Prosím najdete problem

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
eX1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 17 Srp 2010 19:44

Re: Prosím najdete problem

#16 Příspěvek od eX1 »

Smazal jsem etda všechno co je nelegální a posílám ten log.

CKScanner - Additional Security Risks - These are not necessarily bad
hosts 127.0.0.1 practivate.adobe.com
scanner sequence 3.AP.11
----- EOF -----

:arrow: akorát tam zustalo hosts 127.0.0.1 practivate.adobe.com

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím najdete problem

#17 Příspěvek od vyosek »

:arrow: Spustte znovu OTL
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
  • Kód: Vybrat vše

    :otl
    SRV:64bit: - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA)
    O3 - HKLM\..\Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - No CLSID value found.
    O4 - HKLM..\Run: [NVIDIA driver monitor] C:\Windows\nvsvc32.exe ()
    O4 - HKU\S-1-5-21-1379387603-2685475807-1095684888-1001..\Run: [NVIDIA driver monitor] C:\Windows\nvsvc32.exe ()
    O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
    O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
    O13 - gopher Prefix: missing
    O13 - gopher Prefix: missing
    O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
    O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
    O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
    O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
    O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
    
    :reg
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}" =-
    "NVIDIA driver monitor"=-
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
    "C:\Users\Jirka\Desktop\Download\P17535732.JPG-www.facebook.exe"=-
    [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
    "AdobeCS5ServiceManager"=-
    "SwitchBoard"=-
    "Adobe Reader Speed Launcher"=-
    "Adobe ARM"=-
    "NVIDIA driver monitor"=-
     
    :files
    C:\Windows\nvsvc32.exe
    %windir%\system32\*.tmp.dll /s
    %windir%\system32\SET*.tmp /s
    %windir%\*.tmp /s
    
    :commands
    [RESETHOSTS]
    [EMPTYTEMP]
    [EMPTYFLASH]
    [CLEARALLRESTOREPOINTS]
  • Nasledne kliknete na Opravit
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

eX1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 17 Srp 2010 19:44

Re: Prosím najdete problem

#18 Příspěvek od eX1 »

All processes killed
========== OTL ==========
Service PnkBstrA stopped successfully!
Service PnkBstrA deleted successfully!
File C:\Windows\SysNative\PnkBstrA.exe not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D5D47440-0750-463D-BAEF-A47D02414806} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5D47440-0750-463D-BAEF-A47D02414806}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NVIDIA driver monitor not found.
File C:\Windows\nvsvc32.exe not found.
Registry value HKEY_USERS\S-1-5-21-1379387603-2685475807-1095684888-1001\Software\Microsoft\Windows\CurrentVersion\Run\\NVIDIA driver monitor not found.
File C:\Windows\nvsvc32.exe not found.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\grooveLocalGWS\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88FED34C-F0CA-4636-A375-3CB6248B04CD}\ not found.
File {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{314111c7-a502-11d2-bbca-00c04f8ec294}\ not found.
File {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\NVIDIA driver monitor not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Users\Jirka\Desktop\Download\P17535732.JPG-www.facebook.exe not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS5ServiceManager not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\NVIDIA driver monitor not found.
========== FILES ==========
File\Folder C:\Windows\nvsvc32.exe not found.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder moved successfully.
C:\Windows\Temp\TS_1405.tmp moved successfully.
C:\Windows\Temp\TS_1790.tmp moved successfully.
C:\Windows\Temp\TS_1A02.tmp moved successfully.
C:\Windows\Temp\TS_1C65.tmp moved successfully.
C:\Windows\Temp\TS_3EE2.tmp moved successfully.
C:\Windows\Temp\TS_4CBE.tmp moved successfully.
C:\Windows\Temp\TS_619.tmp moved successfully.
C:\Windows\Temp\TS_6B.tmp moved successfully.
C:\Windows\Temp\TS_A40.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Jirka
->Temp folder emptied: 39478028 bytes
->Temporary Internet Files folder emptied: 65049800 bytes
->FireFox cache emptied: 117823039 bytes
->Flash cache emptied: 21706 bytes

