VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Preventívna Kontrola Logu

https://forum.viry.cz:443/viewtopic.php?t=99669

Stránka 2 z 3

Re: Preventívna Kontrola Logu

Napsal: 05 dub 2010 18:26
od P.Varga
http://www.virustotal.com/analisis/f443 ... 1270488265

Divné podla popisku u Kasperského ide o vírus pre DOS, Ako som ho, preboha, mohol dostať?

Re: Preventívna Kontrola Logu

Napsal: 05 dub 2010 18:32
od Unlimited_Killer
Pokud jsem si dobře všiml je vidět až v posledním logu. :o

1) OTMoveit3
  • Stáhněte OTM3 na Plochu.
  • Spusťte ho dvojklikem na OTM.exe, pokud to nepůjde, zkuste to s adminskými právy.
  • Do levého okna 'Paste Instructions for Items to be Moved' vkopírujte následující skript:

    Kód: Vybrat vše

    :files
C:\WINDOWS\system32\*.tmp.dll /s
C:\WINDOWS\system32\SET*.tmp /s
C:\WINDOWS\*.tmp /s
C:\WINDOWS\A.exe

:commands
[emptytemp]
[emptyflash]
[reboot]
  • Poté klikněte na červené tlačítko 'MoveIt!'.
  • V zeleném okně vpravo by se měl zobrazit log, ten vkopírujete sem do fóra.
  • Pokud se zobrazí hláška k restartování, klikněte na 'Yes'.
  • Po restartu se log otevře sám, nebo ho najdete v C:\_OTM\MovedFiles
2) Nový RSIT log

Re: Preventívna Kontrola Logu

Napsal: 05 dub 2010 18:41
od P.Varga
All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\system32\SET27C.tmp moved successfully.
C:\WINDOWS\system32\SET490.tmp moved successfully.
C:\WINDOWS\system32\SET492.tmp moved successfully.
C:\WINDOWS\system32\SET4AC.tmp moved successfully.
C:\WINDOWS\002775_.tmp moved successfully.
C:\WINDOWS\C5C1C0F0D62F4DBF81D4D7EF397C228B.TMP folder moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SET4.tmp moved successfully.
C:\WINDOWS\SET8.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP11B6.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1299.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP12BA.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP67.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP829.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP87.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP876.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA1E.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBB3.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE09.tmp folder moved successfully.
C:\WINDOWS\system32\CONFIG.TMP moved successfully.
C:\WINDOWS\A.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: All Users.WINDOWS.0

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User.WINDOWS.0
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->FireFox cache emptied: 3379839 bytes

User: LocalService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: NetworkService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: VaRgA
->Temp folder emptied: 12769916 bytes
->Temporary Internet Files folder emptied: 5622929 bytes
->Java cache emptied: 19434 bytes
->FireFox cache emptied: 42309570 bytes
->Flash cache emptied: 4419 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 39800743 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 3565466 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 103,00 mb


OTM by OldTimer - Version 3.1.10.1 log created on 04052010_193521

Files moved on Reboot...
File C:\Documents and Settings\VaRgA\Local Settings\Temp\Perflib_Perfdata_890.dat not found!

Registry entries deleted on Reboot...


Po reštarte ma zaskočili hodnoty rozlíšenie a farebná hĺbka (ktoré nejdú zmeniť)

Re: Preventívna Kontrola Logu

Napsal: 05 dub 2010 18:42
od P.Varga
All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\system32\SET27C.tmp moved successfully.
C:\WINDOWS\system32\SET490.tmp moved successfully.
C:\WINDOWS\system32\SET492.tmp moved successfully.
C:\WINDOWS\system32\SET4AC.tmp moved successfully.
C:\WINDOWS\002775_.tmp moved successfully.
C:\WINDOWS\C5C1C0F0D62F4DBF81D4D7EF397C228B.TMP folder moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SET4.tmp moved successfully.
C:\WINDOWS\SET8.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP11B6.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1299.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP12BA.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP67.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP829.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP87.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP876.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA1E.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBB3.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE09.tmp folder moved successfully.
C:\WINDOWS\system32\CONFIG.TMP moved successfully.
C:\WINDOWS\A.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: All Users.WINDOWS.0

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User.WINDOWS.0
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->FireFox cache emptied: 3379839 bytes

User: LocalService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: NetworkService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: VaRgA
->Temp folder emptied: 12769916 bytes
->Temporary Internet Files folder emptied: 5622929 bytes
->Java cache emptied: 19434 bytes
->FireFox cache emptied: 42309570 bytes
->Flash cache emptied: 4419 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 39800743 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 3565466 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 103,00 mb


OTM by OldTimer - Version 3.1.10.1 log created on 04052010_193521

Files moved on Reboot...
File C:\Documents and Settings\VaRgA\Local Settings\Temp\Perflib_Perfdata_890.dat not found!

Registry entries deleted on Reboot...


