Stránka 2 z 3

Re: prosím o kontrolu

Napsal: 27 bře 2010 10:32
od marianek
takže bohužel to nepomohlo

aktualizace hodili toto

Aktualizace pro .NET Framework 3.5 Service Pack 1 pro .NET Framework Assistant 1.0 x86 (KB963707)
Aktualizace Microsoft .NET Framework 3.5 Service Pack 1 a .NET Framework 3.5 Family Update pro verze rozhraní .NET 2.0 až 3.5 (KB951847) x86
Aktualizace zabezpečení rozhraní Microsoft .NET Framework 2.0 Service Pack 2 pro systémy Windows 2000, Windows Server 2003 a Windows XP (KB974417)

se nezdařili

Re: prosím o kontrolu

Napsal: 27 bře 2010 10:41
od Caroprd111
A děláte to přes instalátor nebo přes automatické aktualizace :???:

Re: prosím o kontrolu

Napsal: 27 bře 2010 10:52
od marianek
dělá to přes obojí

Re: prosím o kontrolu

Napsal: 27 bře 2010 11:00
od Caroprd111
Zkuste pomocí: http://blogs.msdn.com/astebner/pages/8904493.aspx vyčistit PC a poté zkusit nainstalovat .NET Framework.

Re: prosím o kontrolu

Napsal: 27 bře 2010 11:36
od marianek
Caroprd111 píše:Zkuste pomocí: http://blogs.msdn.com/astebner/pages/8904493.aspx vyčistit PC a poté zkusit nainstalovat .NET Framework.

díky moc, jseš neskutečnej borec, pomohlo to!!!!!!!!!!!!!!!!!!!!

vlastně jsem od sebe jen 15km já bydlím ve Štěměchách

Re: prosím o kontrolu

Napsal: 27 bře 2010 11:49
od Caroprd111
Nemáte zač, já jsem konkrétně z Okříšek. :D


Obrázek Odinstalujte ComboFix přes:
Start >> Spustit, zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter


Obrázek Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe
  • Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
  • Po použití program vymažte. Pozor,antiviry ho mohou falešně označit za vir.


Obrázek Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe
  • Spusťte.
  • Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)


Obrázek Ještě poprosím o log z RSIT na závěrečnou kontrolu.

Re: prosím o kontrolu

Napsal: 27 bře 2010 12:19
od marianek
kdyz nabiha pc tak na dve vteriny se objevi ketry system chci spusti bud recovery nebo xp

nevis jak se toho zbavit?

Logfile of random's system information tool 1.06 (written by random/random)
Run by Marian2 at 2010-03-27 12:16:56
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 26 GB (65%) free of 40 GB
Total RAM: 1013 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:17:05, on 27.3.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\System Control Manager\MGSysCtrl.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\System Control Manager\MSIService.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Documents and Settings\Marian2\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Documents and Settings\Marian2\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marian2\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marian2\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marian2\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Marian2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1003181902\ICQToolBar.dll
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - (no file)
O2 - BHO: (no name) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
O3 - Toolbar: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - (no file)
O3 - Toolbar: (no name) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1003181902\ICQToolBar.dll
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [combofix] "C:\ComboFix\CF16498.cfxxe" /c "C:\ComboFix\C.bat"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Marian2\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.msi.com.tw
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Windows CardSpace (idsvc) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (file missing)
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files\System Control Manager\MSIService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 9529 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Úklid 1 kliknutím.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-08 61792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068}
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\1003181902\ICQToolBar.dll [2010-01-03 1019128]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-10-30 1019336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-11-16 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-11-16 173592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2009-11-16 141336]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-05-14 17881088]
"MGSysCtrl"=C:\Program Files\System Control Manager\MGSysCtrl.exe [2009-09-11 2064384]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-10-10 203264]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-03-09 2769336]
"combofix"=C:\ComboFix\CF16498.cfxxe /c C:\ComboFix\C.bat []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Documents and Settings\Marian2\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2010-03-17 133104]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2009-11-11 205312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2010-03-27 12:16:57 ----D---- C:\Program Files\trend micro
2010-03-27 12:16:56 ----D---- C:\rsit
2010-03-27 12:04:51 ----D---- C:\Program Files\DAEMON Tools Lite
2010-03-26 22:02:44 ----D---- C:\Program Files\CCleaner
2010-03-26 21:45:20 ----D---- C:\Program Files\Sunbelt Software
2010-03-26 21:34:43 ----SHD---- C:\RECYCLER
2010-03-26 20:14:53 ----D---- C:\Documents and Settings\Marian2\Data aplikací\Malwarebytes
2010-03-26 20:14:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-03-26 17:57:28 ----D---- C:\WINDOWS\temp
2010-03-26 17:51:46 ----A---- C:\Boot.bak
2010-03-26 17:51:41 ----RASHD---- C:\cmdcons
2010-03-26 08:36:16 ----D---- C:\WINDOWS\pss
2010-03-23 18:21:33 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-03-21 22:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-03-21 13:27:34 ----N---- C:\WINDOWS\system32\spmsg2.dll
2010-03-21 13:27:30 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2010-03-21 12:23:40 ----D---- C:\Program Files\MSECACHE
2010-03-20 12:29:58 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-03-20 10:11:03 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-03-20 10:10:59 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-03-20 10:10:53 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-03-20 10:10:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-03-20 10:10:43 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2010-03-20 10:10:10 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-03-19 16:21:19 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-03-19 16:20:26 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2010-03-19 16:19:31 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2010-03-19 09:49:39 ----D---- C:\WINDOWS\system32\XPSViewer
2010-03-19 09:49:26 ----D---- C:\WINDOWS\system32\en-US
2010-03-19 09:49:11 ----D---- C:\Program Files\Reference Assemblies
2010-03-19 09:49:11 ----D---- C:\Config.Msi
2010-03-19 09:48:39 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-03-19 09:48:39 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-03-19 09:48:38 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-03-19 09:41:15 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-03-19 09:36:58 ----A---- C:\WINDOWS\system32\MRT.exe
2010-03-19 08:23:38 ----D---- C:\Documents and Settings\Marian2\Data aplikací\MyPhoneExplorer
2010-03-19 08:23:24 ----D---- C:\Documents and Settings\Marian2\Data aplikací\Desktopicon
2010-03-19 08:23:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-03-19 08:23:06 ----D---- C:\Program Files\MyPhoneExplorer
2010-03-19 08:22:56 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-03-19 08:22:35 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-03-19 08:21:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-03-19 08:21:30 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-03-19 08:20:46 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-03-19 08:20:32 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-03-19 08:20:11 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-03-19 08:19:50 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-03-19 08:19:37 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-03-19 08:19:16 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-03-19 08:18:55 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-03-19 08:18:37 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-03-19 08:18:23 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-03-19 08:18:09 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-03-19 08:17:56 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-03-19 08:17:40 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-03-19 08:17:25 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-03-19 08:17:08 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-03-19 08:16:56 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-03-19 08:16:47 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-03-19 08:16:20 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-03-19 08:16:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-03-19 08:15:52 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-03-19 08:15:43 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-03-19 08:15:36 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-03-19 08:15:28 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-03-19 08:15:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-03-19 08:14:31 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-03-19 08:14:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-03-19 08:14:09 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-03-19 08:13:53 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-03-19 08:13:42 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-03-19 08:13:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-03-19 08:13:15 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-03-19 08:13:04 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-03-19 08:12:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-03-19 08:12:34 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-03-19 08:12:26 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-03-19 08:12:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-03-19 08:11:59 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-03-19 08:11:48 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-03-19 08:11:38 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-03-19 08:11:20 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-03-19 00:06:23 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-03-19 00:06:12 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-03-19 00:06:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-03-19 00:05:56 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-03-19 00:05:45 ----HDC---- C:\WINDOWS\$NtUninstallKB977165-v2$
2010-03-19 00:05:36 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-03-19 00:05:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-03-19 00:05:16 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-03-19 00:05:09 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-03-19 00:04:56 ----D---- C:\WINDOWS\system32\PreInstall
2010-03-19 00:04:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-03-19 00:04:20 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2010-03-19 00:04:09 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-03-19 00:04:01 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-19 00:04:01 ----D---- C:\WINDOWS\ie8updates
2010-03-19 00:03:45 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-03-18 21:28:33 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-03-18 21:01:07 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2010-03-18 21:00:22 ----D---- C:\Program Files\Windows Media Connect 2
2010-03-18 21:00:11 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2010-03-18 20:58:41 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2010-03-18 20:57:42 ----D---- C:\WINDOWS\system32\LogFiles
2010-03-18 20:57:31 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2010-03-18 20:56:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2010-03-18 19:27:44 ----D---- C:\Program Files\Microsoft Works
2010-03-18 19:27:24 ----D---- C:\Program Files\MSBuild
2010-03-18 19:26:46 ----D---- C:\Program Files\Microsoft Visual Studio
2010-03-18 19:26:45 ----D---- C:\Program Files\Common Files\DESIGNER
2010-03-18 19:25:21 ----D---- C:\Program Files\Microsoft.NET
2010-03-18 19:22:34 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-03-18 19:21:48 ----D---- C:\WINDOWS\SHELLNEW
2010-03-18 19:21:12 ----D---- C:\Program Files\Microsoft Office
2010-03-18 19:20:48 ----RD---- C:\MSOCache
2010-03-18 19:15:50 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-03-18 19:15:00 ----D---- C:\Documents and Settings\Marian2\Data aplikací\DAEMON Tools Lite
2010-03-18 19:14:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2010-03-18 19:01:20 ----D---- C:\Program Files\ICQ7.0
2010-03-18 18:45:02 ----D---- C:\Program Files\ICQ6
2010-03-18 18:41:12 ----D---- C:\Documents and Settings\Marian2\Data aplikací\ICQLite
2010-03-18 06:43:41 ----D---- C:\WINDOWS\RE_DRIVE
2010-03-18 06:36:09 ----SHD---- C:\System Volume Information
2010-03-17 23:39:56 ----D---- C:\Program Files\Google
2010-03-17 23:39:36 ----D---- C:\Program Files\Alwil Software
2010-03-17 23:39:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-03-17 23:32:36 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2010-03-17 23:32:36 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2010-03-17 23:32:36 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2010-03-17 23:32:33 ----D---- C:\Documents and Settings\Marian2\Data aplikací\TuneUp Software
2010-03-17 23:32:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
2010-03-17 23:32:22 ----D---- C:\Program Files\TuneUp Utilities 2009
2010-03-17 23:32:04 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{55A29068-F2CE-456C-9148-C869879E2357}
2010-03-17 22:55:57 ----ASH---- C:\Documents and Settings\Marian2\Data aplikací\desktop.ini
2010-03-17 22:55:49 ----SD---- C:\Documents and Settings\Marian2\Data aplikací\Microsoft
2010-03-17 22:55:49 ----D---- C:\Documents and Settings\Marian2\Data aplikací\Macromedia
2010-03-17 22:55:49 ----D---- C:\Documents and Settings\Marian2\Data aplikací\kidoz.52BCFEE1FEAB03D960EAF75B15C2A56D33E8320D.1
2010-03-17 22:55:49 ----D---- C:\Documents and Settings\Marian2\Data aplikací\InstallShield
2010-03-17 22:55:49 ----D---- C:\Documents and Settings\Marian2\Data aplikací\Identities
2010-03-17 22:55:49 ----D---- C:\Documents and Settings\Marian2\Data aplikací\ArcSoft
2010-03-17 22:55:49 ----D---- C:\Documents and Settings\Marian2\Data aplikací\Adobe
2010-03-17 22:24:01 ----D---- C:\Program Files\Common Files\Adobe
2010-03-17 22:21:05 ----D---- C:\Documents and Settings\Marian2\Data aplikací\Jpeg Resampler
2010-03-17 22:21:00 ----D---- C:\Program Files\JPEG Resampler
2010-03-17 22:09:43 ----D---- C:\Documents and Settings\Marian2\Data aplikací\WinRAR
2010-03-17 22:08:39 ----D---- C:\Program Files\WinRAR
2010-03-17 19:04:48 ----D---- C:\totalcmd
2010-03-17 18:41:10 ----D---- C:\Program Files\Crawler
2010-03-17 18:28:20 ----D---- C:\Documents and Settings\Marian2\Data aplikací\PSpad
2010-03-17 18:28:08 ----D---- C:\Program Files\PSPad editor
2010-03-17 18:24:35 ----D---- C:\Program Files\ICQ6Toolbar
2010-03-17 18:24:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2010-03-17 18:23:56 ----D---- C:\Documents and Settings\Marian2\Data aplikací\ICQ
2010-03-17 18:16:11 ----D---- C:\Program Files\Conduit
2010-03-17 18:16:09 ----D---- C:\Program Files\BS_Player
2010-03-17 18:16:03 ----D---- C:\Documents and Settings\Marian2\Data aplikací\BSplayer Pro
2010-03-17 18:16:03 ----D---- C:\Documents and Settings\Marian2\Data aplikací\BSplayer
2010-03-17 18:16:00 ----D---- C:\Program Files\Webteh
2010-03-17 17:11:15 ----D---- C:\Program Files\Zoner
2010-03-17 17:06:44 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-03-17 16:57:12 ----D---- C:\Documents and Settings\Marian2\Data aplikací\Thunderbird
2010-03-17 16:57:12 ----D---- C:\Documents and Settings\Marian2\Data aplikací\Mozilla
2010-03-17 16:56:59 ----D---- C:\Program Files\Mozilla Thunderbird
2010-03-17 16:53:53 ----D---- C:\Documents and Settings\Marian2\Data aplikací\Zoner
2010-03-17 16:44:27 ----D---- C:\Program Files\IrfanView
2010-03-17 16:41:06 ----D---- C:\Documents and Settings\Marian2\Data aplikací\GHISLER

======List of files/folders modified in the last 1 months======

2010-03-27 12:17:04 ----D---- C:\WINDOWS\Prefetch
2010-03-27 12:16:57 ----RD---- C:\Program Files
2010-03-27 12:15:48 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-27 12:09:28 ----D---- C:\WINDOWS\system32
2010-03-27 12:09:28 ----D---- C:\WINDOWS
2010-03-27 12:05:54 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-27 11:32:19 ----D---- C:\WINDOWS\system32\drivers
2010-03-27 11:31:47 ----SHD---- C:\WINDOWS\Installer
2010-03-27 11:26:10 ----HD---- C:\WINDOWS\inf
2010-03-26 21:51:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-26 17:55:54 ----A---- C:\WINDOWS\system.ini
2010-03-26 17:54:06 ----D---- C:\WINDOWS\AppPatch
2010-03-26 17:54:04 ----D---- C:\Program Files\Common Files
2010-03-26 17:51:46 ----RASH---- C:\boot.ini
2010-03-26 16:24:35 ----SD---- C:\WINDOWS\Tasks
2010-03-23 18:21:46 ----D---- C:\WINDOWS\WinSxS
2010-03-22 19:29:22 ----D---- C:\WINDOWS\Debug
2010-03-21 22:13:18 ----D---- C:\WINDOWS\system32\CatRoot
2010-03-21 22:13:14 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-03-21 14:09:39 ----D---- C:\WINDOWS\Microsoft.NET
2010-03-21 14:09:34 ----RSD---- C:\WINDOWS\assembly
2010-03-21 13:27:10 ----D---- C:\WINDOWS\system32\cs-cz
2010-03-21 13:26:20 ----D---- C:\WINDOWS\system32\mui
2010-03-21 12:59:49 ----RSD---- C:\WINDOWS\Fonts
2010-03-20 13:45:49 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-03-19 17:52:37 ----D---- C:\Documents and Settings
2010-03-19 17:03:40 ----D---- C:\WINDOWS\SoftwareDistribution
2010-03-19 10:46:55 ----D---- C:\WINDOWS\system32\config
2010-03-19 10:46:43 ----D---- C:\WINDOWS\system32\wbem
2010-03-19 10:46:42 ----D---- C:\WINDOWS\Registration
2010-03-19 10:37:25 ----D---- C:\WINDOWS\system32\Restore
2010-03-19 09:44:28 ----D---- C:\Program Files\Internet Explorer
2010-03-19 08:17:10 ----D---- C:\Program Files\Movie Maker
2010-03-19 08:15:19 ----D---- C:\Program Files\Outlook Express
2010-03-19 00:06:25 ----D---- C:\Program Files\Messenger
2010-03-18 23:31:13 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-18 21:27:50 ----D---- C:\Program Files\Windows Media Player
2010-03-18 21:27:48 ----D---- C:\WINDOWS\Help
2010-03-18 21:00:43 ----A---- C:\WINDOWS\win.ini
2010-03-18 19:29:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-03-18 19:27:30 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-03-18 17:19:43 ----D---- C:\Program Files\Microsoft
2010-03-17 22:50:09 ----D---- C:\WINDOWS\security
2010-03-17 22:46:52 ----D---- C:\WINDOWS\repair
2010-03-17 22:32:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-03-17 22:24:01 ----D---- C:\Program Files\Adobe
2010-03-17 16:59:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\ArcSoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-03-09 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-03-09 162640]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-03-09 46672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-03-09 19024]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-03-09 100432]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2008-12-08 55136]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-03-09 23376]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2009-11-11 1751424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-05-15 5080064]
R3 RT80x86;Ralink 802.11n Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2860.sys [2009-04-29 1005312]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-07-28 143360]
R3 ULCDRHlp;ULCDRHlp; C:\WINDOWS\System32\Drivers\ULCDRHlp.sys [2004-12-23 27392]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 aluak7z4;aluak7z4; C:\WINDOWS\system32\drivers\aluak7z4.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2009-06-03 1570240]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\WINDOWS\system32\DRIVERS\ArcSoftKsUFilter.sys [2008-04-25 14336]
S3 BTMCOM;Bluetooth Serial Port; C:\WINDOWS\System32\Drivers\btmcom.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 EUCR;EUCR; C:\WINDOWS\system32\DRIVERS\EUCR6SK.SYS [2009-12-09 81744]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 w810bus;Sony Ericsson W810 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\w810bus.sys [2006-02-20 58288]
S3 w810mdfl;Sony Ericsson W810 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\w810mdfl.sys [2006-02-20 8336]
S3 w810mdm;Sony Ericsson W810 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\w810mdm.sys [2006-02-20 94064]
S3 w810mgmt;Sony Ericsson W810 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\w810mgmt.sys [2006-02-20 85408]
S3 w810obex;Sony Ericsson W810 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\w810obex.sys [2006-02-20 83344]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 atapi;atapi; C:\WINDOWS\system32\drivers\atapi.sys [2008-04-14 96512]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-09-28 109056]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files\System Control Manager\MSIService.exe [2009-07-09 160768]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2010-03-17 603904]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-03-17 133104]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe []
S3 fsssvc;Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe []
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2010-03-17 360192]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe []

-----------------EOF-----------------

Re: prosím o kontrolu

Napsal: 27 bře 2010 12:26
od Caroprd111
Konzolu pro zotavení bych doporučil ponechat, pokud spadne systém, tak se z ní dá hodně věcí opravit. Pokud i přesto chcete Konzolu pro zotavení odstranit, napište a já Vám pošlu návod.



Obrázek Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe
  • Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
  • Po použití program vymažte. Pozor,antiviry ho mohou falešně označit za vir.


Obrázek Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe
  • Spusťte.
  • Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)


Obrázek Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478
  • Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.

    Obrázek Záložka Čistič
  • Dejte analyzovat, po dokončení dejte Spustit Ccleaner.

    Obrázek Záložka Registry
  • Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
    Obrázek OK Obrázek Zavřít


Obrázek V logu nevidím firewall, doinstalujte :!: Přehled: http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

Re: prosím o kontrolu

Napsal: 27 bře 2010 12:38
od marianek
ta konzole je to nabihani win jak se objevi na dve vteriny?

jak se odstrani? je to slozite?


Konzolu pro zotavení bych doporučil ponechat, pokud spadne systém, tak se z ní dá hodně věcí opravit. Pokud i přesto chcete Konzolu pro zotavení odstranit, napište a já Vám pošlu návod.

Re: prosím o kontrolu

Napsal: 27 bře 2010 12:43
od Caroprd111
Ano, je to ono. No, je to otázka 5 minut, ale opravdu doporučuji nechat to být.

Re: prosím o kontrolu

Napsal: 27 bře 2010 12:47
od marianek
jj ale přeci jenom, já jsem to nikdy neměl jinde, ten návod mě zajímá

Re: prosím o kontrolu

Napsal: 27 bře 2010 12:59
od Caroprd111
Klik Start.
*otvorte tento pocitac
* nastroje>moznosti zlozky...
* Zobrazenie
* zafajknut zobrazit skryte sobory a zlozky
* vyfajknut skryt chranene subory OS (doporuceno)
* klik ano
* klik OK.

1:na C:\najdi zlozku Cmdcons a suborCmldr-zmaz.
2:najdi aj boot.ini-pravy klik vlastnosti-odstran fajku len na citanie klik ok
3:Stert-spustit-vloz prikaz Notepad.exe c:\boot.ini ok
4:Zmaz
C:\cmdcons\bootsect.dat="Microsoft Windows Recovery Console" /cmdcons
5:zatvor notepad a uloz zmenu-suhlas.
6:Otvor Boot.ini a daj spat fajku len na citanie-ok zatvor restart
a hotovo

Re: prosím o kontrolu

Napsal: 27 bře 2010 13:28
od marianek
ten soubr cmldr tam není

Re: prosím o kontrolu

Napsal: 27 bře 2010 13:34
od Caroprd111
Tak krok vynechte.

Re: prosím o kontrolu

Napsal: 27 bře 2010 13:39
od marianek
už jsem ho našel:-), ale když přejdu ke kroku

ke kroku 3 tak se objevi nelze nalezt soubor c-botni