User: Krepelkovi
->Temp folder emptied: 175817 bytes
->Temporary Internet Files folder emptied: 39605071 bytes
->FireFox cache emptied: 110411817 bytes
->Flash cache emptied: 31146 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 109974 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50507 bytes
RecycleBin emptied: 14867816474 bytes

Total Files Cleaned = 14 535,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Jirka
->Flash cache emptied: 0 bytes

User: Krepelkovi
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.17.1 log created on 10302010_101020

Files\Folders moved on Reboot...
C:\Users\Jirka\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím najdete problem

#19 Příspěvek od vyosek »

Jak se chova PC, stale si chce povidat s okolim sam :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

eX1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 17 Srp 2010 19:44

Re: Prosím najdete problem

#20 Příspěvek od eX1 »

Ne díky už mi to nic nenašlo.

Můžu se zeptat k čemu lidi vymýšlí takovy kraviny jako jsou takový boti k čemu jim to je ?

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím najdete problem

#21 Příspěvek od vyosek »

:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za 14 dni

:arrow: Dejte novy log z RSIT

:arrow: Krom toho aby se pobavili jak se to posila vsem lidem v contact listu a otravuje je to, si myslim ze to muze otevrit nejaka zadni vratka do PC - zalezi jaky presne typ techle spambotu chytnete a jak dlouho je tam nechate prezivat
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

eX1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 17 Srp 2010 19:44

Re: Prosím najdete problem

#22 Příspěvek od eX1 »

