Windows\system32\ieui.dll
2010-08-11 11:09:08 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-11 11:09:07 ----A---- C:\Windows\system32\msfeedssync.exe
2010-08-11 11:09:07 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-11 11:09:05 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-08-11 11:09:05 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-11 11:09:05 ----A---- C:\Windows\system32\drivers\srv.sys
2010-08-11 11:08:51 ----A---- C:\Windows\system32\rtutils.dll
2010-08-11 11:08:50 ----A---- C:\Windows\system32\iccvid.dll
2010-08-11 11:08:49 ----A---- C:\Windows\system32\ir32_32.dll
2010-08-11 11:08:48 ----A---- C:\Windows\system32\win32k.sys
2010-08-11 11:08:46 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-11 11:08:44 ----A---- C:\Windows\system32\schannel.dll
2010-08-11 11:08:40 ----A---- C:\Windows\system32\msxml3.dll
2010-08-06 06:37:48 ----D---- C:\Windows\lhsp
2010-08-06 06:37:22 ----D---- C:\Windows\msagent
2010-08-06 06:36:59 ----D---- C:\Program Files\Magnus
2010-08-03 09:36:47 ----A---- C:\Windows\system32\shell32.dll
2010-08-02 12:12:57 ----D---- C:\Program Files\iPod

======List of files/folders modified in the last 1 months======

2010-08-28 10:00:41 ----D---- C:\Windows\Temp
2010-08-28 10:00:23 ----D---- C:\Windows\Prefetch
2010-08-28 09:15:58 ----D---- C:\Windows\system32\config
2010-08-28 01:49:20 ----D---- C:\Windows
2010-08-27 22:39:21 ----D---- C:\Windows\Minidump
2010-08-27 12:54:04 ----SHD---- C:\System Volume Information
2010-08-27 12:41:26 ----D---- C:\Windows\system32\wdi
2010-08-27 11:10:06 ----D---- C:\Windows\system32\NDF
2010-08-27 08:49:42 ----SHD---- C:\Windows\Installer
2010-08-27 08:49:41 ----D---- C:\Config.Msi
2010-08-27 08:49:40 ----D---- C:\Program Files\HP
2010-08-27 08:45:26 ----D---- C:\Windows\debug
2010-08-27 08:41:06 ----D---- C:\Program Files
2010-08-26 14:45:16 ----D---- C:\Windows\winsxs
2010-08-26 14:44:37 ----D---- C:\Windows\System32
2010-08-25 22:52:39 ----D---- C:\Windows\AppPatch
2010-08-25 19:28:57 ----D---- C:\Windows\system32\catroot2
2010-08-25 19:28:57 ----D---- C:\Windows\system32\catroot
2010-08-25 19:02:11 ----D---- C:\Windows\system32\appmgmt
2010-08-25 14:50:13 ----D---- C:\Program Files\JDownloader
2010-08-24 23:14:35 ----D---- C:\Windows\system32\drivers
2010-08-24 23:14:35 ----D---- C:\Windows\schemas
2010-08-24 22:12:36 ----AD---- C:\ProgramData\Temp
2010-08-24 16:42:50 ----D---- C:\ProgramData
2010-08-24 14:37:39 ----SD---- C:\Users\Barmar\AppData\Roaming\Microsoft
2010-08-24 13:59:29 ----D---- C:\Program Files\Common Files
2010-08-24 13:50:17 ----RSD---- C:\Windows\assembly
2010-08-24 13:42:20 ----D---- C:\Program Files\Common Files\microsoft shared
2010-08-23 17:28:19 ----D---- C:\Windows\system32\Tasks
2010-08-23 17:28:02 ----RSD---- C:\Windows\Fonts
2010-08-23 14:17:33 ----A---- C:\Windows\system.ini
2010-08-23 14:17:20 ----D---- C:\Windows\system32\drivers\etc
2010-08-23 11:25:32 ----D---- C:\Program Files\Windows Media Player
2010-08-23 11:25:29 ----D---- C:\Program Files\iTunes
2010-08-22 14:40:49 ----D---- C:\Users\Barmar\AppData\Roaming\uTorrent
2010-08-22 13:43:25 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-08-22 13:43:24 ----D---- C:\Windows\inf
2010-08-15 15:10:15 ----D---- C:\Windows\Downloaded Installations
2010-08-13 19:40:42 ----D---- C:\Windows\Logs
2010-08-12 08:49:27 ----D---- C:\Windows\Microsoft.NET
2010-08-11 20:59:14 ----D---- C:\Users\Barmar\AppData\Roaming\WinRAR
2010-08-11 12:13:35 ----D---- C:\Program Files\Common Files\Adobe
2010-08-11 12:13:11 ----D---- C:\Windows\system32\DriverStore
2010-08-11 11:19:21 ----D---- C:\Windows\system32\migration
2010-08-11 11:19:21 ----D---- C:\Program Files\Internet Explorer
2010-08-06 06:37:46 ----D---- C:\Windows\Help
2010-08-06 06:37:40 ----D---- C:\Windows\Speech
2010-08-03 20:09:31 ----A---- C:\Windows\system32\MRT.exe
2010-08-02 12:12:55 ----D---- C:\Program Files\Common Files\Apple
2010-07-30 15:12:06 ----D---- C:\Users\Barmar\AppData\Roaming\CyberLink

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\Windows\system32\drivers\sp_rsdrv2.sys [2010-08-23 142592]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/06/11 16:24:35]; \??\C:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-04-02 87536]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-07 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-07-14 117248]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\Windows\system32\drivers\RTKVAC.SYS [2009-06-18 4172832]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-02-11 4450816]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-07 32584]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2009-07-14 429056]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2009-07-14 43008]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 ALCXSENS;Service for WDM 3D Audio Driver; C:\Windows\system32\drivers\ALCXSENS.SYS [2004-02-24 400384]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 AMDMSRIO;AMDMSRIO; \??\C:\Users\Barmar\AppData\Local\Temp\{55638DD9-D5A9-11D3-B74B-204C4F4F5020}\AMDMSRIO.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-14 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2010-04-16 41472]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S4 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-17 691696]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2010-02-11 733184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-08-23 488960]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-04-07 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-07-12 651720]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-12-22 136120]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-21 540968]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-08 1343400]

-----------------EOF-----------------

[motji]

Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir




pokud nepoužíváte, smažte
- C:\Users\Barmar\AppData\Roaming\WebSurf.ru



Otevřete si Poznámkový blok a zkopírujte do něj text

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-


 

-uložte jako (typ: všechny soubory) kde za název souboru zadáte "smazani.reg" bez uvozovek,
klikněte na uložit, pak na soubor standardně 2X klikněte a potvrďte dialogové okno.



Pokud nejsou problémy, je to vše

[martinecek]

asi v poradku

Dekuji Vam i Fufikovi

[motji]

asi v poradku

Dekuji Vam i Fufikovi

Není zač, akorát nevím jakého Fufíka máte na mysli

[butes]

Zdravím zázračné léčitele , mám problém s Windows Vista Home Premium 64bit. Rolovací kolečko myši a samotný posun web stránek v Internet Exploreru zapříčiní vytížení procesoru na 100% (csrss.exe). K tomu všemu se zahlcuje při sledování DVB-T signálu datový tok a vlivem zatížení procesoru není obraz koukatelný. Zkoušel jsem snad všechno. CC-Cleaner, NOD32, Spyboot, F-Secure mě zklamal. Už nevím. Díky.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Radek at 2010-09-01 13:08:03
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 112 GB (66%) free of 170 GB
Total RAM: 2047 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:08:06, on 1.9.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18943)
Boot mode: Normal

Running processes:
C:\Program Files\WinFast\WFDTV\WFWIZ.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files\trend micro\Radek.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idnes.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] "C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6105 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {463046C8-D615-4C98-904B-7BCEC708AA7E}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe"
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-2103dfbd-1843-41f3-990e-1b86005b3720 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-ca8a4425-9895-4011-8630-54d056444353 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0661530e-3b01-4770-9fc7-064efa433229 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:9622f9b2-242f-4461-b56a-b1e553857b00
"C:\Program Files\Windows Defender\MSASCui.exe" -hide
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
"C:\Windows\ehome\ehtray.exe"
"C:\Program Files\WinFast\WFDTV\WFWIZ.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\WinFast\WFDTV\DTVSchdl.exe"
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe"
C:\Windows\ehome\ehmsas.exe -Embedding
C:\Windows\ehome\ehsched.exe
"C:\Program Files\Windows Media Player\wmpnscfg.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\ehome\ehRecvr.exe
taskeng.exe {B2830989-D46C-4AB8-9EBC-6C4C8B846DC9}
"C:\Program Files (x86)\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:2932 CREDAT:71937
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe -Embedding
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:2932 CREDAT:137477
"C:\Windows\system32\SearchFilterHost.exe" 0 632 636 644 65536 640
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Radek\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2067532084-414617845-3986009481-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2067532084-414617845-3986009481-1000UA.job
C:\Windows\tasks\User_Feed_Synchronization-{6AB112A2-08B8-43E1-9284-5117AF63B1F0}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-07-21 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1584184]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-08-12 2916584]
"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2009-11-11 2320752]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 138240]
"WinFast Schedule"=C:\Program Files\WinFast\WFDTV\WFWIZ.exe [2010-06-09 2920448]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"WinFastDTV"=C:\Program Files\WinFast\WFDTV\DTVSchdl.exe [2010-06-09 101888]
"ArcSoft Connection Service"=C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-02-06 170496]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=153

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktopChanges"=1
"BindDirectlyToPropertySetStorage"=0
"NoDriveTypeAutoRun"=153

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-09-01 13:08:04 ----D---- C:\Program Files\trend micro
2010-09-01 12:43:22 ----A---- C:\Windows\SYSWOW64\unicows.dll
2010-09-01 12:41:19 ----D---- C:\Program Files\WinFast
2010-09-01 12:36:45 ----ASH---- C:\hiberfil.sys
2010-09-01 12:20:46 ----A---- C:\Windows\ntbtlog.txt
2010-09-01 12:15:44 ----A---- C:\Windows\WFD_InstKind.ini
2010-09-01 12:10:38 ----A---- C:\Windows\SYSWOW64\drivers\ULCDRHlp.sys
2010-09-01 10:51:42 ----D---- C:\ProgramData\Apple Computer
2010-09-01 10:51:42 ----D---- C:\Program Files (x86)\VistaCodecPack
2010-09-01 10:51:11 ----D---- C:\Program Files (x86)\illiminable
2010-09-01 10:20:37 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-09-01 10:20:37 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2010-09-01 09:56:01 ----D---- C:\VundoFix Backups
2010-09-01 09:45:28 ----D---- C:\Program Files\Microsoft IntelliPoint
2010-09-01 01:07:37 ----D---- C:\ProgramData\ESET
2010-09-01 01:07:37 ----D---- C:\Program Files\ESET
2010-09-01 00:53:35 ----D---- C:\rsit
2010-09-01 00:44:27 ----D---- C:\!KillBox
2010-09-01 00:34:40 ----AD---- C:\Windows\VDLL.DLL
2010-09-01 00:34:40 ----AD---- C:\Windows\SYSWOW64\runouce.exe
2010-09-01 00:34:40 ----AD---- C:\Windows\rundll16.exe
2010-09-01 00:34:40 ----AD---- C:\Windows\RUNDL132.EXE
2010-09-01 00:34:40 ----AD---- C:\Windows\logo1_.exe
2010-09-01 00:34:40 ----AD---- C:\Windows\logo_1.exe
2010-09-01 00:23:51 ----A---- C:\Windows\SYSWOW64\msvcr80.dll
2010-09-01 00:23:50 ----A---- C:\Windows\SYSWOW64\msvcp80.dll
2010-09-01 00:23:49 ----A---- C:\Windows\SYSWOW64\eEmpty.exe
2010-09-01 00:23:30 ----D---- C:\ProgramData\MicroWorld
2010-09-01 00:12:54 ----D---- C:\Program Files (x86)\Trend Micro
2010-09-01 00:06:39 ----RD---- C:\32788R22FWJFW
2010-08-27 14:37:25 ----D---- C:\Program Files (x86)\CDex
2010-08-26 19:15:29 ----D---- C:\Program Files (x86)\ProgDVB
2010-08-26 08:40:29 ----A---- C:\Windows\dd_ATL80SP1_KB973923MSI1B0D.txt
2010-08-26 08:40:22 ----A---- C:\Windows\dd_ATL80SP1_KB973923UI1B0D.txt
2010-08-25 01:21:23 ----D---- C:\Program Files (x86)\Codec Pack - All In 1
2010-08-25 01:14:40 ----D---- C:\Program Files (x86)\CCleaner
2010-08-25 01:13:14 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-08-25 01:13:14 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-08-25 01:13:14 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-08-25 01:13:14 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-08-25 01:13:13 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-08-25 01:13:13 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-08-25 01:13:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-08-25 01:13:11 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-08-25 01:13:09 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-08-25 01:13:09 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-08-25 01:13:08 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-08-25 01:13:08 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-08-25 01:13:00 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-08-25 01:13:00 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-08-25 01:12:58 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-08-25 01:12:58 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-08-25 01:12:56 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-08-25 01:12:56 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-08-25 01:12:56 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-08-25 01:12:56 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-08-25 01:12:50 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-08-25 01:12:50 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-08-25 01:12:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-08-25 01:12:39 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-08-25 01:12:37 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2010-08-25 01:12:37 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-08-25 01:12:35 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-08-25 01:12:35 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-08-25 01:12:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-08-25 01:12:34 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-08-25 01:12:26 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-08-25 01:12:26 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-08-25 01:12:12 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-08-25 01:12:12 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-08-25 01:12:11 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2010-08-25 01:12:11 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-08-25 01:12:09 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-08-25 01:12:09 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-08-25 01:12:07 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-08-25 01:12:07 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-08-25 01:12:07 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-08-25 01:12:07 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-08-25 01:12:05 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-08-25 01:12:05 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-08-25 01:12:03 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-08-25 01:12:03 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-08-25 01:12:03 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-08-25 01:12:03 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-08-25 01:12:01 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-08-25 01:12:01 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-08-25 01:12:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-08-25 01:12:00 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-08-25 01:11:58 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-08-25 01:11:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-08-25 01:11:58 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-08-25 01:11:58 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-08-25 01:11:48 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-08-25 01:11:48 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-08-25 01:11:46 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-08-25 01:11:46 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-08-25 01:11:46 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-08-25 01:11:46 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-08-25 01:11:34 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-08-25 01:11:34 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-08-25 01:11:33 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-08-25 01:11:33 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-08-25 01:11:31 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-08-25 01:11:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-08-25 01:11:31 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-08-25 01:11:31 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-08-25 01:11:29 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-08-25 01:11:29 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-08-25 01:11:27 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-08-25 01:11:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-08-25 01:11:27 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-08-25 01:11:27 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-08-25 01:11:16 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-08-25 01:11:16 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-08-25 01:11:13 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-08-25 01:11:13 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-08-25 01:11:13 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-08-25 01:11:13 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-08-25 01:11:11 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-08-25 01:11:11 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-08-25 01:11:10 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-08-25 01:11:10 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-08-25 01:11:09 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-08-25 01:11:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-08-25 01:11:09 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-08-25 01:11:09 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-08-25 01:11:00 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-08-25 01:11:00 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-08-25 01:10:59 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-08-25 01:10:59 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-08-25 01:10:57 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-08-25 01:10:57 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-08-25 01:10:56 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-08-25 01:10:56 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-08-25 01:10:33 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-08-25 01:10:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-08-25 01:10:33 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-08-25 01:10:33 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-08-25 01:10:32 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-08-25 01:10:32 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-08-25 01:10:30 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-08-25 01:10:30 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-08-25 01:10:25 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-08-25 01:10:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-08-25 01:10:25 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-08-25 01:10:25 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-08-25 01:10:23 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-08-25 01:10:23 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-08-25 01:10:20 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-08-25 01:10:20 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-08-25 01:10:17 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-08-25 01:10:17 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-08-25 01:10:17 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-08-25 01:10:17 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-08-25 01:10:15 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-08-25 01:10:15 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-08-25 01:10:13 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-08-25 01:10:13 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-08-25 01:10:13 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-08-25 01:10:13 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-08-25 01:10:11 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-08-25 01:10:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-08-25 01:10:11 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-08-25 01:10:11 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-08-25 01:10:09 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-08-25 01:10:09 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-08-25 01:10:08 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-08-25 01:10:08 ----A---- C:\Windows\system32\xinput1_3.dll
2010-08-25 01:10:06 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-08-25 01:10:06 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-08-25 01:10:04 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-08-25 01:10:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-08-25 01:10:04 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-08-25 01:10:04 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-08-25 01:10:02 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-08-25 01:10:02 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-08-25 01:10:00 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-08-25 01:10:00 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-08-25 01:09:58 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-08-25 01:09:58 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-08-25 01:09:57 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-08-25 01:09:57 ----A---- C:\Windows\system32\d3dx10.dll
2010-08-25 01:09:55 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-08-25 01:09:55 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-08-25 01:09:53 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-08-25 01:09:53 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-08-25 01:09:53 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-08-25 01:09:53 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-08-25 01:09:52 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-08-25 01:09:52 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-08-25 01:09:50 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-08-25 01:09:50 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-08-25 01:09:49 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-08-25 01:09:49 ----A---- C:\Windows\system32\xinput1_2.dll
2010-08-25 01:09:48 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2010-08-25 01:09:48 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-08-25 01:09:47 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2010-08-25 01:09:47 ----A---- C:\Windows\system32\xinput1_1.dll
2010-08-25 01:09:45 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2010-08-25 01:09:45 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-08-25 01:09:41 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-08-25 01:09:41 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-08-25 01:09:39 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2010-08-25 01:09:39 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2010-08-25 01:09:39 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-08-25 01:09:39 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-08-25 01:09:37 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2010-08-25 01:09:37 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-08-25 01:09:35 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2010-08-25 01:09:35 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-08-25 01:09:33 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2010-08-25 01:09:33 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-08-25 01:09:31 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2010-08-25 01:09:31 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-08-25 01:09:29 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2010-08-25 01:09:29 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-08-25 01:09:27 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2010-08-25 01:09:27 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-08-25 01:05:40 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-08-25 01:05:21 ----D---- C:\Program Files\ATI
2010-08-25 01:04:43 ----D---- C:\Program Files\ATI Technologies
2010-08-25 01:04:31 ----D---- C:\Windows\SYSWOW64\directx
2010-08-12 20:55:59 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-12 20:55:53 ----A---- C:\Windows\system32\drivers\srv.sys
2010-08-12 20:55:52 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-12 20:55:46 ----A---- C:\Windows\system32\win32k.sys
2010-08-12 20:55:42 ----A---- C:\Windows\system32\rtutils.dll
2010-08-12 20:55:41 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2010-08-12 20:55:09 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2010-08-12 20:55:05 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-12 20:54:11 ----A---- C:\Windows\system32\mshtml.dll
2010-08-12 20:54:03 ----A---- C:\Windows\system32\ieframe.dll
2010-08-12 20:54:00 ----A---- C:\Windows\system32\iertutil.dll
2010-08-12 20:53:58 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-08-12 20:53:55 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-08-12 20:53:49 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-08-12 20:53:47 ----A---- C:\Windows\system32\urlmon.dll
2010-08-12 20:53:39 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-08-12 20:53:38 ----A---- C:\Windows\system32\wininet.dll
2010-08-12 20:53:36 ----A---- C:\Windows\system32\msfeeds.dll
2010-08-12 20:53:35 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-12 20:53:33 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-08-12 20:53:33 ----A---- C:\Windows\system32\occache.dll
2010-08-12 20:53:33 ----A---- C:\Windows\system32\iepeers.dll
2010-08-12 20:53:32 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2010-08-12 20:53:31 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-08-12 20:53:31 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-08-12 20:53:31 ----A---- C:\Windows\system32\mstime.dll
2010-08-12 20:53:31 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-08-12 20:53:31 ----A---- C:\Windows\system32\iernonce.dll
2010-08-12 20:53:30 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-12 20:53:30 ----A---- C:\Windows\system32\ieui.dll
2010-08-12 20:53:26 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-08-12 20:53:24 ----A---- C:\Windows\system32\ieUnatt.exe
2010-08-12 20:53:24 ----A---- C:\Windows\system32\iesysprep.dll
2010-08-12 20:53:22 ----A---- C:\Windows\SYSWOW64\occache.dll
2010-08-12 20:53:22 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-08-12 20:53:21 ----A---- C:\Windows\system32\iesetup.dll
2010-08-12 20:53:20 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2010-08-12 20:53:20 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-08-12 20:53:19 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2010-08-12 20:53:17 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-08-12 20:53:17 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2010-08-12 20:53:17 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2010-08-12 20:53:15 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-08-12 20:53:15 ----A---- C:\Windows\system32\ie4uinit.exe
2010-08-12 20:53:13 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-08-12 20:53:13 ----A---- C:\Windows\system32\msfeedssync.exe
2010-08-12 20:52:35 ----A---- C:\Windows\system32\msxml3.dll
2010-08-12 20:52:32 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2010-08-12 20:52:27 ----A---- C:\Windows\SYSWOW64\schannel.dll
2010-08-12 20:52:26 ----A---- C:\Windows\system32\schannel.dll
2010-08-05 19:17:28 ----D---- C:\PFiles
2010-08-04 08:30:58 ----A---- C:\Windows\system32\shell32.dll
2010-08-04 08:30:52 ----A---- C:\Windows\SYSWOW64\shell32.dll

======List of files/folders modified in the last 1 months======

2010-09-01 13:08:05 ----D---- C:\Windows\Temp
2010-09-01 13:08:04 ----RD---- C:\Program Files
2010-09-01 12:44:45 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-09-01 12:44:39 ----SHD---- C:\System Volume Information
2010-09-01 12:43:22 ----D---- C:\Windows\SysWOW64
2010-09-01 12:41:42 ----D---- C:\Windows\SYSWOW64\WinFast
2010-09-01 12:37:56 ----D---- C:\Windows
2010-09-01 12:32:16 ----D---- C:\Windows\system32\drivers
2010-09-01 12:32:15 ----D---- C:\Windows\system32\catroot
2010-09-01 12:32:14 ----D---- C:\Windows\inf
2010-09-01 12:28:09 ----D---- C:\Windows\Prefetch
2010-09-01 12:24:25 ----D---- C:\Windows\system32\catroot2
2010-09-01 12:20:56 ----D---- C:\Windows\Minidump
2010-09-01 12:10:38 ----D---- C:\Windows\SYSWOW64\drivers
2010-09-01 10:54:19 ----SHD---- C:\Windows\Installer
2010-09-01 10:51:42 ----RD---- C:\Program Files (x86)
2010-09-01 10:51:42 ----HD---- C:\ProgramData
2010-09-01 09:49:05 ----SD---- C:\Users\Radek\AppData\Roaming\Microsoft
2010-09-01 09:49:05 ----D---- C:\Windows\system32\Tasks
2010-09-01 09:45:30 ----RSD---- C:\Windows\Fonts
2010-09-01 09:39:00 ----D---- C:\Windows\winsxs
2010-09-01 09:38:56 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-01 09:26:21 ----D---- C:\Program Files (x86)\F-Secure
2010-09-01 09:22:20 ----D---- C:\ProgramData\f-secure
2010-09-01 09:22:16 ----D---- C:\Windows\Tasks
2010-09-01 00:23:44 ----D---- C:\Program Files (x86)\Common Files
2010-08-27 18:28:04 ----D---- C:\Users\Radek\AppData\Roaming\ICQ
2010-08-27 10:29:05 ----D---- C:\Program Files (x86)\ICQ7.2
2010-08-26 18:29:47 ----D---- C:\WinFast WorkArea
2010-08-25 01:18:51 ----D---- C:\Windows\Debug
2010-08-25 01:13:15 ----D---- C:\Windows\System32
2010-08-25 01:09:45 ----RSD---- C:\Windows\assembly
2010-08-25 01:09:22 ----D---- C:\Windows\Microsoft.NET
2010-08-25 01:05:40 ----D---- C:\Program Files\Common Files
2010-08-25 01:04:32 ----D---- C:\Windows\Logs
2010-08-24 16:53:42 ----D---- C:\Total Commander
2010-08-15 20:26:56 ----D---- C:\Windows\system32\WDI
2010-08-13 23:26:42 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-08-13 16:58:15 ----D---- C:\Program Files\Internet Explorer
2010-08-13 16:58:15 ----D---- C:\Program Files (x86)\Internet Explorer
2010-08-13 16:58:11 ----D---- C:\Program Files\Windows Mail
2010-08-13 16:58:11 ----D---- C:\Program Files\Movie Maker
2010-08-13 16:58:11 ----D---- C:\Program Files (x86)\Windows Mail
2010-08-13 16:58:10 ----D---- C:\Windows\SYSWOW64\migration
2010-08-13 16:58:09 ----D---- C:\Windows\system32\migration
2010-08-13 12:35:56 ----D---- C:\ProgramData\Microsoft Help
2010-08-03 20:52:33 ----A---- C:\Windows\system32\mrt.exe
2010-08-02 15:04:28 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 168544]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 126320]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\Windows\system32\drivers\RTKVAC64.SYS [2009-06-18 3491616]
R3 HidBatt;Ovladač baterie zdroje UPS standardu HID; C:\Windows\system32\DRIVERS\HidBatt.sys [2008-01-18 26624]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 6656]
R3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-01-19 2807808]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2009-12-20 291360]
R3 WFLR6654;WinFast DTV1800 H (XC3028); C:\Windows\system32\drivers\wfeaglxt.sys [2009-10-21 474240]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 108544]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 6144]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 11008]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 7040]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 7936]
S3 ULCDRHlp;ULCDRHlp; C:\Windows\System32\Drivers\ULCDRHlp.sys []
S3 VIAudio;Zvukový ovladač VIA AC'97; C:\Windows\system32\drivers\ac97via.sys [2006-09-18 93696]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-02-06 109056]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-08-12 810144]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-08-12 42360]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 27648]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-18 19968]

-----------------EOF-----------------

[motji]

Dobrý večer
Co jste dělal s Killboxem?
Poprosím Vás, ť si založíte nový topic, tady by to bylo nepřehledné .
založte si nový topic, do předmětu napište pro motji a vložte mi do něj tyto logy:

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.



Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe
-uložte ho na plochu a spustte soubor OTL.exe.
-do bílého okna dole skopírujte tento skript:

Kód: Vybrat vše

netsvcs
drivers32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
c:\windows\*.* /U
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys
ndis.sys
winlogon.exe
explorer.exe
userinit.exe
lsass.exe
svchost.exe
smss.exe
hal.dll
ws2_32.dll
tcpip.sys
cryptsvc.dll
Changer.sys
JakNDis.sys
isapnp.sys
cdrom.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
CREATERESTOREPOINT 

- zaškrtněte okénko Pro všechny uživatele.
-označte okénka Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
- Klikněte na tlačítko Prohledat
-po dokončení skenu se objeví logy OTL.Txt a Extras.txt, vložte je zde

[palec]

Zdravím,
našel jsem toto téma při pátrání na internetu po csrss. vsiml jsem si ze ho mam v procesech, a samozřejmě nevím co s tím. na disku C mam málo místa (někdy i 0), nejvíše se to vyšplhává na cca 500 MB. potřebuji nutně pomoct a doufám ze jsem narazil na někoho kdo mě pomůže. pouzívám Ccleaner ale dokáze smazat nejvíce cca 300 MB. Opravdu si nevím rady. Děkuji

[Márty84]

Zdravím,
našel jsem toto téma při pátrání na internetu po csrss. vsiml jsem si ze ho mam v procesech, a samozřejmě nevím co s tím. na disku C mam málo místa (někdy i 0), nejvíše se to vyšplhává na cca 500 MB. potřebuji nutně pomoct a doufám ze jsem narazil na někoho kdo mě pomůže. pouzívám Ccleaner ale dokáze smazat nejvíce cca 300 MB. Opravdu si nevím rady. Děkuji

Zdravim
Zalozte si prosim vlastni tema (jak je psano v pravidlech fora) a dejte tam log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=105895