Po reštarte ma zaskočili hodnoty rozlíšenie a farebná hĺbka (ktoré nejdú zmeniť)

Re: Preventívna Kontrola Logu

Napsal: 05 dub 2010 18:43
od P.Varga
All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\system32\SET27C.tmp moved successfully.
C:\WINDOWS\system32\SET490.tmp moved successfully.
C:\WINDOWS\system32\SET492.tmp moved successfully.
C:\WINDOWS\system32\SET4AC.tmp moved successfully.
C:\WINDOWS\002775_.tmp moved successfully.
C:\WINDOWS\C5C1C0F0D62F4DBF81D4D7EF397C228B.TMP folder moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SET4.tmp moved successfully.
C:\WINDOWS\SET8.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP11B6.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1299.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP12BA.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP67.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP829.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP87.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP876.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA1E.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBB3.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE09.tmp folder moved successfully.
C:\WINDOWS\system32\CONFIG.TMP moved successfully.
C:\WINDOWS\A.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: All Users.WINDOWS.0

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User.WINDOWS.0
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->FireFox cache emptied: 3379839 bytes

User: LocalService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: NetworkService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: VaRgA
->Temp folder emptied: 12769916 bytes
->Temporary Internet Files folder emptied: 5622929 bytes
->Java cache emptied: 19434 bytes
->FireFox cache emptied: 42309570 bytes
->Flash cache emptied: 4419 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 39800743 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 3565466 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 103,00 mb


OTM by OldTimer - Version 3.1.10.1 log created on 04052010_193521

Files moved on Reboot...
File C:\Documents and Settings\VaRgA\Local Settings\Temp\Perflib_Perfdata_890.dat not found!

Registry entries deleted on Reboot...


Po reštarte ma zaskočili hodnoty rozlíšenie a farebná hĺbka (ktoré nejdú zmeniť)

Re: Preventívna Kontrola Logu

Napsal: 05 dub 2010 18:46
od Unlimited_Killer
Nejdou změnit ani přes ovladače grafické karty?

Re: Preventívna Kontrola Logu

Napsal: 05 dub 2010 18:47
od P.Varga
Pardon za repost
Už som to vyriešil preinštalovaním ovládačov GK
Takže čisto?

Re: Preventívna Kontrola Logu

Napsal: 05 dub 2010 18:53
od Unlimited_Killer
Ještě ten RSIT log. Poté budeme uklízet.