Logfile of random's system information tool 1.08 (written by random/random)
Run by Jirka at 2010-10-30 12:00:35
Microsoft Windows 7 Ultimate
System drive C: has 112 GB (37%) free of 305 GB
Total RAM: 2047 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:00:37, on 30.10.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Jirka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6274 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000005ec
\??\C:\Windows\system32\conhost.exe
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesApp64.exe" /TUStart /pid:1648
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-7c501bfc-aff7-408d-8ab4-d01f2e830b28 -SystemEventPortName:HostProcess-bbaf1835-2b65-4f1f-87f6-7ada40214603 -IoCancelEventPortName:HostProcess-3c8eb2ff-40a1-46e2-9e2c-f1640eaba6db -NonStateChangingEventPortName:HostProcess-086bad1b-89c3-4fca-97f7-3f100aae9064 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8883e543-a03f-41e3-ab6a-2170287e63ae
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
taskeng.exe {AF6EB034-CCCD-4130-B5BE-4F5F69D5DFC3}
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\msiexec.exe /V
"C:\Users\Jirka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-10-30 12:00:35 ----D---- C:\rsit
2010-10-30 11:56:25 ----D---- C:\Program Files (x86)\CCleaner
2010-10-29 17:56:09 ----D---- C:\ToolBar SD
2010-10-29 10:42:45 ----D---- C:\Program Files\trend micro
2010-10-28 09:45:10 ----SHD---- C:\ProgramData\DSS
2010-10-28 09:34:51 ----D---- C:\Program Files (x86)\Electronic Arts
2010-10-28 09:31:50 ----D---- C:\Windows\SYSWOW64\AGEIA
2010-10-28 09:31:50 ----D---- C:\Program Files (x86)\AGEIA Technologies
2010-10-27 15:13:53 ----D---- C:\Users\Jirka\AppData\Roaming\Avira
2010-10-27 14:24:24 ----D---- C:\Program Files (x86)\Aliens Vs Predator
2010-10-24 13:59:32 ----D---- C:\Windows\system32\appmgmt
2010-10-24 13:44:51 ----A---- C:\Windows\SYSWOW64\unrar.dll
2010-10-24 13:44:51 ----A---- C:\Windows\avisplitter.ini
2010-10-24 13:44:49 ----A---- C:\Windows\SYSWOW64\yv12vfw.dll
2010-10-24 13:44:49 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2010-10-24 13:44:49 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2010-10-24 13:44:49 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll.manifest
2010-10-24 13:44:49 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2010-10-24 13:44:46 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2010-10-24 13:35:43 ----A---- C:\Windows\iun6002.exe
2010-10-20 08:10:21 ----D---- C:\ProgramData\McAfee
2010-10-17 11:22:06 ----D---- C:\ProgramData\Codemasters
2010-10-17 11:17:09 ----A---- C:\Windows\SYSWOW64\rapture3d_oal.dll
2010-10-17 11:17:09 ----A---- C:\Windows\SYSWOW64\mkl_blueripple.dll
2010-10-17 11:17:08 ----D---- C:\Program Files (x86)\BRS
2010-10-17 11:17:07 ----D---- C:\Program Files (x86)\OpenAL
2010-10-17 11:17:07 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2010-10-17 11:17:07 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2010-10-17 11:17:07 ----A---- C:\Windows\system32\wrap_oal.dll
2010-10-17 11:17:07 ----A---- C:\Windows\system32\OpenAL32.dll
2010-10-17 11:17:04 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-10-17 11:17:04 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-10-17 11:17:04 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-10-17 11:17:04 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-10-17 11:17:03 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-10-17 11:17:03 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-10-17 11:17:02 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-10-17 11:17:02 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-10-17 11:17:02 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-10-17 11:17:02 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-10-17 11:17:02 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-10-17 11:17:02 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-10-17 11:17:01 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2010-10-17 11:17:01 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-10-17 11:17:01 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-10-17 11:17:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-10-17 11:17:01 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-10-17 11:17:01 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-10-17 11:17:01 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-10-17 11:17:01 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-10-17 11:17:00 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-10-17 11:17:00 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-10-17 11:17:00 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-10-17 11:16:59 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-10-17 11:16:59 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-10-17 11:16:59 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-10-17 11:16:58 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-10-17 11:16:58 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-10-17 11:16:58 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-10-17 11:16:58 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-10-17 11:16:58 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-10-17 11:16:57 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-10-17 11:16:57 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-10-17 11:16:57 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-10-17 11:16:56 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-10-17 11:16:56 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-10-17 11:16:56 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-10-17 11:16:56 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-10-17 11:16:56 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-10-17 11:16:56 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-10-17 11:16:56 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-10-17 11:16:55 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-10-17 11:16:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-10-17 11:16:55 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-10-17 11:16:55 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-10-17 11:16:55 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-10-17 11:16:55 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-10-17 11:16:55 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-10-17 11:16:55 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-10-17 11:16:54 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-10-17 11:16:54 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-10-17 11:16:53 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-10-17 11:16:52 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-10-17 11:16:52 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-10-17 11:16:52 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-10-17 11:16:52 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-10-17 11:16:52 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-10-17 11:16:51 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-10-17 11:16:51 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-10-17 11:16:51 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-10-17 11:16:50 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-10-17 11:16:50 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-10-17 11:16:49 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-10-17 11:16:49 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-10-17 11:16:48 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-10-17 11:16:48 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-10-17 11:16:47 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-10-17 11:16:47 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-10-17 11:16:47 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-10-17 11:16:44 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-10-17 11:10:39 ----D---- C:\Program Files (x86)\Codemasters
2010-10-12 10:02:35 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-10-12 10:02:35 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2010-10-12 10:01:56 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-10-12 10:01:56 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-10-12 10:01:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-10-12 10:01:55 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-10-12 10:01:55 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-10-12 10:01:55 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-10-12 10:01:55 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-10-12 10:01:55 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-10-12 10:01:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-10-12 10:01:54 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-10-12 10:01:54 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-10-12 10:01:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-10-12 10:01:53 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-10-12 10:01:53 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-10-12 10:01:53 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-10-12 10:01:53 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-10-12 10:01:53 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-10-12 10:01:53 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-10-12 10:01:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-10-12 10:01:52 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-10-12 10:01:52 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-10-12 10:01:52 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-10-12 10:01:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-10-12 10:01:52 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-10-12 10:01:52 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-10-12 10:01:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-10-12 10:01:51 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-10-12 10:01:51 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-10-12 10:01:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-10-12 10:01:50 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-10-12 09:54:38 ----D---- C:\Program Files (x86)\Capcom
2010-10-12 09:32:07 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-10-12 09:31:40 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2010-10-12 09:31:19 ----D---- C:\Users\Jirka\AppData\Roaming\DAEMON Tools Lite
2010-10-12 09:31:16 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-10-12 09:06:11 ----A---- C:\Windows\WORDPAD.INI
2010-10-09 20:12:04 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-10-09 15:04:55 ----D---- C:\Users\Jirka\AppData\Roaming\vlc
2010-10-09 15:04:15 ----D---- C:\Program Files (x86)\VideoLAN
2010-10-09 13:16:40 ----D---- C:\Program Files (x86)\uTorrent
2010-10-09 13:16:08 ----D---- C:\Users\Jirka\AppData\Roaming\uTorrent

======List of files/folders modified in the last 1 months======

2010-10-30 12:00:36 ----D---- C:\Windows\Temp
2010-10-30 11:59:49 ----SHD---- C:\Windows\Installer
2010-10-30 11:59:47 ----HD---- C:\Config.Msi
2010-10-30 11:56:58 ----D---- C:\Windows\debug
2010-10-30 11:56:58 ----D---- C:\Windows
2010-10-30 11:56:25 ----RD---- C:\Program Files (x86)
2010-10-30 11:53:12 ----SHD---- C:\System Volume Information
2010-10-30 11:51:04 ----D---- C:\Users\Jirka\AppData\Roaming\ICQ
2010-10-30 11:09:25 ----D---- C:\Windows\System32
2010-10-30 11:09:25 ----D---- C:\Windows\inf
2010-10-30 11:09:25 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-30 10:10:42 ----D---- C:\Windows\system32\drivers\etc
2010-10-29 20:08:33 ----D---- C:\Program Files (x86)\Adobe
2010-10-29 20:05:51 ----D---- C:\Program Files (x86)\Common Files
2010-10-29 20:03:44 ----D---- C:\ProgramData\Adobe
2010-10-29 20:02:16 ----D---- C:\Windows\SysWOW64
2010-10-29 20:02:02 ----D---- C:\Program Files\Adobe
2010-10-29 20:01:58 ----D---- C:\Program Files\Common Files\Adobe
2010-10-29 19:50:35 ----D---- C:\Users\Jirka\AppData\Roaming\Adobe
2010-10-29 19:49:22 ----HD---- C:\ProgramData
2010-10-29 18:52:05 ----D---- C:\programy
2010-10-29 17:56:39 ----D---- C:\Windows\system32\Tasks
2010-10-29 12:38:44 ----D---- C:\Windows\system32\config
2010-10-29 10:42:45 ----RD---- C:\Program Files
2010-10-29 09:47:50 ----D---- C:\Windows\winsxs
2010-10-28 20:10:57 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-10-28 20:10:02 ----D---- C:\Windows\system32\NDF
2010-10-28 09:34:19 ----RSD---- C:\Windows\assembly
2010-10-21 16:43:31 ----D---- C:\Windows\system32\catroot2
2010-10-19 11:41:44 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 21:23:51 ----D---- C:\Program Files\TeamSpeak 3 Client
2010-10-14 12:08:30 ----D---- C:\Windows\Prefetch
2010-10-12 09:49:08 ----SD---- C:\ProgramData\Microsoft
2010-10-12 09:32:07 ----D---- C:\Windows\system32\drivers
2010-10-12 08:24:10 ----D---- C:\Program Files (x86)\Steam
2010-10-12 08:04:56 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-10-12 834544]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-03-02 116568]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-02-16 81072]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [2009-10-14 11856]
S3 a4qoik47;a4qoik47; C:\Windows\system32\drivers\a4qoik47.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2010-04-01 267432]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [2009-11-17 1353544]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2009-07-16 316664]
S3 TuneUp.Defrag;@C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-09-16 607048]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe []

-----------------EOF-----------------

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím najdete problem

#23 Příspěvek od vyosek »

Log jiz vypada v poradku :wink:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

eX1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 17 Srp 2010 19:44

Re: Prosím najdete problem

#24 Příspěvek od eX1 »

Jasně, si fakt borec. Divím se, že v tom logu vyznáš jestli tam něco je špatně nebo ne a taky se divím tomu, že tě to baví tady pomáhat. Dik.

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím najdete problem

#25 Příspěvek od vyosek »

:arrow: Je to o zkusenostech, bystrem oku a googlu

:arrow: Je to pro nas vsechny tady konicek a relax = zadny privydelek = jsme tu ve svem volnem case a zadarmo

Nemate zac, rad jsem pomohl :) Zase nekdy Obrázek
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět