Prvý sken
http://virusscan.jotti.org/sk/scanresul ... bd95d56c12
Druhý sken
https://www.virustotal.com/cs/file/1edf ... 372878831/
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Pomalý PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
kniightfiight
Re: Pomalý PC
Prvý LOG
RogueKiller V8.6.2 [Jul 3 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : hxxp://www.adlice.com/forum/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Andrej [Práva Správcu]
Režim : Odebrať -- Dátum : 07/03/2013 21:24:48
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 1 ¤¤¤
[SUSP PATH] RogueKiller.exe -- C:\Users\Andrej\Desktop\RogueKiller.exe [-] -> ZASTAVENÉ [TermProc]
¤¤¤ Záznamy Registrov : 13 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZANÉ
[HJ POL] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZANÉ
[HJ POL] HKLM\[...]\System : EnableLUA (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowVideos (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowHelp (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> NAHRADENÉ (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRADENÉ (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)
¤¤¤ naplánované úlohy : 0 ¤¤¤
¤¤¤ spustenie položky : 0 ¤¤¤
¤¤¤ webové prehliadače : 0 ¤¤¤
¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤
¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤
[Address] IRP[IRP_MJ_CREATE] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_CLOSE] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_DEVICE_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_POWER] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_SYSTEM_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_PNP] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 localhost
¤¤¤ Kontrola MBR: ¤¤¤
+++++ PhysicalDrive0: SAMSUNG HD154UI SCSI Disk Device +++++
--- User ---
[MBR] 753afdecbdfd67a2ee348c2ca9a5187f
[BSP] 362659e2bcb65deb3e19e0e2da6d7546 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 470003 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 962568192 | Size: 29995 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 1023999165 | Size: 930789 Mo
User = LL1 ... OK!
Error reading LL2 MBR!
Dokončené : << RKreport[0]_D_07032013_212448.txt >>
RKreport[0]_S_07032013_202322.txt;RKreport[0]_S_07032013_212443.txt
Druhý LOG
RogueKiller V8.6.2 [Jul 3 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : hxxp://www.adlice.com/forum/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Andrej [Práva Správcu]
Režim : Oprava HOSTS -- Dátum : 07/03/2013 21:27:56
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 1 ¤¤¤
[SUSP PATH] RogueKiller.exe -- C:\Users\Andrej\Desktop\RogueKiller.exe [-] -> ZASTAVENÉ [TermProc]
¤¤¤ Záznamy Registrov : 0 ¤¤¤
¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 localhost
¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost
Dokončené : << RKreport[0]_H_07032013_212756.txt >>
RKreport[0]_D_07032013_212448.txt;RKreport[0]_S_07032013_202322.txt;RKreport[0]_S_07032013_212443.txt
RKreport[0]_S_07032013_212750.txt
RogueKiller V8.6.2 [Jul 3 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : hxxp://www.adlice.com/forum/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Andrej [Práva Správcu]
Režim : Odebrať -- Dátum : 07/03/2013 21:24:48
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 1 ¤¤¤
[SUSP PATH] RogueKiller.exe -- C:\Users\Andrej\Desktop\RogueKiller.exe [-] -> ZASTAVENÉ [TermProc]
¤¤¤ Záznamy Registrov : 13 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZANÉ
[HJ POL] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZANÉ
[HJ POL] HKLM\[...]\System : EnableLUA (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowVideos (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowHelp (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> NAHRADENÉ (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> NAHRADENÉ (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRADENÉ (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)
¤¤¤ naplánované úlohy : 0 ¤¤¤
¤¤¤ spustenie položky : 0 ¤¤¤
¤¤¤ webové prehliadače : 0 ¤¤¤
¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤
¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤
[Address] IRP[IRP_MJ_CREATE] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_CLOSE] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_DEVICE_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_POWER] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_SYSTEM_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_PNP] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 localhost
¤¤¤ Kontrola MBR: ¤¤¤
+++++ PhysicalDrive0: SAMSUNG HD154UI SCSI Disk Device +++++
--- User ---
[MBR] 753afdecbdfd67a2ee348c2ca9a5187f
[BSP] 362659e2bcb65deb3e19e0e2da6d7546 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 470003 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 962568192 | Size: 29995 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 1023999165 | Size: 930789 Mo
User = LL1 ... OK!
Error reading LL2 MBR!
Dokončené : << RKreport[0]_D_07032013_212448.txt >>
RKreport[0]_S_07032013_202322.txt;RKreport[0]_S_07032013_212443.txt
Druhý LOG
RogueKiller V8.6.2 [Jul 3 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : hxxp://www.adlice.com/forum/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Andrej [Práva Správcu]
Režim : Oprava HOSTS -- Dátum : 07/03/2013 21:27:56
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 1 ¤¤¤
[SUSP PATH] RogueKiller.exe -- C:\Users\Andrej\Desktop\RogueKiller.exe [-] -> ZASTAVENÉ [TermProc]
¤¤¤ Záznamy Registrov : 0 ¤¤¤
¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 localhost
¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost
Dokončené : << RKreport[0]_H_07032013_212756.txt >>
RKreport[0]_D_07032013_212448.txt;RKreport[0]_S_07032013_202322.txt;RKreport[0]_S_07032013_212443.txt
RKreport[0]_S_07032013_212750.txt
Re: Pomalý PC
Dejte novy log z RSIT
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
-
kniightfiight
Re: Pomalý PC
Logfile of random's system information tool 1.09 (written by random/random)
Run by Andrej at 2013-07-04 09:33:41
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 383 GB (81%) free of 470 GB
Total RAM: 3071 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:33:58, on 4. 7. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe
C:\Program Files\Sticky Password\stpass.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Andrej\Desktop\RSIT.exe
C:\Program Files\trend micro\Andrej.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SMTTB2009 - -{FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O4 - HKLM\..\Run: [Bdagent] "C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe"
O4 - HKCU\..\Run: [Xfire] "D:\Andrej\Stahovanie\Xfire\Xfire.exe" -minimize
O4 - HKCU\..\Run: [StickyPassword] "C:\Program Files\Sticky Password\stpass.exe" /autorunned
O8 - Extra context menu item: Sticky Password - res://C:\Program Files\Sticky Password\spIEBho.dll/616
O9 - Extra button: Sothink SWF Catcher - -{E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - -{E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: mental ray 3.9 Satellite for Autodesk 3ds Max 2012 32-bit - English 32-bit (mi-raysat_3dsmax2012_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Unknown owner - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (file missing)
O23 - Service: SafeBox - Bitdefender - C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Unknown owner - C:\Program Files\Skype\Updater\Updater.exe (file missing)
O23 - Service: Bitdefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe
O23 - Service: Bitdefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe
--
End of file - 4758 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GlaryInitialize.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003UA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default
prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.sk"
prefs.js - "extensions.enabledItems" - "{35106bca-6c78-48c7-ac28-56df30b51d2a}:1.3.8, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.3, {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:5.0.1, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {70df8d13-bdd3-448e-944c-efde21b77161}:3.3.3.2, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, jqs@sun.com:1.0, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, artur.dubovoy@gmail.com:2.0.21, engine@conduit.com:3.3.3.2, plugin2@gameplaylabs.com:2.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "chrome://browser-region/locale/region.properties"
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\plugins\
nppdf32.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\-{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Bdagent"=C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe [2013-04-24 1611784]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Xfire"=D:\Andrej\Stahovanie\Xfire\Xfire.exe [2013-03-21 3560832]
"StickyPassword"=C:\Program Files\Sticky Password\stpass.exe [2013-06-19 8136504]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2013-04-05 204800]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=1
"SynchronousUserGroupPolicy"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoInstrumentation"=1
"NoDrives"=0
"NoDriveTypeAutoRun"=145
"NoAutoTrayNotify"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.XFR1"=xfcodec.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
"VIDC.XVID"=xvidvfw.dll
"wave4"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"wave8"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave5"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer7"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - C:\Windows\NOTEPAD.EXE %1
======List of files/folders created in the last 1 month======
2013-07-04 09:33:41 ----D---- C:\rsit
2013-07-03 19:57:48 ----A---- C:\bdlog.txt
2013-07-03 19:49:52 ----A---- C:\Windows\system32\drivers\bdvedisk.sys
2013-07-03 19:49:51 ----A---- C:\Windows\system32\drivers\bdsandbox.sys
2013-07-03 19:49:51 ----A---- C:\Windows\system32\drivers\BdfNdisf6.sys
2013-07-03 19:49:39 ----A---- C:\Windows\system32\drivers\avckf.sys
2013-07-03 19:49:38 ----A---- C:\Windows\system32\drivers\avc3.sys
2013-07-03 19:49:17 ----D---- C:\Users\Andrej\AppData\Roaming\Bitdefender
2013-07-03 19:49:14 ----D---- C:\ProgramData\Bitdefender
2013-07-03 19:47:31 ----A---- C:\Windows\system32\drivers\gzflt.sys
2013-07-03 19:47:28 ----D---- C:\Program Files\Bitdefender
2013-07-03 19:47:28 ----A---- C:\Windows\system32\drivers\trufos.sys
2013-07-03 19:31:00 ----D---- C:\Program Files\Revo Group
2013-07-03 19:20:25 ----N---- C:\bootsqm.dat
2013-07-03 18:36:13 ----D---- C:\Program Files\Share Rapid Uploader
2013-07-03 10:55:39 ----D---- C:\Program Files\Mozilla Firefox
2013-07-02 17:49:13 ----D---- C:\Users\Andrej\AppData\Roaming\Malwarebytes
2013-07-02 17:48:59 ----D---- C:\ProgramData\Malwarebytes
2013-07-02 16:54:06 ----D---- C:\Program Files\trend micro
2013-07-02 16:19:20 ----H---- C:\ProgramData\saopts.dat
2013-06-28 12:02:29 ----D---- C:\Program Files\PSPad editor
2013-06-26 23:56:57 ----D---- C:\ProgramData\BDLogging
2013-06-26 23:56:48 ----A---- C:\Windows\capicom.dll
2013-06-26 23:56:39 ----A---- C:\Windows\system32\drivers\avchv.sys
2013-06-26 23:49:44 ----D---- C:\Users\Andrej\AppData\Roaming\QuickScan
2013-06-26 23:48:46 ----D---- C:\Program Files\Common Files\Bitdefender
2013-06-24 19:20:46 ----D---- C:\Users\Andrej\AppData\Roaming\PSpad
2013-06-24 13:57:02 ----D---- C:\Users\Andrej\AppData\Roaming\Lamantine
2013-06-24 13:56:08 ----D---- C:\Program Files\Sticky Password
2013-06-17 14:57:01 ----D---- C:\Program Files\Common Files\Macrovision Shared
2013-06-14 14:09:31 ----D---- C:\Program Files\Sony
2013-06-14 14:03:07 ----D---- C:\Program Files\Common Files\SourceTec
2013-06-12 20:48:55 ----A---- C:\Windows\system32\urlmon.dll
2013-06-12 20:48:55 ----A---- C:\Windows\system32\ieui.dll
2013-06-12 20:48:53 ----A---- C:\Windows\system32\ieframe.dll
2013-06-12 20:48:52 ----A---- C:\Windows\system32\mshtml.dll
2013-06-12 20:48:52 ----A---- C:\Windows\system32\iertutil.dll
2013-06-12 20:46:01 ----A---- C:\Windows\system32\jscript.dll
2013-06-12 20:45:59 ----A---- C:\Windows\system32\jsproxy.dll
2013-06-12 20:45:59 ----A---- C:\Windows\system32\jscript9.dll
2013-06-12 20:45:59 ----A---- C:\Windows\system32\iesetup.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-12 20:45:58 ----A---- C:\Windows\system32\msfeeds.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\iesysprep.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\iernonce.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\ie4uinit.exe
2013-06-12 20:45:55 ----A---- C:\Windows\system32\wininet.dll
2013-06-12 10:10:41 ----A---- C:\Windows\system32\d3d11.dll
2013-06-12 10:10:35 ----A---- C:\Windows\system32\cryptdlg.dll
2013-06-12 10:10:32 ----A---- C:\Windows\system32\win32spl.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\cryptsvc.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\cryptnet.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\crypt32.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\certutil.exe
2013-06-12 10:10:30 ----A---- C:\Windows\system32\certenc.dll
2013-06-12 10:10:25 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-06-12 10:10:24 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-06-12 10:10:24 ----A---- C:\Windows\system32\ntkrnlpa.exe
2013-06-12 10:10:22 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-06-11 10:31:30 ----D---- C:\ProgramData\EA Core
2013-06-11 10:29:38 ----D---- C:\ProgramData\Electronic Arts
2013-06-06 19:46:52 ----D---- C:\Program Files\Actual Installer
======List of files/folders modified in the last 1 month======
2013-07-04 09:33:44 ----D---- C:\Windows\temp
2013-07-04 09:25:29 ----D---- C:\Windows\system32\config
2013-07-04 09:22:29 ----D---- C:\Windows\system32\drivers\etc
2013-07-03 22:46:37 ----D---- C:\Windows\system32\drivers
2013-07-03 22:46:37 ----D---- C:\Program Files
2013-07-03 21:28:54 ----D---- C:\Windows\System32
2013-07-03 21:21:00 ----D---- C:\Users\Andrej\AppData\Roaming\Xfire
2013-07-03 21:20:20 ----D---- C:\Windows\Prefetch
2013-07-03 21:10:19 ----SHD---- C:\System Volume Information
2013-07-03 21:10:14 ----HD---- C:\Program Files\InstallShield Installation Information
2013-07-03 19:58:57 ----A---- C:\Windows\ntbtlog.txt
2013-07-03 19:52:33 ----HD---- C:\ProgramData
2013-07-03 19:51:01 ----D---- C:\Windows\inf
2013-07-03 19:50:58 ----D---- C:\Windows\system32\DriverStore
2013-07-03 19:44:50 ----SHD---- C:\Windows\Installer
2013-07-03 19:44:49 ----D---- C:\Program Files\Adobe
2013-07-03 19:41:25 ----D---- C:\Windows\system32\catroot
2013-07-03 19:35:43 ----D---- C:\ProgramData\SplitMediaLabs
2013-07-03 19:12:30 ----D---- C:\Boot
2013-07-03 18:52:23 ----RD---- C:\Program Files\Skype
2013-07-03 18:50:10 ----D---- C:\Program Files\StreamingStar
2013-07-03 18:48:02 ----D---- C:\Program Files\Common Files
2013-07-03 18:46:48 ----D---- C:\Program Files\Java
2013-07-03 14:58:40 ----RD---- C:\Users
2013-07-02 23:12:58 ----D---- C:\Users\Andrej\AppData\Roaming\Macromedia
2013-07-02 20:30:37 ----D---- C:\Windows\system32\catroot2
2013-07-02 16:52:31 ----D---- C:\Windows\Help
2013-07-02 16:45:35 ----HD---- C:\Windows\system32\GroupPolicy
2013-07-02 16:32:45 ----AD---- C:\Windows
2013-06-30 16:21:58 ----D---- C:\Users\Andrej\AppData\Roaming\Skype
2013-06-28 20:16:34 ----D---- C:\ProgramData\Skype
2013-06-28 17:57:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-28 12:56:09 ----D---- C:\Windows\Microsoft.NET
2013-06-28 12:55:53 ----RSD---- C:\Windows\assembly
2013-06-28 09:13:35 ----D---- C:\Program Files\Autodesk
2013-06-28 09:12:32 ----D---- C:\Program Files\Common Files\Autodesk Shared
2013-06-28 09:11:08 ----D---- C:\ProgramData\Autodesk
2013-06-27 21:15:42 ----D---- C:\ProgramData\Xfire
2013-06-27 00:34:52 ----D---- C:\Windows\winsxs
2013-06-27 00:11:28 ----D---- C:\Users\Andrej\AppData\Roaming\GlarySoft
2013-06-24 19:32:32 ----D---- C:\Program Files\JDownloader
2013-06-21 13:55:26 ----D---- C:\$RECYCLE.BIN
2013-06-20 21:51:20 ----D---- C:\Windows\Tasks
2013-06-20 21:51:20 ----D---- C:\Windows\system32\wfp
2013-06-20 21:51:20 ----D---- C:\Program Files\Internet Explorer
2013-06-20 21:51:19 ----D---- C:\Windows\system32\wbem
2013-06-20 21:51:19 ----D---- C:\Windows\system32\CodeIntegrity
2013-06-20 21:51:18 ----D---- C:\Users\Andrej\AppData\Roaming\GHISLER
2013-06-20 21:51:17 ----D---- C:\ProgramData\FLEXnet
2013-06-20 21:51:17 ----D---- C:\Program Files\Glary Utilities
2013-06-20 21:51:14 ----D---- C:\Windows\registration
2013-06-20 21:51:05 ----D---- C:\Program Files\Common Files\AVSMedia
2013-06-16 12:23:42 ----D---- C:\Windows\rescache
2013-06-14 14:08:49 ----D---- C:\Users\Andrej\AppData\Roaming\Sony
2013-06-12 20:51:41 ----D---- C:\Windows\system32\sk-SK
2013-06-12 20:51:41 ----D---- C:\Windows\system32\en-US
2013-06-12 20:50:25 ----D---- C:\ProgramData\Microsoft Help
2013-06-12 20:46:51 ----A---- C:\Windows\system32\MRT.exe
2013-06-10 10:11:19 ----A---- C:\Windows\system32\npdeployJava1.dll
2013-06-10 10:11:18 ----A---- C:\Windows\system32\deployJava1.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 avc3;avc3; C:\Windows\system32\DRIVERS\avc3.sys [2013-04-17 633344]
R0 gzflt;gzflt; C:\Windows\system32\DRIVERS\gzflt.sys [2012-10-04 162976]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-12-07 436792]
R0 trufos;trufos; C:\Windows\system32\DRIVERS\trufos.sys [2013-05-28 355744]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver; \??\c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [2013-02-22 78144]
R1 bdfwfpf;bdfwfpf; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [2011-11-14 90704]
R1 bdselfpr;bdselfpr; \??\C:\Program Files\Bitdefender\Bitdefender 2013\bdselfpr.sys [2012-10-02 134136]
R1 BDVEDISK;BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [2012-04-17 72704]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 avckf;avckf; C:\Windows\system32\DRIVERS\avckf.sys [2013-07-03 487048]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-12-13 3921448]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2013-02-18 149352]
R3 NVNET;NVIDIA nForce 10/100 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 a52d0k68;a52d0k68; C:\Windows\system32\drivers\a52d0k68.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BDSandBox;BDSandBox; \??\C:\Windows\system32\drivers\bdsandbox.sys [2012-11-12 66392]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2011-12-16 14656]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35088]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S4 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\AVGIDSShim.Sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 mi-raysat_3dsmax2012_32;mental ray 3.9 Satellite for Autodesk 3ds Max 2012 32-bit - English 32-bit; C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe [2011-02-23 86016]
R2 SafeBox;SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [2012-06-25 82824]
R2 UPDATESRV;Bitdefender Desktop Update Service; C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe [2013-02-26 55984]
R2 VSSERV;Bitdefender Virus Shield; C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe [2013-05-27 1345008]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-06-17 1044816]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-08 1343400]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-19 256904]
S4 BdDesktopParental;Bitdefender Desktop Parental Control; C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [2013-02-26 62688]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-18 639776]
S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-26 1260320]
S4 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2010-06-25 117264]
S4 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
S4 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
-----------------EOF-----------------
Run by Andrej at 2013-07-04 09:33:41
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 383 GB (81%) free of 470 GB
Total RAM: 3071 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:33:58, on 4. 7. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe
C:\Program Files\Sticky Password\stpass.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Andrej\Desktop\RSIT.exe
C:\Program Files\trend micro\Andrej.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SMTTB2009 - -{FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O4 - HKLM\..\Run: [Bdagent] "C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe"
O4 - HKCU\..\Run: [Xfire] "D:\Andrej\Stahovanie\Xfire\Xfire.exe" -minimize
O4 - HKCU\..\Run: [StickyPassword] "C:\Program Files\Sticky Password\stpass.exe" /autorunned
O8 - Extra context menu item: Sticky Password - res://C:\Program Files\Sticky Password\spIEBho.dll/616
O9 - Extra button: Sothink SWF Catcher - -{E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - -{E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: mental ray 3.9 Satellite for Autodesk 3ds Max 2012 32-bit - English 32-bit (mi-raysat_3dsmax2012_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Unknown owner - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (file missing)
O23 - Service: SafeBox - Bitdefender - C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Unknown owner - C:\Program Files\Skype\Updater\Updater.exe (file missing)
O23 - Service: Bitdefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe
O23 - Service: Bitdefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe
--
End of file - 4758 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GlaryInitialize.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003UA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default
prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.sk"
prefs.js - "extensions.enabledItems" - "{35106bca-6c78-48c7-ac28-56df30b51d2a}:1.3.8, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.3, {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:5.0.1, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {70df8d13-bdd3-448e-944c-efde21b77161}:3.3.3.2, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, jqs@sun.com:1.0, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, artur.dubovoy@gmail.com:2.0.21, engine@conduit.com:3.3.3.2, plugin2@gameplaylabs.com:2.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "chrome://browser-region/locale/region.properties"
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\plugins\
nppdf32.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\-{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Bdagent"=C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe [2013-04-24 1611784]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Xfire"=D:\Andrej\Stahovanie\Xfire\Xfire.exe [2013-03-21 3560832]
"StickyPassword"=C:\Program Files\Sticky Password\stpass.exe [2013-06-19 8136504]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2013-04-05 204800]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=1
"SynchronousUserGroupPolicy"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoInstrumentation"=1
"NoDrives"=0
"NoDriveTypeAutoRun"=145
"NoAutoTrayNotify"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.XFR1"=xfcodec.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
"VIDC.XVID"=xvidvfw.dll
"wave4"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"wave8"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave5"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer7"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - C:\Windows\NOTEPAD.EXE %1
======List of files/folders created in the last 1 month======
2013-07-04 09:33:41 ----D---- C:\rsit
2013-07-03 19:57:48 ----A---- C:\bdlog.txt
2013-07-03 19:49:52 ----A---- C:\Windows\system32\drivers\bdvedisk.sys
2013-07-03 19:49:51 ----A---- C:\Windows\system32\drivers\bdsandbox.sys
2013-07-03 19:49:51 ----A---- C:\Windows\system32\drivers\BdfNdisf6.sys
2013-07-03 19:49:39 ----A---- C:\Windows\system32\drivers\avckf.sys
2013-07-03 19:49:38 ----A---- C:\Windows\system32\drivers\avc3.sys
2013-07-03 19:49:17 ----D---- C:\Users\Andrej\AppData\Roaming\Bitdefender
2013-07-03 19:49:14 ----D---- C:\ProgramData\Bitdefender
2013-07-03 19:47:31 ----A---- C:\Windows\system32\drivers\gzflt.sys
2013-07-03 19:47:28 ----D---- C:\Program Files\Bitdefender
2013-07-03 19:47:28 ----A---- C:\Windows\system32\drivers\trufos.sys
2013-07-03 19:31:00 ----D---- C:\Program Files\Revo Group
2013-07-03 19:20:25 ----N---- C:\bootsqm.dat
2013-07-03 18:36:13 ----D---- C:\Program Files\Share Rapid Uploader
2013-07-03 10:55:39 ----D---- C:\Program Files\Mozilla Firefox
2013-07-02 17:49:13 ----D---- C:\Users\Andrej\AppData\Roaming\Malwarebytes
2013-07-02 17:48:59 ----D---- C:\ProgramData\Malwarebytes
2013-07-02 16:54:06 ----D---- C:\Program Files\trend micro
2013-07-02 16:19:20 ----H---- C:\ProgramData\saopts.dat
2013-06-28 12:02:29 ----D---- C:\Program Files\PSPad editor
2013-06-26 23:56:57 ----D---- C:\ProgramData\BDLogging
2013-06-26 23:56:48 ----A---- C:\Windows\capicom.dll
2013-06-26 23:56:39 ----A---- C:\Windows\system32\drivers\avchv.sys
2013-06-26 23:49:44 ----D---- C:\Users\Andrej\AppData\Roaming\QuickScan
2013-06-26 23:48:46 ----D---- C:\Program Files\Common Files\Bitdefender
2013-06-24 19:20:46 ----D---- C:\Users\Andrej\AppData\Roaming\PSpad
2013-06-24 13:57:02 ----D---- C:\Users\Andrej\AppData\Roaming\Lamantine
2013-06-24 13:56:08 ----D---- C:\Program Files\Sticky Password
2013-06-17 14:57:01 ----D---- C:\Program Files\Common Files\Macrovision Shared
2013-06-14 14:09:31 ----D---- C:\Program Files\Sony
2013-06-14 14:03:07 ----D---- C:\Program Files\Common Files\SourceTec
2013-06-12 20:48:55 ----A---- C:\Windows\system32\urlmon.dll
2013-06-12 20:48:55 ----A---- C:\Windows\system32\ieui.dll
2013-06-12 20:48:53 ----A---- C:\Windows\system32\ieframe.dll
2013-06-12 20:48:52 ----A---- C:\Windows\system32\mshtml.dll
2013-06-12 20:48:52 ----A---- C:\Windows\system32\iertutil.dll
2013-06-12 20:46:01 ----A---- C:\Windows\system32\jscript.dll
2013-06-12 20:45:59 ----A---- C:\Windows\system32\jsproxy.dll
2013-06-12 20:45:59 ----A---- C:\Windows\system32\jscript9.dll
2013-06-12 20:45:59 ----A---- C:\Windows\system32\iesetup.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-12 20:45:58 ----A---- C:\Windows\system32\msfeeds.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\iesysprep.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\iernonce.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\ie4uinit.exe
2013-06-12 20:45:55 ----A---- C:\Windows\system32\wininet.dll
2013-06-12 10:10:41 ----A---- C:\Windows\system32\d3d11.dll
2013-06-12 10:10:35 ----A---- C:\Windows\system32\cryptdlg.dll
2013-06-12 10:10:32 ----A---- C:\Windows\system32\win32spl.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\cryptsvc.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\cryptnet.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\crypt32.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\certutil.exe
2013-06-12 10:10:30 ----A---- C:\Windows\system32\certenc.dll
2013-06-12 10:10:25 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-06-12 10:10:24 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-06-12 10:10:24 ----A---- C:\Windows\system32\ntkrnlpa.exe
2013-06-12 10:10:22 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-06-11 10:31:30 ----D---- C:\ProgramData\EA Core
2013-06-11 10:29:38 ----D---- C:\ProgramData\Electronic Arts
2013-06-06 19:46:52 ----D---- C:\Program Files\Actual Installer
======List of files/folders modified in the last 1 month======
2013-07-04 09:33:44 ----D---- C:\Windows\temp
2013-07-04 09:25:29 ----D---- C:\Windows\system32\config
2013-07-04 09:22:29 ----D---- C:\Windows\system32\drivers\etc
2013-07-03 22:46:37 ----D---- C:\Windows\system32\drivers
2013-07-03 22:46:37 ----D---- C:\Program Files
2013-07-03 21:28:54 ----D---- C:\Windows\System32
2013-07-03 21:21:00 ----D---- C:\Users\Andrej\AppData\Roaming\Xfire
2013-07-03 21:20:20 ----D---- C:\Windows\Prefetch
2013-07-03 21:10:19 ----SHD---- C:\System Volume Information
2013-07-03 21:10:14 ----HD---- C:\Program Files\InstallShield Installation Information
2013-07-03 19:58:57 ----A---- C:\Windows\ntbtlog.txt
2013-07-03 19:52:33 ----HD---- C:\ProgramData
2013-07-03 19:51:01 ----D---- C:\Windows\inf
2013-07-03 19:50:58 ----D---- C:\Windows\system32\DriverStore
2013-07-03 19:44:50 ----SHD---- C:\Windows\Installer
2013-07-03 19:44:49 ----D---- C:\Program Files\Adobe
2013-07-03 19:41:25 ----D---- C:\Windows\system32\catroot
2013-07-03 19:35:43 ----D---- C:\ProgramData\SplitMediaLabs
2013-07-03 19:12:30 ----D---- C:\Boot
2013-07-03 18:52:23 ----RD---- C:\Program Files\Skype
2013-07-03 18:50:10 ----D---- C:\Program Files\StreamingStar
2013-07-03 18:48:02 ----D---- C:\Program Files\Common Files
2013-07-03 18:46:48 ----D---- C:\Program Files\Java
2013-07-03 14:58:40 ----RD---- C:\Users
2013-07-02 23:12:58 ----D---- C:\Users\Andrej\AppData\Roaming\Macromedia
2013-07-02 20:30:37 ----D---- C:\Windows\system32\catroot2
2013-07-02 16:52:31 ----D---- C:\Windows\Help
2013-07-02 16:45:35 ----HD---- C:\Windows\system32\GroupPolicy
2013-07-02 16:32:45 ----AD---- C:\Windows
2013-06-30 16:21:58 ----D---- C:\Users\Andrej\AppData\Roaming\Skype
2013-06-28 20:16:34 ----D---- C:\ProgramData\Skype
2013-06-28 17:57:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-28 12:56:09 ----D---- C:\Windows\Microsoft.NET
2013-06-28 12:55:53 ----RSD---- C:\Windows\assembly
2013-06-28 09:13:35 ----D---- C:\Program Files\Autodesk
2013-06-28 09:12:32 ----D---- C:\Program Files\Common Files\Autodesk Shared
2013-06-28 09:11:08 ----D---- C:\ProgramData\Autodesk
2013-06-27 21:15:42 ----D---- C:\ProgramData\Xfire
2013-06-27 00:34:52 ----D---- C:\Windows\winsxs
2013-06-27 00:11:28 ----D---- C:\Users\Andrej\AppData\Roaming\GlarySoft
2013-06-24 19:32:32 ----D---- C:\Program Files\JDownloader
2013-06-21 13:55:26 ----D---- C:\$RECYCLE.BIN
2013-06-20 21:51:20 ----D---- C:\Windows\Tasks
2013-06-20 21:51:20 ----D---- C:\Windows\system32\wfp
2013-06-20 21:51:20 ----D---- C:\Program Files\Internet Explorer
2013-06-20 21:51:19 ----D---- C:\Windows\system32\wbem
2013-06-20 21:51:19 ----D---- C:\Windows\system32\CodeIntegrity
2013-06-20 21:51:18 ----D---- C:\Users\Andrej\AppData\Roaming\GHISLER
2013-06-20 21:51:17 ----D---- C:\ProgramData\FLEXnet
2013-06-20 21:51:17 ----D---- C:\Program Files\Glary Utilities
2013-06-20 21:51:14 ----D---- C:\Windows\registration
2013-06-20 21:51:05 ----D---- C:\Program Files\Common Files\AVSMedia
2013-06-16 12:23:42 ----D---- C:\Windows\rescache
2013-06-14 14:08:49 ----D---- C:\Users\Andrej\AppData\Roaming\Sony
2013-06-12 20:51:41 ----D---- C:\Windows\system32\sk-SK
2013-06-12 20:51:41 ----D---- C:\Windows\system32\en-US
2013-06-12 20:50:25 ----D---- C:\ProgramData\Microsoft Help
2013-06-12 20:46:51 ----A---- C:\Windows\system32\MRT.exe
2013-06-10 10:11:19 ----A---- C:\Windows\system32\npdeployJava1.dll
2013-06-10 10:11:18 ----A---- C:\Windows\system32\deployJava1.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 avc3;avc3; C:\Windows\system32\DRIVERS\avc3.sys [2013-04-17 633344]
R0 gzflt;gzflt; C:\Windows\system32\DRIVERS\gzflt.sys [2012-10-04 162976]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-12-07 436792]
R0 trufos;trufos; C:\Windows\system32\DRIVERS\trufos.sys [2013-05-28 355744]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver; \??\c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [2013-02-22 78144]
R1 bdfwfpf;bdfwfpf; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [2011-11-14 90704]
R1 bdselfpr;bdselfpr; \??\C:\Program Files\Bitdefender\Bitdefender 2013\bdselfpr.sys [2012-10-02 134136]
R1 BDVEDISK;BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [2012-04-17 72704]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 avckf;avckf; C:\Windows\system32\DRIVERS\avckf.sys [2013-07-03 487048]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-12-13 3921448]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2013-02-18 149352]
R3 NVNET;NVIDIA nForce 10/100 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 a52d0k68;a52d0k68; C:\Windows\system32\drivers\a52d0k68.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BDSandBox;BDSandBox; \??\C:\Windows\system32\drivers\bdsandbox.sys [2012-11-12 66392]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2011-12-16 14656]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35088]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S4 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\AVGIDSShim.Sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 mi-raysat_3dsmax2012_32;mental ray 3.9 Satellite for Autodesk 3ds Max 2012 32-bit - English 32-bit; C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe [2011-02-23 86016]
R2 SafeBox;SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [2012-06-25 82824]
R2 UPDATESRV;Bitdefender Desktop Update Service; C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe [2013-02-26 55984]
R2 VSSERV;Bitdefender Virus Shield; C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe [2013-05-27 1345008]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-06-17 1044816]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-08 1343400]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-19 256904]
S4 BdDesktopParental;Bitdefender Desktop Parental Control; C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [2013-02-26 62688]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-18 639776]
S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-26 1260320]
S4 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2010-06-25 117264]
S4 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
S4 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
-----------------EOF-----------------
Re: Pomalý PC
Vypnete antivir, at nebrani programu v praci!
Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe a ulozte nejlepe na plochu.Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Do leveho okna zkopirujte tento skript (vcetne te dvojtecky pred slovem commands)
Kód: Vybrat vše
:commands
[EMPTYTEMP]
[EMPTYFLASH]
[RESETHOSTS]
[Purity]
:services
AVGIDSShim
SkypeUpdate
:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GlaryInitialize.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003UA.job
:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\-{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Po restartu sem dejte log, ktery na vas vyskoci, nebo bude zde C:\_OTM\MovedFiles\xxxxxxxx_xxxxxx (misto tech x budou cisla, predstavujici datum a cas spusteni)
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
-
kniightfiight
Re: Pomalý PC
All processes killed
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Andrej
->Temp folder emptied: 32176612 bytes
->Temporary Internet Files folder emptied: 206409768 bytes
->Java cache emptied: 367991 bytes
->FireFox cache emptied: 97382951 bytes
->Flash cache emptied: 1999 bytes
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 57472 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Lukáš
->Temp folder emptied: 75636327 bytes
->Temporary Internet Files folder emptied: 62090070 bytes
->Java cache emptied: 377490 bytes
->FireFox cache emptied: 440586198 bytes
->Opera cache emptied: 121833 bytes
->Flash cache emptied: 6233 bytes
User: Public
->Temp folder emptied: 0 bytes
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56466 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 537893 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 98226 bytes
RecycleBin emptied: 13175922216 bytes
Total Files Cleaned = 13 439,00 mb
[EMPTYFLASH]
User: All Users
User: Andrej
->Flash cache emptied: 0 bytes
User: Default
->Flash cache emptied: 0 bytes
User: Default User
->Flash cache emptied: 0 bytes
User: Lukáš
->Flash cache emptied: 0 bytes
User: Public
User: UpdatusUser
->Flash cache emptied: 0 bytes
Total Flash Files Cleaned = 0,00 mb
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
========== SERVICES/DRIVERS ==========
Service AVGIDSShim stopped successfully!
Service AVGIDSShim deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GlaryInitialize.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003Core.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003UA.job moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\-{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
OTM by OldTimer - Version 3.1.21.0 log created on 07042013_100832
Files moved on Reboot...
File C:\Windows\temp\~bdC020.tmp not found!
Registry entries deleted on Reboot...
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Andrej
->Temp folder emptied: 32176612 bytes
->Temporary Internet Files folder emptied: 206409768 bytes
->Java cache emptied: 367991 bytes
->FireFox cache emptied: 97382951 bytes
->Flash cache emptied: 1999 bytes
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 57472 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Lukáš
->Temp folder emptied: 75636327 bytes
->Temporary Internet Files folder emptied: 62090070 bytes
->Java cache emptied: 377490 bytes
->FireFox cache emptied: 440586198 bytes
->Opera cache emptied: 121833 bytes
->Flash cache emptied: 6233 bytes
User: Public
->Temp folder emptied: 0 bytes
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56466 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 537893 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 98226 bytes
RecycleBin emptied: 13175922216 bytes
Total Files Cleaned = 13 439,00 mb
[EMPTYFLASH]
User: All Users
User: Andrej
->Flash cache emptied: 0 bytes
User: Default
->Flash cache emptied: 0 bytes
User: Default User
->Flash cache emptied: 0 bytes
User: Lukáš
->Flash cache emptied: 0 bytes
User: Public
User: UpdatusUser
->Flash cache emptied: 0 bytes
Total Flash Files Cleaned = 0,00 mb
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
========== SERVICES/DRIVERS ==========
Service AVGIDSShim stopped successfully!
Service AVGIDSShim deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GlaryInitialize.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003Core.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003UA.job moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\-{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
OTM by OldTimer - Version 3.1.21.0 log created on 07042013_100832
Files moved on Reboot...
File C:\Windows\temp\~bdC020.tmp not found!
Registry entries deleted on Reboot...
Re: Pomalý PC
Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce) vyosek píše:
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.
Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustteKliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat
Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
Defragmentujte disk(y)Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.
Pak napiste, jak je na tom pc.Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
-
kniightfiight
Re: Pomalý PC
Tak teda, idem na to. Este som sa chcel spýtat, ci je dobré, kúpiť si Perfect Disk Pro. (čítal som o tom na top10reviews že je to jeden z najlepších programov na defragmentáciu a poskytuje Real Time defragmentáciu a OptiWrite, tak by sa mi to tu nefragmentovalo) Je to pre počítač dobré alebo to bude iba zaberať RAM a miesto na disku?
Vďaka moc
Vďaka moc
Re: Pomalý PC
Nemam to vyzkouseno na vlastnim pc, takze nemuzu posoudit jeho schopnosti. Ale muj nazor je, ze pro bezneho uzivatele bohate staci napriklad ten defraggler. Neutracel bych penize. Ale samozrejme je to jen muj nazor. Mozna, ze kdybych to vyzkousel, zmenil bych ho 
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
-
kniightfiight
Re: Pomalý PC
Jasne, vďaka. Ja som si ho zatiaľ stiahol a skúsim......
Inak ja mám kúpené už asi rok Glary Utilities Pro. Je to lepšie než CCleaner alebo nie? (mám tam aktualizácie zadarmo a ďalšie subprogramy v tom)
Inak ja mám kúpené už asi rok Glary Utilities Pro. Je to lepšie než CCleaner alebo nie? (mám tam aktualizácie zadarmo a ďalšie subprogramy v tom)
Re: Pomalý PC
Na to mam v podstate stejnou odpoved. Co nemam vyzkousene na vlastnim pc, pripadne nejakeho znameho, nehodnotim. Mi staci CCleaner. System slape jako hodinky 
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
-
kniightfiight
Re: Pomalý PC
Ok, tam asi jedno z toho odinštalujem, ešte sa teda rozhodnem. Spravil som defragmentáciu disku C a ide to o dosť rýchlejšie. Eśte spravím disku D a bude.... Inak, ak by som okolo 400GB súborov (inštalácie hier, programov, fotky, filmy) na disku D premiestnil na externý HDD (ktorý si plánujem kúpiť), zrýchli to PC o dosť či ani nie?
Veľmi pekne ďakujem, PC je už skoro ako nové
Veľmi pekne ďakujem, PC je už skoro ako nové
Re: Pomalý PC
No pokud uz to mate koupene a jste s tim spokojeny, neni treba to odinstalovavat 
Myslim, ze nejak velky rozdil to nebude. Decko nemate jako systemovy disk, takze by to nejak extra velky vliv mit nemelo. Ale u pc je mozne vsechno
Kdyz ho stejne planujete koupit, vyzkousejte to a uvidite sam.
Jsem rad, ze se to zlepsilo. Nemate zac
31.7.
http://forum.viry.cz/viewtopic.php?f=12&t=123975
Myslim, ze nejak velky rozdil to nebude. Decko nemate jako systemovy disk, takze by to nejak extra velky vliv mit nemelo. Ale u pc je mozne vsechno
Kdyz ho stejne planujete koupit, vyzkousejte to a uvidite sam.Jsem rad, ze se to zlepsilo. Nemate zac
31.7.
http://forum.viry.cz/viewtopic.php?f=12&t=123975Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Přispějete na provoz fóra?