Re: Preventívna Kontrola Logu

Napsal: 05 dub 2010 18:55
od P.Varga
Logfile of random's system information tool 1.06 (written by random/random)
Run by VaRgA at 2010-04-05 19:54:26
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (8%) free of 32 GB
Total RAM: 3583 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:54:29, on 5.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\VaRgA\Plocha\RSIT.exe
C:\Program Files\trend micro\VaRgA.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: VIPTToolbarManager Class - {1A2641AE-2C42-4C51-A05F-8ECEC3FDC94D} - C:\Program Files\Visual IP Trace 2009\VisualIPTraceIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Visual IP Trace - {E70C26AE-DFF1-40A8-8D37-19180F56F0AA} - C:\Program Files\Visual IP Trace 2009\VisualIPTraceIE.dll
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{0440FBB9-DFBC-4C6C-84FD-A3DA8F6E46B4}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS1\Services\Tcpip\..\{0440FBB9-DFBC-4C6C-84FD-A3DA8F6E46B4}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS2\Services\Tcpip\..\{0440FBB9-DFBC-4C6C-84FD-A3DA8F6E46B4}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS3\Services\Tcpip\..\{0440FBB9-DFBC-4C6C-84FD-A3DA8F6E46B4}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS4\Services\Tcpip\..\{0440FBB9-DFBC-4C6C-84FD-A3DA8F6E46B4}: NameServer = 156.154.70.25,156.154.71.25
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 6999 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Automatic troubleshooting.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A2641AE-2C42-4C51-A05F-8ECEC3FDC94D}]
VIPTToolbarManager Class - C:\Program Files\Visual IP Trace 2009\VisualIPTraceIE.dll [2005-04-25 32768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{E70C26AE-DFF1-40A8-8D37-19180F56F0AA} - Visual IP Trace - C:\Program Files\Visual IP Trace 2009\VisualIPTraceIE.dll [2005-04-25 32768]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TrueImageMonitor.exe"=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2008-11-10 4366848]
"AcronisTimounterMonitor"=C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [2008-11-10 962112]
"Acronis Scheduler2 Service"=C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2008-11-10 165144]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-11-16 2054360]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-12-09 18063872]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2010-01-05 2166784]
"LGODDFU"=C:\Program Files\lg_fwupdate\fwupdate.exe [2010-02-01 557056]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-03-18 207360]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"nwiz"=nwiz.exe /installquiet []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-03-16 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-03-16 13670504]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-01-05 3037696]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule]
C:\Program Files\WinFast\WFDTV\WFWIZ.exe [2009-03-11 2912256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFastDTV]
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe [2009-10-02 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^VaRgA^Nabídka Start^Programy^Po spuštění^RocketDock.lnk]
C:\WINDOWS\BRICOP~1\VISTAI~1\ROCKET~1\ROCKET~1.EXE [2007-03-19 630784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=0
"SynchronousUserGroupPolicy"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
"MaxRecentDocs"=15
"NoDesktopCleanupWizard"=1
"NoInstrumentation"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\VaRgA\Plocha\FileZilla-3.3.2.1\filezilla.exe"="C:\Documents and Settings\VaRgA\Plocha\FileZilla-3.3.2.1\filezilla.exe:*:Enabled:FileZilla FTP Client"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-04-05 19:35:21 ----D---- C:\_OTM
2010-04-05 19:29:13 ----D---- C:\NVIDIA
2010-04-05 19:20:04 ----D---- C:\Program Files\FileHippo.com
2010-04-05 14:46:12 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
2010-04-05 14:46:11 ----A---- C:\WINDOWS\system32\ChCfg.exe
2010-04-05 14:46:10 ----A---- C:\WINDOWS\system32\RTLCPL.exe
2010-04-05 14:44:59 ----D---- C:\Program Files\Realtek AC97
2010-04-05 14:44:53 ----A---- C:\WINDOWS\alcupd.exe
2010-04-05 14:44:53 ----A---- C:\WINDOWS\alcrmv.exe
2010-04-05 09:50:42 ----A---- C:\mbam-error.txt
2010-04-05 09:44:39 ----D---- C:\WINDOWS\temp
2010-04-05 09:44:37 ----A---- C:\ComboFix.txt
2010-04-05 09:41:31 ----SHD---- C:\RECYCLER
2010-04-05 09:35:01 ----D---- C:\ComboFix
2010-04-04 16:25:32 ----RASHD---- C:\cmdcons
2010-04-04 16:19:49 ----AD---- C:\Qoobox
2010-04-03 19:02:11 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\FileZilla
2010-04-03 18:52:09 ----D---- C:\totalcmd
2010-04-03 15:42:50 ----D---- C:\rsit
2010-04-03 14:02:50 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\MyPhoneExplorer
2010-04-02 12:45:21 ----D---- C:\Program Files\Sanny Builder 3
2010-04-01 11:37:28 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\HD Tune Pro
2010-04-01 11:37:16 ----D---- C:\Program Files\HD Tune Pro
2010-04-01 09:43:08 ----AD---- C:\WINDOWS\rundll16.exe
2010-04-01 09:30:54 ----D---- C:\Program Files\Panda Security
2010-03-31 16:29:19 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2010-03-31 16:29:19 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2010-03-31 16:29:18 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2010-03-31 16:29:17 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2010-03-31 16:29:16 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2010-03-31 16:29:16 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2010-03-31 16:29:15 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2010-03-31 16:29:14 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2010-03-31 16:29:13 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2010-03-31 16:29:13 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2010-03-31 16:29:12 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2010-03-31 16:29:12 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2010-03-31 16:29:11 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2010-03-31 16:29:10 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2010-03-31 16:29:08 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2010-03-31 16:29:08 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2010-03-31 16:29:07 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2010-03-31 16:29:06 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2010-03-31 16:29:05 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2010-03-31 16:29:05 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2010-03-31 16:29:04 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2010-03-31 16:29:03 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2010-03-31 16:29:03 ----A---- C:\WINDOWS\system32\x3daudio1_2.dll
2010-03-31 16:29:00 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-03-31 16:28:59 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2010-03-31 16:28:58 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2010-03-31 16:28:58 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2010-03-31 16:28:55 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2010-03-31 16:28:52 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2010-03-31 16:28:51 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-03-31 16:28:50 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-03-31 16:28:50 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-03-31 16:28:49 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-03-31 16:28:49 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-03-31 16:28:48 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-03-31 16:28:48 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-03-31 16:28:48 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-03-31 16:28:30 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-03-31 16:28:29 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-03-31 16:28:29 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-03-31 16:28:27 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-03-31 16:28:26 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-03-31 16:28:25 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-03-31 16:28:24 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-03-31 16:28:23 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-03-31 16:28:21 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-03-31 16:28:20 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-03-31 08:20:44 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\NVIDIA
2010-03-30 17:39:47 ----D---- C:\Program Files\Visual IP Trace 2009
2010-03-30 17:17:32 ----D---- C:\Program Files\LogMeIn Hamachi
2010-03-30 16:35:05 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Autodesk
2010-03-30 16:15:49 ----D---- C:\Program Files\Autodesk
2010-03-30 16:14:31 ----D---- C:\Program Files\Common Files\Autodesk Shared
2010-03-30 16:12:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Autodesk
2010-03-30 16:10:36 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2010-03-30 16:10:36 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2010-03-30 16:10:35 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2010-03-30 16:10:33 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2010-03-30 16:10:33 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2010-03-30 16:10:31 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2010-03-30 16:10:29 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2010-03-30 16:10:29 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2010-03-30 16:10:27 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2010-03-30 16:10:19 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-03-30 16:10:18 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-03-28 19:43:21 ----A---- C:\WINDOWS\system32\VBoxNetFltNotify.dll
2010-03-28 13:46:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\MumboJumbo
2010-03-28 12:46:59 ----D---- C:\Program Files\Common Files\Thraex Software
2010-03-27 13:43:17 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-03-27 13:43:15 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-03-27 13:43:13 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-03-27 13:43:12 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-03-27 13:43:11 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-03-27 13:43:11 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-03-27 13:43:09 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-03-27 13:43:08 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-03-27 13:43:04 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-03-27 13:43:04 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-03-27 13:28:19 ----D---- C:\Program Files\prjMegaTrain
2010-03-27 13:28:17 ----N---- C:\WINDOWS\Setup1.exe
2010-03-27 13:28:15 ----A---- C:\WINDOWS\ST6UNST.EXE
2010-03-27 12:47:59 ----D---- C:\Program Files\Common Files\DirectX
2010-03-25 19:57:13 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Command and Conquer 4
2010-03-24 19:09:11 ----A---- C:\WINDOWS\system32\tsbyuv.dll
2010-03-24 19:09:10 ----A---- C:\WINDOWS\system32\PsisDecd.dll
2010-03-24 19:09:09 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-03-24 19:09:07 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-03-24 19:09:06 ----A---- C:\WINDOWS\system32\msyuv.dll
2010-03-24 19:09:06 ----A---- C:\WINDOWS\system32\iyuv_32.dll
2010-03-20 09:26:08 ----D---- C:\Program Files\MMSSTV
2010-03-16 03:37:50 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-03-16 03:37:50 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-03-16 03:37:50 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-03-16 03:37:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-03-16 03:37:50 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-03-16 03:37:44 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-03-13 20:51:51 ----D---- C:\Program Files\upnito.sk manager
2010-03-13 20:19:19 ----D---- C:\Program Files\Ubisoft
2010-03-13 18:06:54 ----A---- C:\WINDOWS\unvise32.exe
2010-03-10 18:06:38 ----D---- C:\Program Files\XN Resource Editor
2010-03-07 13:51:50 ----D---- C:\Program Files\PECompact
2010-03-06 15:25:19 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-03-06 14:39:18 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Smart Mod Manager
2010-03-06 14:37:36 ----D---- C:\Program Files\Smart Mod Manager

======List of files/folders modified in the last 1 months======

2010-04-05 19:54:27 ----D---- C:\Program Files\trend micro
2010-04-05 19:46:29 ----D---- C:\WINDOWS
2010-04-05 19:46:18 ----A---- C:\WINDOWS\lgfwup.ini
2010-04-05 19:46:12 ----D---- C:\Program Files\lg_fwupdate
2010-04-05 19:45:58 ----D---- C:\WINDOWS\system32
2010-04-05 19:45:02 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-05 19:45:02 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-05 19:44:30 ----SHD---- C:\WINDOWS\Installer
2010-04-05 19:44:30 ----D---- C:\Config.Msi
2010-04-05 19:44:07 ----D---- C:\WINDOWS\Help
2010-04-05 19:43:21 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-05 19:43:19 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-04-05 19:43:10 ----D---- C:\WINDOWS\system32\drivers
2010-04-05 19:39:04 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-05 19:37:26 ----HD---- C:\WINDOWS\inf
2010-04-05 19:23:36 ----A---- C:\WINDOWS\system.ini
2010-04-05 19:20:04 ----RD---- C:\Program Files
2010-04-05 19:04:50 ----D---- C:\WINDOWS\Minidump
2010-04-05 15:50:04 ----D---- C:\Program Files\Mozilla Thunderbird
2010-04-05 14:47:07 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-05 09:50:41 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-05 09:39:34 ----SD---- C:\WINDOWS\Tasks
2010-04-05 09:38:48 ----D---- C:\WINDOWS\AppPatch
2010-04-05 09:38:42 ----D---- C:\Program Files\Common Files
2010-04-04 16:30:07 ----D---- C:\Program Files\Cheat Engine
2010-04-04 16:25:35 ----RASH---- C:\boot.ini
2010-04-04 16:14:50 ----D---- C:\WINDOWS\system32\DirectX
2010-04-04 16:14:48 ----RSD---- C:\WINDOWS\assembly
2010-04-03 19:24:11 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-04-03 18:52:57 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\GHISLER
2010-04-03 18:06:12 ----D---- C:\Program Files\Mozilla Firefox
2010-04-03 15:45:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-04-03 11:38:51 ----D---- C:\Program Files\GTASAConsole
2010-04-02 17:39:50 ----D---- C:\Fraps
2010-04-01 20:03:33 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Skype
2010-04-01 19:28:31 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\skypePM
2010-04-01 11:17:31 ----A---- C:\WINDOWS\NeroDigital.ini
2010-03-31 18:59:55 ----D---- C:\Program Files\Internet Explorer
2010-03-31 18:59:45 ----D---- C:\WINDOWS\ie8updates
2010-03-31 18:59:32 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-31 16:32:16 ----D---- C:\WINDOWS\Prefetch
2010-03-30 20:08:07 ----D---- C:\WINDOWS\Debug
2010-03-30 16:32:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
2010-03-30 14:26:55 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Spyware Terminator
2010-03-28 19:43:15 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-03-28 08:55:43 ----D---- C:\Program Files\Spyware Terminator
2010-03-27 13:44:54 ----D---- C:\Program Files\NVIDIA Corporation
2010-03-27 13:44:05 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-03-23 19:28:13 ----D---- C:\Program Files\SystemRequirementsLab
2010-03-22 15:54:50 ----D---- C:\Program Files\ESET
2010-03-20 09:41:38 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Ahead
2010-03-20 07:57:21 ----D---- C:\Documents and Settings
2010-03-13 20:25:33 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Ubisoft
2010-03-13 20:25:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
2010-03-13 20:19:01 ----D---- C:\WINDOWS\WinSxS
2010-03-13 17:41:18 ----D---- C:\Program Files\LEGO Company
2010-03-13 12:38:59 ----D---- C:\WINDOWS\Uninstall
2010-03-13 12:12:13 ----A---- C:\WINDOWS\win.ini
2010-03-13 12:12:13 ----A---- C:\Boot.bak
2010-03-13 12:12:02 ----D---- C:\WINDOWS\pss
2010-03-12 18:02:38 ----A---- C:\WINDOWS\PEV.exe
2010-03-12 12:26:36 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2010-03-11 18:51:27 ----RSD---- C:\WINDOWS\Fonts
2010-03-11 18:43:37 ----A---- C:\WINDOWS\system32\TUKernel.exe
2010-03-10 20:55:27 ----D---- C:\Program Files\Movie Maker

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-09-11 108792]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2009-09-11 55768]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-07-27 58908]
R1 VBoxDrv;VirtualBox Service; C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys [2010-02-12 123280]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-09-11 116008]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2009-09-11 135048]
R2 VMM;VMM; \??\C:\WINDOWS\system32\drivers\VMM.sys []
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2009-06-19 33096]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-10-22 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-12-11 4959232]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-03-16 10232352]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-11-27 58368]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-11-27 19968]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-10-31 47360]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 DrvAgent32;DrvAgent32; \??\C:\WINDOWS\system32\Drivers\DrvAgent32.sys []
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-02-01 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-02-01 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-02-01 21568]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SE1008mdm;Sony Ericsson SE1008 Mobile Device Full USB Driver; C:\WINDOWS\system32\DRIVERS\SE1008mdm.sys [2009-02-12 58536]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WFLR6654;WinFast TV2000 XP Expert (FM1216MK3); C:\WINDOWS\system32\drivers\wfeaglxt.sys [2008-12-25 433792]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-11-16 735960]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-03-16 154216]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-11-16 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-02-19 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-03-14 779824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: Preventívna Kontrola Logu

Napsal: 05 dub 2010 19:43
od Unlimited_Killer
Já už tam nic nevidím, takže uklidíme po nástrojích. :happy:

1) Odinstalace ComboFixu
  • Proklikejte se přes Start do Spustit [klávesová zkratka je Win+R].
  • Do textového pole napište:

    Kód: Vybrat vše

    ComboFix /Uninstall
  • Stiskněte Enter.
  • Spustí se odinstalace ComboFixu, která smaže všechny jeho součásti.
2) OTCleaner
  • Stáhněte OTC a dvojklikem ho spusťte.
  • Vyskočí okénko, kde kliknete na 'CleanUp!'.
  • Potvrdíte kliknutím na 'Yes'.
  • Poté se ještě zeptá, zda chcete restartovat PC - to proveďte opět kliknutím na 'Yes'.
3) Defragmentace
  • Defragmentujte disk.
  • Lze to udělat několika způsoby ↓
    • Přes defragmentaci integrovanou ve Windows [Start → Spustit → dfrg.msc → Enter]. Toto není příliš účinný způsob.
    • Přes jednoduchý a přehledný program jménem Defraggler.
    • Přes geniální program, který se nemusí instalovat a je hodně jednoduchý - JKDefrag.
4) CCleaner
  • Stáhněte si program jménem CCleaner.
  • Normálně nainstalujte, jen dávejte pozor a odškrtněte položku 'Instalovat Yahoo! Toolbar'.
  • Spusťte ho.
    • Záložka Čistič → nechte zatrženo vše, jak je, a klikněte na 'Spustit CCleaner'.
    • Záložka Registry → klikněte na 'Hledej problémy'. Vyhledá problémy v registru, až dokončí analyzování, klikněte na 'Opravit vybrané problémy'. Nabídne Vám vytvoření zálohy - pro jistotu ji vytvořte a uložte například na Plochu.
  • CCleaner doporučuji používat pravidelně, celkem rapidně dokáže zrychlit PC.
5) Nový RSIT log

Re: Preventívna Kontrola Logu

Napsal: 06 dub 2010 13:29
od P.Varga
Logfile of random's system information tool 1.06 (written by random/random)
Run by VaRgA at 2010-04-06 14:26:49
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 4 GB (12%) free of 32 GB
Total RAM: 3583 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:26:54, on 6.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\VaRgA\Plocha\RSIT.exe
C:\Program Files\trend micro\VaRgA.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: VIPTToolbarManager Class - {1A2641AE-2C42-4C51-A05F-8ECEC3FDC94D} - C:\Program Files\Visual IP Trace 2009\VisualIPTraceIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Visual IP Trace - {E70C26AE-DFF1-40A8-8D37-19180F56F0AA} - C:\Program Files\Visual IP Trace 2009\VisualIPTraceIE.dll
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{0440FBB9-DFBC-4C6C-84FD-A3DA8F6E46B4}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS1\Services\Tcpip\..\{0440FBB9-DFBC-4C6C-84FD-A3DA8F6E46B4}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS2\Services\Tcpip\..\{0440FBB9-DFBC-4C6C-84FD-A3DA8F6E46B4}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS3\Services\Tcpip\..\{0440FBB9-DFBC-4C6C-84FD-A3DA8F6E46B4}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS4\Services\Tcpip\..\{0440FBB9-DFBC-4C6C-84FD-A3DA8F6E46B4}: NameServer = 156.154.70.25,156.154.71.25
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 7032 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Automatic troubleshooting.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A2641AE-2C42-4C51-A05F-8ECEC3FDC94D}]
VIPTToolbarManager Class - C:\Program Files\Visual IP Trace 2009\VisualIPTraceIE.dll [2005-04-25 32768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{E70C26AE-DFF1-40A8-8D37-19180F56F0AA} - Visual IP Trace - C:\Program Files\Visual IP Trace 2009\VisualIPTraceIE.dll [2005-04-25 32768]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TrueImageMonitor.exe"=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2008-11-10 4366848]
"AcronisTimounterMonitor"=C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [2008-11-10 962112]
"Acronis Scheduler2 Service"=C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2008-11-10 165144]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-11-16 2054360]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-12-09 18063872]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2010-01-05 2166784]
"LGODDFU"=C:\Program Files\lg_fwupdate\fwupdate.exe [2010-02-01 557056]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-03-18 207360]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"nwiz"=nwiz.exe /installquiet []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-03-16 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-03-16 13670504]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-01-05 3037696]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule]
C:\Program Files\WinFast\WFDTV\WFWIZ.exe [2009-03-11 2912256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFastDTV]
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe [2009-10-02 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^VaRgA^Nabídka Start^Programy^Po spuštění^RocketDock.lnk]
C:\WINDOWS\BRICOP~1\VISTAI~1\ROCKET~1\ROCKET~1.EXE [2007-03-19 630784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=0
"SynchronousUserGroupPolicy"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
"MaxRecentDocs"=15
"NoDesktopCleanupWizard"=1
"NoInstrumentation"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Documents and Settings\VaRgA\Plocha\FileZilla-3.3.2.1\filezilla.exe"="C:\Documents and Settings\VaRgA\Plocha\FileZilla-3.3.2.1\filezilla.exe:*:Enabled:FileZilla FTP Client"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Disabled:Crawler Spyware Terminator"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-04-06 14:26:49 ----D---- C:\rsit
2010-04-05 19:29:13 ----D---- C:\NVIDIA
2010-04-05 19:20:04 ----D---- C:\Program Files\FileHippo.com
2010-04-05 14:46:12 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
2010-04-05 14:46:11 ----A---- C:\WINDOWS\system32\ChCfg.exe
2010-04-05 14:46:10 ----A---- C:\WINDOWS\system32\RTLCPL.exe
2010-04-05 14:44:59 ----D---- C:\Program Files\Realtek AC97
2010-04-05 14:44:53 ----A---- C:\WINDOWS\alcupd.exe
2010-04-05 14:44:53 ----A---- C:\WINDOWS\alcrmv.exe
2010-04-05 09:50:42 ----A---- C:\mbam-error.txt
2010-04-05 09:44:39 ----D---- C:\WINDOWS\temp
2010-04-05 09:41:31 ----SHD---- C:\RECYCLER
2010-04-04 16:25:32 ----RASHD---- C:\cmdcons
2010-04-03 19:02:11 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\FileZilla
2010-04-03 18:52:09 ----D---- C:\totalcmd
2010-04-03 14:02:50 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\MyPhoneExplorer
2010-04-02 12:45:21 ----D---- C:\Program Files\Sanny Builder 3
2010-04-01 11:37:28 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\HD Tune Pro
2010-04-01 11:37:16 ----D---- C:\Program Files\HD Tune Pro
2010-04-01 09:43:08 ----AD---- C:\WINDOWS\rundll16.exe
2010-04-01 09:30:54 ----D---- C:\Program Files\Panda Security
2010-03-31 16:29:19 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2010-03-31 16:29:19 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2010-03-31 16:29:18 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2010-03-31 16:29:17 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2010-03-31 16:29:16 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2010-03-31 16:29:16 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2010-03-31 16:29:15 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2010-03-31 16:29:14 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2010-03-31 16:29:13 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2010-03-31 16:29:13 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2010-03-31 16:29:12 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2010-03-31 16:29:12 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2010-03-31 16:29:11 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2010-03-31 16:29:10 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2010-03-31 16:29:08 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2010-03-31 16:29:08 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2010-03-31 16:29:07 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2010-03-31 16:29:06 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2010-03-31 16:29:05 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2010-03-31 16:29:05 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2010-03-31 16:29:04 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2010-03-31 16:29:03 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2010-03-31 16:29:03 ----A---- C:\WINDOWS\system32\x3daudio1_2.dll
2010-03-31 16:29:00 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-03-31 16:28:59 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2010-03-31 16:28:58 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2010-03-31 16:28:58 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2010-03-31 16:28:55 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2010-03-31 16:28:52 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2010-03-31 16:28:51 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-03-31 16:28:50 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-03-31 16:28:50 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-03-31 16:28:49 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-03-31 16:28:49 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-03-31 16:28:48 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-03-31 16:28:48 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-03-31 16:28:48 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-03-31 16:28:30 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-03-31 16:28:29 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-03-31 16:28:29 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-03-31 16:28:27 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-03-31 16:28:26 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-03-31 16:28:25 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-03-31 16:28:24 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-03-31 16:28:23 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-03-31 16:28:21 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-03-31 16:28:20 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-03-31 08:20:44 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\NVIDIA
2010-03-30 17:39:47 ----D---- C:\Program Files\Visual IP Trace 2009
2010-03-30 17:17:32 ----D---- C:\Program Files\LogMeIn Hamachi
2010-03-30 16:35:05 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Autodesk
2010-03-30 16:15:49 ----D---- C:\Program Files\Autodesk
2010-03-30 16:14:31 ----D---- C:\Program Files\Common Files\Autodesk Shared
2010-03-30 16:12:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Autodesk
2010-03-30 16:10:36 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2010-03-30 16:10:36 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2010-03-30 16:10:35 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2010-03-30 16:10:33 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2010-03-30 16:10:33 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2010-03-30 16:10:31 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2010-03-30 16:10:29 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2010-03-30 16:10:29 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2010-03-30 16:10:27 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2010-03-30 16:10:19 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-03-30 16:10:18 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-03-28 19:43:21 ----A---- C:\WINDOWS\system32\VBoxNetFltNotify.dll
2010-03-28 13:46:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\MumboJumbo
2010-03-28 12:46:59 ----D---- C:\Program Files\Common Files\Thraex Software
2010-03-27 13:43:17 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-03-27 13:43:15 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-03-27 13:43:13 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-03-27 13:43:12 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-03-27 13:43:11 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-03-27 13:43:11 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-03-27 13:43:09 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-03-27 13:43:08 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-03-27 13:43:04 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-03-27 13:43:04 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-03-27 13:28:19 ----D---- C:\Program Files\prjMegaTrain
2010-03-27 13:28:17 ----N---- C:\WINDOWS\Setup1.exe
2010-03-27 13:28:15 ----A---- C:\WINDOWS\ST6UNST.EXE
2010-03-27 12:47:59 ----D---- C:\Program Files\Common Files\DirectX
2010-03-25 19:57:13 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Command and Conquer 4
2010-03-24 19:09:11 ----A---- C:\WINDOWS\system32\tsbyuv.dll
2010-03-24 19:09:10 ----A---- C:\WINDOWS\system32\PsisDecd.dll
2010-03-24 19:09:09 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-03-24 19:09:07 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-03-24 19:09:06 ----A---- C:\WINDOWS\system32\msyuv.dll
2010-03-24 19:09:06 ----A---- C:\WINDOWS\system32\iyuv_32.dll
2010-03-20 09:26:08 ----D---- C:\Program Files\MMSSTV
2010-03-16 03:37:50 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-03-16 03:37:50 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-03-16 03:37:50 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-03-16 03:37:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-03-16 03:37:50 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-03-16 03:37:44 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-03-13 20:51:51 ----D---- C:\Program Files\upnito.sk manager
2010-03-13 20:19:19 ----D---- C:\Program Files\Ubisoft
2010-03-13 18:06:54 ----A---- C:\WINDOWS\unvise32.exe
2010-03-10 18:06:38 ----D---- C:\Program Files\XN Resource Editor
2010-03-07 13:51:50 ----D---- C:\Program Files\PECompact

======List of files/folders modified in the last 1 months======

2010-04-06 14:26:51 ----D---- C:\Program Files\trend micro
2010-04-06 14:14:45 ----D---- C:\WINDOWS
2010-04-06 14:14:41 ----A---- C:\WINDOWS\lgfwup.ini
2010-04-06 14:14:35 ----D---- C:\Program Files\lg_fwupdate
2010-04-06 12:35:52 ----SHD---- C:\WINDOWS\Installer
2010-04-06 12:35:52 ----D---- C:\Config.Msi
2010-04-06 12:35:40 ----D---- C:\Program Files\NVIDIA Corporation
2010-04-06 09:27:53 ----D---- C:\WINDOWS\Minidump
2010-04-06 09:27:31 ----SHD---- C:\System Volume Information
2010-04-06 09:27:15 ----D---- C:\WINDOWS\ERDNT
2010-04-06 09:24:39 ----D---- C:\Program Files\Mozilla Thunderbird
2010-04-05 20:00:41 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-04-05 19:45:58 ----D---- C:\WINDOWS\system32
2010-04-05 19:45:02 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-05 19:44:07 ----D---- C:\WINDOWS\Help
2010-04-05 19:43:21 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-05 19:43:19 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-04-05 19:43:10 ----D---- C:\WINDOWS\system32\drivers
2010-04-05 19:39:04 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-05 19:37:26 ----HD---- C:\WINDOWS\inf
2010-04-05 19:23:36 ----A---- C:\WINDOWS\system.ini
2010-04-05 19:20:04 ----RD---- C:\Program Files
2010-04-05 14:47:07 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-05 09:50:41 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-05 09:39:34 ----SD---- C:\WINDOWS\Tasks
2010-04-05 09:38:48 ----D---- C:\WINDOWS\AppPatch
2010-04-05 09:38:42 ----D---- C:\Program Files\Common Files
2010-04-04 16:30:07 ----D---- C:\Program Files\Cheat Engine
2010-04-04 16:25:35 ----RASH---- C:\boot.ini
2010-04-04 16:14:50 ----D---- C:\WINDOWS\system32\DirectX
2010-04-04 16:14:48 ----RSD---- C:\WINDOWS\assembly
2010-04-04 16:11:03 ----D---- C:\Program Files\Common Files\BioWare
2010-04-03 19:24:11 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-04-03 18:52:57 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\GHISLER
2010-04-03 18:06:12 ----D---- C:\Program Files\Mozilla Firefox
2010-04-03 15:45:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-04-03 11:38:51 ----D---- C:\Program Files\GTASAConsole
2010-04-02 17:39:50 ----D---- C:\Fraps
2010-04-01 20:03:33 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Skype
2010-04-01 19:28:31 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\skypePM
2010-04-01 11:17:31 ----A---- C:\WINDOWS\NeroDigital.ini
2010-03-31 18:59:55 ----D---- C:\Program Files\Internet Explorer
2010-03-31 18:59:45 ----D---- C:\WINDOWS\ie8updates
2010-03-31 18:59:32 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-31 16:32:16 ----D---- C:\WINDOWS\Prefetch
2010-03-30 20:08:07 ----D---- C:\WINDOWS\Debug
2010-03-30 16:32:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
2010-03-30 14:26:55 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Spyware Terminator
2010-03-28 19:43:15 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-03-28 08:55:43 ----D---- C:\Program Files\Spyware Terminator
2010-03-27 13:44:05 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-03-23 19:28:13 ----D---- C:\Program Files\SystemRequirementsLab
2010-03-22 15:54:50 ----D---- C:\Program Files\ESET
2010-03-20 09:41:38 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Ahead
2010-03-20 07:57:21 ----D---- C:\Documents and Settings
2010-03-13 20:25:33 ----D---- C:\Documents and Settings\VaRgA\Data aplikací\Ubisoft
2010-03-13 20:25:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
2010-03-13 20:19:01 ----D---- C:\WINDOWS\WinSxS
2010-03-13 17:41:18 ----D---- C:\Program Files\LEGO Company
2010-03-13 12:38:59 ----D---- C:\WINDOWS\Uninstall
2010-03-13 12:12:13 ----A---- C:\WINDOWS\win.ini
2010-03-13 12:12:13 ----A---- C:\Boot.bak
2010-03-13 12:12:02 ----D---- C:\WINDOWS\pss
2010-03-12 12:26:36 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2010-03-11 18:51:27 ----RSD---- C:\WINDOWS\Fonts
2010-03-11 18:43:37 ----A---- C:\WINDOWS\system32\TUKernel.exe
2010-03-10 20:55:27 ----D---- C:\Program Files\Movie Maker

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-09-11 108792]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2009-09-11 55768]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-07-27 58908]
R1 VBoxDrv;VirtualBox Service; C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys [2010-02-12 123280]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-09-11 116008]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2009-09-11 135048]
R2 VMM;VMM; \??\C:\WINDOWS\system32\drivers\VMM.sys []
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2009-06-19 33096]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-10-22 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-12-11 4959232]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-03-16 10232352]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-11-27 58368]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-11-27 19968]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-10-31 47360]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 WFLR6654;WinFast TV2000 XP Expert (FM1216MK3); C:\WINDOWS\system32\drivers\wfeaglxt.sys [2008-12-25 433792]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 DrvAgent32;DrvAgent32; \??\C:\WINDOWS\system32\Drivers\DrvAgent32.sys []
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-02-01 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-02-01 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-02-01 21568]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SE1008mdm;Sony Ericsson SE1008 Mobile Device Full USB Driver; C:\WINDOWS\system32\DRIVERS\SE1008mdm.sys [2009-02-12 58536]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-11-16 735960]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-03-16 154216]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-11-16 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-02-19 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-03-14 779824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: Preventívna Kontrola Logu

Napsal: 06 dub 2010 13:32
od Unlimited_Killer
Je to všem jak se chová PC? :happy:

Re: Preventívna Kontrola Logu

Napsal: 06 dub 2010 13:58
od P.Varga
Viac-menej v poriadku.

Re: Preventívna Kontrola Logu

Napsal: 06 dub 2010 14:08
od Unlimited_Killer
Můžeme tedy ukončit? Nebo ještě máte nějaký požadavek či problém?

Re: Preventívna Kontrola Logu

Napsal: 06 dub 2010 14:14
od P.Varga
Tak asi už to všetko ukončíme.
Takže Vďaka za pomoc a Veľa zdaru z ďalšími problémami.
Všechny časy jsou v UTC+01:00
Stránka 2 z 3

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz