Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

services.exe zatezuje procesor

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
promark
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 dub 2010 11:44

services.exe zatezuje procesor

#1 Příspěvek od promark »

Services.exe a wmiprvse.exe mi celkem dost zatezujou procesor, oba tak kolem 20-40%. MWAV mi nasel nejaky spyware, ale jakykoli jiny antivir nic vubec nenasel, takze moc nevim co s tim. Prosim tedy o kontrolu logu.

MWAV:
** Scanning may fail! File Locked [SUSPICIOUS]: C:\WINDOWS\system32\Drivers\sptd.sys (????)
Object "CoreGuardAntivirus2009 Corrupted Adware/Spyware" found in File System! Action Taken: No Action Taken.
Object "Spyware.NetScreenWatch Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "RegSort Corrupted Adware/Spyware" found in File System! Action Taken: No Action Taken.
Object "Spyware.KeyProwler Corrupted Adware/Spyware" found in File System! Action Taken: No Action Taken.
Object "Your Protection Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Autodesk Design Review 2009". Action Taken: No Action Taken.


Logfile of random's system information tool 1.06 (written by random/random)
Run by Marek at 2010-04-23 12:50:48
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 795 MB (2%) free of 38 GB
Total RAM: 2046 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:50:53, on 23.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WTouch\WTouchService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\WINDOWS\system32\acs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Genie-Soft\Genie Timeline\GenieTimelineService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Pen_Tablet.exe
C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
C:\WINDOWS\System32\TPHDEXLG.exe
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe
C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
C:\WINDOWS\system32\Pen_Tablet.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Lenovo\System Update\SUService.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\TpShocks.exe
C:\Program Files\Genie-Soft\Genie Timeline\WebServer\PHP\php-cgi.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\iPScan.exe
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Bamboo Dock\BambooCore.exe
C:\Program Files\Genie-Soft\Genie Timeline\WebServer\LighttPD\GenieTimelineWebServer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe
C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe
C:\Documents and Settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\Program Files\Genie-Soft\Genie Timeline\GSTimeLineAgent.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\TPFanControl\TPFanControl.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Altap Salamander 2.5\SALAMAND.exe
C:\DOCUME~1\Marek\LOCALS~1\Temp\mexe.com
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe
C:\Program Files\WTouch\WTouchUser.exe
C:\Documents and Settings\Marek\Plocha\HiJackThis(2).exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\kits\RSIT.exe
C:\Program Files\trend micro\Marek.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe" /startup
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [iPPCamScan] C:\WINDOWS\iPScan.exe
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [BambooCore] C:\Program Files\Bamboo Dock\BambooCore.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [ACTray] C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe
O4 - HKLM\..\Run: [ACWLIcon] C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [TPKMAPMN] C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
O4 - HKCU\..\Run: [Genie TimeLine Tray] C:\Program Files\Genie-Soft\Genie Timeline\GSTimeLineAgent.exe -auto
O4 - HKCU\..\RunOnce: [UniblueRegistryBooster] "C:\Program Files\Uniblue\RegistryBooster\launcher.exe" delay 20000
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: Zástupce - TPFanControl.lnk = C:\Program Files\TPFanControl\TPFanControl.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\palmOne\Hotsync.exe
O4 - Global Startup: TPFanControl.lnk = C:\Program Files\TPFanControl\TPFanControl.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Vytvořit mobilní oblíbenou položku… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra button: PDFill PDF Editor - {FB858B22-55E2-413f-87F5-30ADC5552151} - C:\Program Files\PlotSoft\PDFill\DownloadPDF.exe
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.5.0.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: ACNotify - ACNotify.dll (file missing)
O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
O23 - Service: Atheros Configuration Service (acs) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Access Connections Main Service (AcSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Autodesk Network Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskNetSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Genie Timeline Service (GenieTimelineService) - Genie-Soft - C:\Program Files\Genie-Soft\Genie Timeline\GenieTimelineService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit (mi-raysat_3dsMax2009_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
O23 - Service: Power Manager DBC Service - Unknown owner - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - C:\Program Files\Lenovo\System Update\SUService.exe
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\WINDOWS\system32\Pen_Tablet.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
O23 - Service: WTouch Service (WTouchService) - Wacom Technology, Corp. - C:\Program Files\WTouch\WTouchService.exe

--
End of file - 15035 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\PMTask.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TVT Scheduler Proxy"=C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe [2008-03-04 487424]
"TPHOTKEY"=C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe [2006-10-02 94208]
"PWRMGRTR"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor []
"BLOG"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog []
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-07-03 1323008]
""= []
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2008-06-06 181536]
"TP4EX"=C:\WINDOWS\system32\tp4ex.exe [2005-10-17 65536]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2004-08-06 860160]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"EZEJMNAP"=C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe [2008-06-05 242976]
"PSQLLauncher"=C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [2008-06-24 49928]
"TPKMAPHELPER"=C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe [2007-01-09 868352]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-08-04 36352]
"UpdateManager"=C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe [2003-08-19 110592]
"iPPCamScan"=C:\WINDOWS\iPScan.exe [2008-01-23 86016]
"PAC7302_Monitor"=C:\WINDOWS\PixArt\PAC7302\Monitor.exe [2006-11-03 319488]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-10-25 652624]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-21 61440]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"BambooCore"=C:\Program Files\Bamboo Dock\BambooCore.exe [2009-12-14 606296]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
"Network Traffic Monitor"= []
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"ACTray"=C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe [2009-12-10 431464]
"ACWLIcon"=C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe [2009-12-10 181608]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-10 216520]
"ISUSPM"=C:\Documents [2009-12-29 40]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"H/PC Connection Agent"=C:\Program Files\Microsoft ActiveSync\Wcescomm.exe [2006-11-13 1289000]
"AdobeBridge"= []
"TPKMAPMN"=C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe [2007-09-21 49152]
"IBM RecordNow!"= []
"Genie TimeLine Tray"=C:\Program Files\Genie-Soft\Genie Timeline\GSTimeLineAgent.exe [2009-10-06 754304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"UniblueRegistryBooster"=C:\Program Files\Uniblue\RegistryBooster\launcher.exe [2010-03-16 60208]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
HotSync Manager.lnk - C:\Program Files\palmOne\Hotsync.exe
TPFanControl.lnk - C:\Program Files\TPFanControl\TPFanControl.exe

C:\Documents and Settings\Marek\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
Zástupce - TPFanControl.lnk - C:\Program Files\TPFanControl\TPFanControl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ACNotify]
C:\Program Files\ThinkPad\ConnectUtilities\ACNotify.dll [2009-12-10 32768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-07-21 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\WINDOWS\system32\psqlpwd.dll [2008-06-24 95496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
C:\WINDOWS\system32\notifyf2.dll [2005-07-06 28672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
C:\WINDOWS\system32\tphklock.dll [2005-11-30 24576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
psqlpwd
ACGina

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=91000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\mmc.exe"="C:\WINDOWS\system32\mmc.exe:*:Enabled:Konzola Microsoft Management Console"
"C:\Program Files\Pidgin\pidgin.exe"="C:\Program Files\Pidgin\pidgin.exe:*:Enabled:Pidgin"
"C:\Program Files\palmOne\Hotsync.exe"="C:\Program Files\palmOne\Hotsync.exe:*:Enabled:HotSync® Manager Application"
"C:\Program Files\Altap Salamander 2.5\salamand.exe"="C:\Program Files\Altap Salamander 2.5\salamand.exe:*:Enabled:Altap Salamander, File Manager"
"C:\Program Files\Autodesk\Backburner\monitor.exe"="C:\Program Files\Autodesk\Backburner\monitor.exe:*:Enabled:backburner 2.3 monitor"
"C:\Program Files\Autodesk\Backburner\manager.exe"="C:\Program Files\Autodesk\Backburner\manager.exe:*:Enabled:backburner 2.3 manager"
"C:\Program Files\Autodesk\Backburner\server.exe"="C:\Program Files\Autodesk\Backburner\server.exe:*:Enabled:backburner 2.3 server"
"C:\Program Files\Autodesk\3ds Max 2009\3dsmax.exe"="C:\Program Files\Autodesk\3ds Max 2009\3dsmax.exe:*:Enabled:Autodesk 3ds Max 2009 32-bit"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{37c5e212-e7d4-11dd-9701-0016cf00f9df}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\boot.com d:


======List of files/folders created in the last 3 months======

2010-04-23 12:50:48 ----D---- C:\rsit
2010-04-23 12:50:48 ----D---- C:\Program Files\trend micro
2010-04-22 12:30:00 ----AD---- C:\WINDOWS\rundll16.exe
2010-04-22 12:30:00 ----AD---- C:\WINDOWS\logo1_.exe
2010-04-22 11:50:34 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-22 11:50:26 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-22 11:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-04-22 11:47:31 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-22 11:47:25 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-22 11:47:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-22 11:47:15 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-22 11:47:11 ----A---- C:\WINDOWS\imsins.BAK
2010-04-22 11:24:29 ----D---- C:\Program Files\Autodesk Revit Architecture 2010
2010-04-22 11:19:36 ----D---- C:\Program Files\Microsoft.NET
2010-04-22 10:50:15 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2010-04-22 10:49:21 ----AD---- C:\WINDOWS\VDLL.DLL
2010-04-22 10:49:21 ----AD---- C:\WINDOWS\system32\runouce.exe
2010-04-22 10:49:21 ----AD---- C:\WINDOWS\RUNDL132.EXE
2010-04-22 10:49:21 ----AD---- C:\WINDOWS\logo_1.exe
2010-04-22 10:44:25 ----A---- C:\WINDOWS\system32\msvcr80.dll
2010-04-22 10:44:23 ----A---- C:\WINDOWS\system32\msvcp80.dll
2010-04-22 10:44:22 ----A---- C:\WINDOWS\system32\eEmpty.exe
2010-04-22 10:44:17 ----A---- C:\WINDOWS\system32\TASKMGR.COM
2010-04-22 10:44:17 ----A---- C:\WINDOWS\system32\T.COM
2010-04-22 10:44:17 ----A---- C:\WINDOWS\REGEDIT.COM
2010-04-22 10:44:17 ----A---- C:\WINDOWS\R.COM
2010-04-22 10:44:15 ----D---- C:\Program Files\Common Files\MicroWorld
2010-04-22 10:44:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
2010-04-22 10:28:14 ----D---- C:\Program Files\CCleaner
2010-04-22 09:35:39 ----A---- C:\WINDOWS\system32\lsdelete.exe
2010-04-21 21:42:32 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-04-21 21:42:06 ----D---- C:\Program Files\Lavasoft
2010-04-21 21:42:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2010-04-21 21:03:33 ----D---- C:\Documents and Settings\Marek\Data aplikací\Uniblue
2010-04-21 21:03:26 ----D---- C:\Program Files\Uniblue
2010-04-19 20:35:42 ----SHD---- C:\Config.Msi
2010-04-18 22:41:14 ----D---- C:\WINDOWS\pss
2010-04-13 10:16:57 ----RA---- C:\WINDOWS\system32\dsaNac.dll
2010-04-13 10:16:57 ----RA---- C:\WINDOWS\system32\dsa.dll
2010-04-13 10:16:57 ----A---- C:\WINDOWS\system32\wsimd.dll
2010-04-13 10:16:57 ----A---- C:\WINDOWS\system32\wsfwDS.dll
2010-03-17 21:41:00 ----A---- C:\WINDOWS\system32\wgapi.dll
2010-03-17 21:41:00 ----A---- C:\WINDOWS\system32\wcapiU.dll
2010-03-17 21:41:00 ----A---- C:\WINDOWS\system32\wcapi.dll
2010-03-17 21:41:00 ----A---- C:\WINDOWS\system32\IPTests.dll
2010-03-17 21:41:00 ----A---- C:\WINDOWS\system32\athcfg20U.dll
2010-03-17 21:41:00 ----A---- C:\WINDOWS\system32\athcfg20resU.dll
2010-03-17 21:41:00 ----A---- C:\WINDOWS\system32\athcfg20res.dll
2010-03-17 21:41:00 ----A---- C:\WINDOWS\system32\athcfg20.dll
2010-03-17 21:41:00 ----A---- C:\WINDOWS\system32\acs.exe
2010-03-17 21:40:59 ----A---- C:\WINDOWS\system32\ssleay32.dll
2010-03-17 21:40:59 ----A---- C:\WINDOWS\system32\libeay32.dll
2010-03-17 21:40:59 ----A---- C:\WINDOWS\system32\athcfg11res.dll
2010-03-17 21:40:59 ----A---- C:\WINDOWS\system32\athcfg11.dll
2010-03-17 21:34:19 ----A---- C:\WINDOWS\system32\ATHCFG10.DLL
2010-03-17 14:31:50 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-03-17 14:25:34 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-03-10 19:42:12 ----D---- C:\Program Files\WinPcap
2010-03-10 19:41:41 ----D---- C:\Program Files\Network Traffic Monitor
2010-02-28 16:12:01 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-28 16:11:53 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-28 16:07:01 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-28 16:06:45 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-02-28 16:06:04 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-28 16:05:35 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-28 16:05:09 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-28 16:04:42 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-28 16:04:05 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2010-02-28 14:21:47 ----A---- C:\WINDOWS\ModemLog_Nokia 6300 Bluetooth Modem.txt
2010-02-27 13:03:46 ----HDC---- C:\WINDOWS\$NtUninstallKB952011$
2010-02-18 12:38:57 ----D---- C:\Documents and Settings\Marek\Data aplikací\Genie-Soft
2010-02-18 12:37:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Genie-Soft
2010-02-18 12:36:01 ----D---- C:\Program Files\Genie-Soft
2010-02-18 12:32:27 ----D---- C:\Program Files\Common Files\Akamai
2010-02-16 13:14:34 ----D---- C:\Program Files\IKEA HomePlanner
2010-02-16 00:14:07 ----D---- C:\Program Files\Microsoft Silverlight
2010-02-15 00:57:13 ----D---- C:\Documents and Settings\Marek\Data aplikací\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2010-02-14 23:43:42 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-02-14 23:43:32 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-02-14 23:43:22 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-01-29 11:16:09 ----HDC---- C:\WINDOWS\$NtUninstallWudf01007$
2010-01-29 10:33:30 ----D---- C:\Program Files\Common Files\PCSuite
2010-01-29 10:33:19 ----D---- C:\Program Files\Common Files\Nokia
2010-01-29 10:32:50 ----D---- C:\Program Files\PC Connectivity Solution
2010-01-29 10:31:32 ----D---- C:\Program Files\Nokia

======List of files/folders modified in the last 3 months======

2010-04-23 12:50:48 ----RD---- C:\Program Files
2010-04-23 12:50:23 ----D---- C:\kits
2010-04-23 12:43:54 ----D---- C:\WINDOWS\Temp
2010-04-22 12:30:00 ----D---- C:\WINDOWS
2010-04-22 12:20:42 ----D---- C:\WINDOWS\Microsoft.NET
2010-04-22 12:20:22 ----RSD---- C:\WINDOWS\assembly
2010-04-22 12:01:00 ----SD---- C:\WINDOWS\Tasks
2010-04-22 11:57:32 ----HD---- C:\WINDOWS\inf
2010-04-22 11:56:54 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-22 11:55:16 ----D---- C:\Documents and Settings\Marek\Data aplikací\WTablet
2010-04-22 11:54:16 ----D---- C:\WINDOWS\system32
2010-04-22 11:54:15 ----D---- C:\Program Files\uTorrent
2010-04-22 11:51:26 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-22 11:50:38 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-22 11:50:31 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-22 11:50:27 ----D---- C:\WINDOWS\system32\drivers
2010-04-22 11:47:53 ----D---- C:\WINDOWS\Debug
2010-04-22 11:47:02 ----D---- C:\WINDOWS\system32\cs-cz
2010-04-22 11:47:02 ----D---- C:\Program Files\Internet Explorer
2010-04-22 11:46:52 ----D---- C:\WINDOWS\ie7updates
2010-04-22 11:39:22 ----RSD---- C:\WINDOWS\Fonts
2010-04-22 11:33:05 ----D---- C:\Documents and Settings\Marek\Data aplikací\.purple
2010-04-22 11:30:21 ----SHD---- C:\WINDOWS\Installer
2010-04-22 11:29:13 ----SD---- C:\Documents and Settings\Marek\Data aplikací\Microsoft
2010-04-22 11:29:13 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-04-22 11:25:19 ----D---- C:\Program Files\Common Files\Autodesk Shared
2010-04-22 11:25:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Autodesk
2010-04-22 11:22:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-04-22 11:21:50 ----D---- C:\Documents and Settings\Marek\Data aplikací\uTorrent
2010-04-22 11:20:05 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-04-22 11:20:00 ----D---- C:\Program Files\Microsoft Visual Studio 9.0
2010-04-22 11:18:25 ----D---- C:\Program Files\Autodesk
2010-04-22 11:18:13 ----D---- C:\Documents and Settings\Marek\Data aplikací\Autodesk
2010-04-22 11:14:33 ----D---- C:\WINDOWS\WinSxS
2010-04-22 11:05:53 ----D---- C:\Autodesk
2010-04-22 10:50:33 ----D---- C:\WINDOWS\system32\mui
2010-04-22 10:44:15 ----D---- C:\Program Files\Common Files
2010-04-22 10:31:52 ----D---- C:\WINDOWS\Minidump
2010-04-22 09:33:50 ----D---- C:\WINDOWS\repair
2010-04-21 21:45:21 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-04-20 12:48:49 ----D---- C:\Program Files\Mozilla Firefox
2010-04-19 09:58:29 ----D---- C:\WINDOWS\Registration
2010-04-18 23:55:02 ----D---- C:\Documents and Settings\Marek\Data aplikací\gtk-2.0
2010-04-17 23:05:04 ----A---- C:\WINDOWS\ModemLog_Bluetooth Modem.txt
2010-04-13 10:18:33 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-13 10:16:43 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-04-13 10:05:11 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-10 02:30:02 ----D---- C:\Program Files\QuickTime
2010-04-10 02:20:46 ----D---- C:\Program Files\Safari
2010-04-07 22:37:06 ----D---- C:\Program Files\AutoCAD 2009
2010-04-06 19:52:54 ----AC---- C:\WINDOWS\system32\MRT.exe
2010-03-17 21:34:21 ----D---- C:\Program Files\Lenovo
2010-03-17 14:31:52 ----D---- C:\Program Files\Movie Maker
2010-03-17 02:57:16 ----D---- C:\FA CVUT
2010-03-11 22:30:17 ----D---- C:\hudba
2010-03-11 14:36:24 ----A---- C:\WINDOWS\system32\wininet.dll
2010-03-11 14:36:23 ----N---- C:\WINDOWS\system32\occache.dll
2010-03-11 14:36:23 ----N---- C:\WINDOWS\system32\mstime.dll
2010-03-11 14:36:23 ----N---- C:\WINDOWS\system32\msrating.dll
2010-03-11 14:36:23 ----A---- C:\WINDOWS\system32\webcheck.dll
2010-03-11 14:36:23 ----A---- C:\WINDOWS\system32\urlmon.dll
2010-03-11 14:36:23 ----A---- C:\WINDOWS\system32\url.dll
2010-03-11 14:36:23 ----A---- C:\WINDOWS\system32\pngfilt.dll
2010-03-11 14:36:23 ----A---- C:\WINDOWS\system32\mshtmled.dll
2010-03-11 14:36:23 ----A---- C:\WINDOWS\system32\mshtml.dll
2010-03-11 14:36:22 ----N---- C:\WINDOWS\system32\jsproxy.dll
2010-03-11 14:36:22 ----N---- C:\WINDOWS\system32\iernonce.dll
2010-03-11 14:36:22 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2010-03-11 14:36:22 ----A---- C:\WINDOWS\system32\msfeeds.dll
2010-03-11 14:36:22 ----A---- C:\WINDOWS\system32\iertutil.dll
2010-03-11 14:36:22 ----A---- C:\WINDOWS\system32\iepeers.dll
2010-03-11 14:36:21 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2010-03-11 14:36:21 ----N---- C:\WINDOWS\system32\ieaksie.dll
2010-03-11 14:36:21 ----N---- C:\WINDOWS\system32\ieakeng.dll
2010-03-11 14:36:21 ----N---- C:\WINDOWS\system32\extmgr.dll
2010-03-11 14:36:21 ----A---- C:\WINDOWS\system32\ieframe.dll
2010-03-11 14:36:21 ----A---- C:\WINDOWS\system32\ieencode.dll
2010-03-11 14:36:21 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2010-03-11 14:36:21 ----A---- C:\WINDOWS\system32\icardie.dll
2010-03-11 14:36:20 ----N---- C:\WINDOWS\system32\dxtrans.dll
2010-03-11 14:36:20 ----N---- C:\WINDOWS\system32\dxtmsft.dll
2010-03-11 14:36:20 ----A---- C:\WINDOWS\system32\corpol.dll
2010-03-11 14:36:20 ----A---- C:\WINDOWS\system32\advpack.dll
2010-03-10 15:17:16 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2010-03-10 15:17:16 ----A---- C:\WINDOWS\system32\ieudinit.exe
2010-03-09 13:11:23 ----A---- C:\WINDOWS\system32\vbscript.dll
2010-03-08 01:42:11 ----D---- C:\Program Files\CINEMA 4D R11.5
2010-03-03 14:18:07 ----D---- C:\CAD
2010-02-28 14:22:15 ----A---- C:\WINDOWS\ModemLog_ThinkPad Integrated 56K Modem.txt
2010-02-28 13:16:10 ----D---- C:\WINDOWS\Prefetch
2010-02-23 07:18:28 ----N---- C:\WINDOWS\system32\ieakui.dll
2010-02-20 11:12:32 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-02-18 15:25:38 ----D---- C:\PROGRAM1
2010-02-18 15:23:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\2DBoy
2010-02-17 14:09:02 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2010-02-16 21:09:02 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2010-02-16 13:14:05 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-02-12 06:35:01 ----A---- C:\WINDOWS\system32\6to4svc.dll
2010-02-11 11:35:16 ----D---- C:\Documents and Settings\Marek\Data aplikací\U3
2010-02-10 23:34:59 ----D---- C:\fotky
2010-02-02 10:37:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-02-02 10:37:18 ----D---- C:\Documents and Settings\Marek\Data aplikací\Adobe
2010-02-02 10:36:19 ----D---- C:\Program Files\Adobe
2010-02-01 13:31:27 ----A---- C:\WINDOWS\SemTel.ini
2010-01-31 19:50:22 ----AD---- C:\Program Files\Altap Salamander 2.5
2010-01-29 11:31:52 ----D---- C:\Documents and Settings\Marek\Data aplikací\PC Suite
2010-01-29 11:23:45 ----D---- C:\Documents and Settings\Marek\Data aplikací\Nokia
2010-01-29 11:15:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Suite
2010-01-29 10:47:11 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-29 10:29:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Installations

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 ANC;ANC; C:\WINDOWS\System32\drivers\ANC.SYS [2009-11-17 11520]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 IBMTPCHK;IBMTPCHK; \??\C:\WINDOWS\system32\Drivers\IBMBLDID.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 Smapint;Smapint; C:\WINDOWS\System32\drivers\Smapint.sys [2006-10-02 14848]
R1 TDSMAPI;TDSMAPI; C:\WINDOWS\System32\drivers\TDSMAPI.SYS [2006-10-02 9343]
R1 TPHKDRV;TPHKDRV; C:\WINDOWS\system32\drivers\TPHKDRV.sys [2005-07-05 17699]
R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwrif.sys [2009-07-28 4442]
R1 TSMAPIP;TSMAPIP; C:\WINDOWS\System32\drivers\TSMAPIP.SYS [2007-03-09 7168]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2005-10-05 12544]
R2 smihlp;SMI Helper Driver (smihlp); \??\C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys []
R2 TVicPort;TVicPort; C:\WINDOWS\system32\drivers\TVicPort.sys [2006-10-13 20512]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2004-05-17 133200]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2009-04-03 1347168]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-07-21 3565056]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2007-05-02 161792]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2005-08-29 853258]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-10-18 998656]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2005-10-18 242304]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2008-09-29 23848]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-18 5888]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-02-10 260224]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-10-24 6784]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-07-03 225664]
R3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers\tcusb.sys [2008-01-30 50576]
R3 TPInput;TPInput; C:\WINDOWS\System32\DRIVERS\TPInput.sys [2006-09-26 6528]
R3 TPM;Winbond Trusted Platform Module; C:\WINDOWS\system32\DRIVERS\tpm.sys [2005-10-09 17792]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 wacommousefilter;Wacom Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\wacommousefilter.sys [2007-02-16 11312]
R3 wacomvhid;Wacom Virtual Hid Driver; C:\WINDOWS\system32\DRIVERS\wacomvhid.sys [2009-05-20 13736]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-10-18 721280]
R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2008-02-08 57408]
S2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys []
S3 acsm6a9l;acsm6a9l; C:\WINDOWS\system32\drivers\acsm6a9l.sys []
S3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys []
S3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2005-08-29 428269]
S3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2005-08-29 30363]
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2005-08-29 148360]
S3 btwmodem;Bluetooth Modem; C:\WINDOWS\system32\DRIVERS\btwmodem.sys [2005-08-29 30221]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2005-08-29 64344]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 DCamUSBTP10;StarCam mini+; C:\WINDOWS\System32\Drivers\iP293x.sys [2008-01-28 241920]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2008-03-28 101120]
S3 motccgp;Motorola USB Composite Device Driver; C:\WINDOWS\system32\DRIVERS\motccgp.sys [2009-06-19 19712]
S3 motccgpfl;MotCcgpFlService; C:\WINDOWS\system32\DRIVERS\motccgpfl.sys [2009-01-29 8320]
S3 MotDev;Motorola Inc. USB Device; C:\WINDOWS\system32\DRIVERS\motodrv.sys [2009-05-08 42752]
S3 motmodem;Motorola USB CDC ACM Driver; C:\WINDOWS\system32\DRIVERS\motmodem.sys [2009-10-27 23936]
S3 motport;Motorola USB Diagnostic Port; C:\WINDOWS\system32\DRIVERS\motport.sys [2009-10-27 23936]
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2009-10-20 50704]
S3 PAC7302;PAC7302 VGA USB Camera; C:\WINDOWS\system32\DRIVERS\PAC7302.SYS [2007-06-14 457856]
S3 PalmUSBD;PalmUSBD; C:\WINDOWS\system32\drivers\PalmUSBD.sys [2009-01-05 16694]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 PcdrNdisuio;PCDRNDISUIO Usermode I/O Protocol; C:\WINDOWS\system32\DRIVERS\pcdrndisuio.sys []
S3 pnetmdm;PdaNet Modem; C:\WINDOWS\system32\DRIVERS\pnetmdm.sys [2006-01-01 8576]
S3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2007-02-19 21376]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2008-04-13 12800]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WacomVKHid;Virtual Keyboard Driver; C:\WINDOWS\system32\DRIVERS\WacomVKHid.sys []
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2006-11-06 28672]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcPrfMgrSvc;Ac Profile Manager Service; C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe [2009-12-10 103784]
R2 acs;Atheros Configuration Service; C:\WINDOWS\system32\acs.exe [2009-09-24 475220]
R2 AcSvc;Access Connections Main Service; C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe [2009-12-10 230760]
R2 Akamai;Akamai NetSession Interface; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-07-21 602112]
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2008-12-30 85096]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2005-08-29 266295]
R2 CCALib8;Canon Camera Access Library 8; C:\Program Files\Canon\CAL\CALMAIN.exe [2005-09-30 96341]
R2 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R2 GenieTimelineService;Genie Timeline Service; C:\Program Files\Genie-Soft\Genie Timeline\GenieTimelineService.exe [2009-10-06 270976]
R2 IBMPMSVC;ThinkPad PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2008-09-29 38176]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [2008-03-10 65536]
R2 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2009-07-28 53248]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 SUService;System Update; C:\Program Files\Lenovo\System Update\SUService.exe [2008-10-20 28672]
R2 TabletServicePen;TabletServicePen; C:\WINDOWS\system32\Pen_Tablet.exe [2009-11-23 4497704]
R2 ThinkVantage Registry Monitor Service;ThinkVantage Registry Monitor Service; C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [2007-09-26 644408]
R2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG.exe [2008-05-14 37416]
R2 TpKmpSVC;IBM KCU Service; C:\WINDOWS\system32\TpKmpSVC.exe [2006-06-29 32768]
R2 TVT Scheduler;TVT Scheduler; C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [2008-03-04 1122304]
R2 WTouchService;WTouch Service; C:\Program Files\WTouch\WTouchService.exe [2009-11-23 113448]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-04-21 1265264]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Network Licensing Service;Autodesk Network Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskNetSrv.exe [2008-06-05 1322648]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-10-22 655624]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-08-01 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2009-10-20 117264]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
stell
VIP in memoriam
VIP in memoriam
Příspěvky: 5175
Registrován: 09 pro 2007 09:27
Bydliště: SK-REVUCA
Kontaktovat uživatele:
Kontaktovat uživatele stell

Re: services.exe zatezuje procesor

#2 Příspěvek od stell »

Zdravim
Mwav uz je slepy ako patron
mas tam worma a kto vie co este.
1:pripoj USB-kluce
-Stiahni na plochu UsbFix
-spust>>zvol Jazyk E-[enter]
-stlac 2-[enter]>po skane log vloz sem
2:
http://download.bleepingcomputer.com/ma ... -setup.exe
Stiahnes>>Malwarebytes' Anti-Malware stiahnut-nainstalovat -aktualizovat-
sprav komplet skan,co najde zmaz,log vloz sem,
a potom sa uvidi ako dalej
Dôležité informácie.
NEŠLAPE Vám počítač?
Je zavirovaný? Šlape pomalu? Nefunguje program? Problém s instalací?
Využíjte služby vzdálené pomoci!
Obrázek
e-mail: stell(zavináč)forum.viry.cz
Thanks! Vďaka!
Obrázek
Nahoru
promark
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 dub 2010 11:44

Re: services.exe zatezuje procesor

#3 Příspěvek od promark »

Dekuju za rady posilam log z usbfixu a zacinam skakovat mbam


############################## | UsbFix V6.108 |

User : Marek (Administrators) # T43P
Update on 23/04/2010 by El Desaparecido , C_XX & Chimay8
Start at: 19:39:48 | 23.4.2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Pentium(R) M processor 2.13GHz
Systém Microsoft Windows XP Professional (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 7.0.5730.13
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1335 [VPS 100422-1] 4.8.1335 [ Enabled | Updated ]

C:\ -> Místní pevný disk # 37,26 Go (708,39 Mo free) [Base] # NTFS
D:\ -> Disk CD-ROM
E:\ -> Disk CD-ROM
F:\ -> Disk CD-ROM # 5,49 Mo (0 Mo free) [U3 System] # CDFS
G:\ -> Vyměnitelný disk # 483,56 Mo (0,64 Mo free) # FAT
H:\ -> Místní pevný disk # 149,05 Go (23,19 Go free) [Free agent] # NTFS
I:\ -> Vyměnitelný disk # 7,77 Go (7,38 Go free) # FAT32
Y:\ -> Síťové připojení
Z:\ -> Síťové připojení # 457,25 Go (172,91 Go free) [Public] # NTFS

################## | Files # Infected Folders |

Deleted ! C:\WINDOWS\regedit.com
Deleted ! C:\WINDOWS\rundl132.exe
Deleted ! C:\DOCUME~1\Marek\LOCALS~1\Temp\bdc.exe
Deleted ! C:\DOCUME~1\Marek\LOCALS~1\Temp\KK.EXE
Deleted ! C:\log.txt
Deleted ! C:\Recycler\S-1-5-21-1123561945-1202660629-682003330-1003
(!) Not deleted ! F:\autorun.inf
Deleted ! G:\autorun.bat
Deleted ! G:\autorun.bin
Deleted ! G:\autorun.exe
Deleted ! G:\AUTORUN.FCB
Deleted ! G:\autorun.ini
Deleted ! G:\autorun.reg
Deleted ! G:\autorun.txt
Deleted ! G:\autorun.vbs
Deleted ! G:\autorun.wsh
Deleted ! H:\winamp_cache_0001.xml
Deleted ! H:\Recycler\S-1-5-21-1123561945-1202660629-682003330-1003
Deleted ! H:\Recycler\S-1-5-21-1202660629-1972579041-839522115-1003

################## | Registry |


################## | Mountpoints2 |

Deleted ! HKCU\...\Explorer\MountPoints2\{37c5e212-e7d4-11dd-9701-0016cf00f9df}\Shell\AutoRun\Command
Deleted ! HKCU\...\Explorer\MountPoints2\{37c5e230-e7d4-11dd-9701-0016cf00f9df}\Shell\AutoRun\Command
Deleted ! HKCU\...\Explorer\MountPoints2\{37c5e231-e7d4-11dd-9701-0016cf00f9df}\Shell\AutoRun\Command
Deleted ! HKCU\...\Explorer\MountPoints2\{37c5e232-e7d4-11dd-9701-0016cf00f9df}\Shell\AutoRun\Command
Deleted ! HKCU\...\Explorer\MountPoints2\{37c5e233-e7d4-11dd-9701-0016cf00f9df}\Shell\AutoRun\Command
Deleted ! HKCU\...\Explorer\MountPoints2\{b8ff7890-254b-11de-971d-0016cf00f9df}\Shell\AutoRun\Command
Deleted ! HKCU\...\Explorer\MountPoints2\{de20013e-2e0e-11de-971f-0016cf00f9df}\Shell\AutoRun\Command

################## | Listing of the present files |

[23.04.2010 19:29|--a------|444] C:\aaw7boot.log
[29.12.2008 15:01|---------|0] C:\AUTOEXEC.BAT
[03.04.2009 23:10|--a------|192] C:\BcBtRmv.log
[29.12.2008 14:55|---hs----|211] C:\boot.ini
[18.08.2004 14:00|-rahs----|4952] C:\Bootfont.bin
[29.12.2008 15:01|--a------|0] C:\CONFIG.SYS
[29.12.2009 15:01|--a------|40] C:\Documents
[?|?|?] C:\hiberfil.sys
[29.12.2008 15:01|-rahs----|0] C:\IO.SYS
[25.09.2009 01:14|--a------|4781] C:\moduleName.txt
[29.12.2008 15:01|-rahs----|0] C:\MSDOS.SYS
[18.08.2004 14:00|-rahs----|47564] C:\NTDETECT.COM
[30.12.2008 15:47|-rahs----|250576] C:\ntldr
[23.04.2010 19:27|--a------|0] C:\OverlayCache.dat
[14.03.2009 04:24|--a------|230432] C:\PA7302.DAT
[?|?|?] C:\pagefile.sys
[23.04.2010 19:58|--a------|3393] C:\UsbFix.txt
[12.05.2006 00:13|-r-------|279] F:\autorun.inf
[19.04.2006 00:33|-r-------|950272] F:\LaunchU3.exe
[12.05.2006 00:55|-r-------|4746395] F:\LaunchPad.zip
[19.04.2006 00:33|-ra------|950272] G:\LaunchU3.exe
[02.06.2007 01:16|--a------|2700090] G:\Front page.psd.jpg
[27.04.2007 20:58|--a------|3604205] G:\SKAM_VIII.jpg
[21.04.2008 20:58|--a------|33280] G:\Maturitni_otazky_FJ_08-poslat_Adamovi.doc
[21.04.2008 20:58|--a------|35328] G:\2._gramatika.doc
[21.04.2008 21:02|--a------|4937] G:\cestina.rtf
[21.04.2008 21:03|--a------|33280] G:\jazykoveda.doc
[24.04.2008 09:41|--a------|1627545] G:\mh.odp
[27.04.2008 15:37|--a------|31232] G:\Palais_Ideal-expose_v_Cj.doc
[27.04.2008 15:39|--a------|32768] G:\Neohebne_slovni_druhy.doc
[27.04.2008 16:14|--a------|3482] G:\zidle.jpg
[27.04.2008 16:19|--a------|8083] G:\surf.jpg
[27.04.2008 16:27|--a------|18552] G:\240px-Nietzsche1882.jpg
[27.04.2008 21:09|--a------|14765] G:\Flamengo_Kure_V_Hodinkach_1972.seedpeer.torrent
[16.08.2001 07:42|-rahs----|2238] G:\Autorun.ico
[18.08.2004 13:00|--ah-----|59024] G:\sere1257.fon
[31.01.2010 18:49|--a------|10431] G:\salam_keys25.zip
[31.01.2010 18:46|--a------|5848544] G:\salam_25f.exe
[10.02.2010 23:58|--a------|2192638] G:\portfolio10.pdf
[14.01.2010 14:33|--a------|860620289] H:\CINEMA 4D R11.5.ZIP
[07.11.2007 08:00|--a------|17734] H:\eula.1028.txt
[07.11.2007 08:00|--a------|17734] H:\eula.1031.txt
[07.11.2007 08:00|--a------|10134] H:\eula.1033.txt
[07.11.2007 08:00|--a------|17734] H:\eula.1036.txt
[07.11.2007 08:00|--a------|17734] H:\eula.1040.txt
[07.11.2007 08:00|--a------|118] H:\eula.1041.txt
[07.11.2007 08:00|--a------|17734] H:\eula.1042.txt
[07.11.2007 08:00|--a------|17734] H:\eula.2052.txt
[07.11.2007 08:00|--a------|17734] H:\eula.3082.txt
[07.11.2007 08:00|--a------|1110] H:\globdata.ini
[01.03.2010 12:23|--a------|2252800] H:\inspirace.indd
[01.03.2010 12:16|--a------|1248549] H:\inspirace1.pdf
[07.11.2007 08:03|--a------|562688] H:\install.exe
[07.11.2007 08:00|--a------|843] H:\install.ini
[07.11.2007 08:03|--a------|76304] H:\install.res.1028.dll
[07.11.2007 08:03|--a------|96272] H:\install.res.1031.dll
[07.11.2007 08:03|--a------|91152] H:\install.res.1033.dll
[07.11.2007 08:03|--a------|97296] H:\install.res.1036.dll
[07.11.2007 08:03|--a------|95248] H:\install.res.1040.dll
[07.11.2007 08:03|--a------|81424] H:\install.res.1041.dll
[07.11.2007 08:03|--a------|79888] H:\install.res.1042.dll
[07.11.2007 08:03|--a------|75792] H:\install.res.2052.dll
[07.11.2007 08:03|--a------|96272] H:\install.res.3082.dll
[19.04.2010 18:20|--a------|173] H:\pmp_usb.ini
[07.11.2007 08:00|--a------|5686] H:\vcredist.bmp
[07.11.2007 08:09|--a------|1442522] H:\VC_RED.cab
[07.11.2007 08:12|--a------|232960] H:\VC_RED.MSI
[02.12.2008 11:52|--a------|7360680] I:\CarryItEasy.exe
[28.12.2007 17:14|---------|12379524] Z:\pidgin-2.3.1.exe
[03.10.2008 01:35|---------|1658974165] Z:\AutoCAD_Architecture_2009_Czech_Win_32bit.exe
[27.11.2008 09:15|---------|3285299356] Z:\Image.nrg
[08.10.2007 21:15|---------|42496] Z:\smlouva1Patro.doc
[28.09.2008 18:10|---------|44032] Z:\smlouva1Patro2.doc
[06.10.2009 20:33|---------|41984] Z:\smlouva1Patro3.doc
[29.11.2007 01:32|---------|9336] Z:\zivotopisarch.odt
[23.12.2008 10:55|---------|81408] Z:\PotvrzeniOStudiu.doc
[24.12.2008 10:31|---------|1216000] Z:\starefotky.ppt
[02.02.2009 23:51|---------|2618793984] Z:\7000.0.081212-1400_client_en-us_Ultimate-GB1CULFRE_EN_DVD.iso
[23.02.2009 18:30|---------|155631] Z:\PressGradR2a_TD20feb09.ps
[25.02.2009 09:58|---------|124169] Z:\PressGradR2a_TD20feb09.pdf
[16.02.2008 09:59|---------|18432] Z:\PronajemNaklady.xls
[03.03.2009 12:27|---------|717277] Z:\OSVC_2008_v1_14.zfo
[30.04.2009 10:55|---------|719042] Z:\OSVC_Zuzana_08.zfo
[10.04.2010 23:03|---h-----|21508] Z:\.DS_Store
[09.04.2009 07:42|---------|22016] Z:\Sousedi.doc
[09.04.2009 07:57|---------|25088] Z:\Document Scrap '669 02 Znojmo...'.shs
[09.04.2009 07:58|---------|25088] Z:\Document Scrap (2) '669 02 Znojmo...'.shs
[09.04.2009 07:42|---------|22016] Z:\SousediKasal.doc
[09.04.2009 07:40|---------|22016] Z:\SousediPliskova.doc
[19.04.2009 12:09|---------|56320] Z:\vizitkaTFeng.doc
[19.04.2009 12:22|---------|57344] Z:\vizitkaTFeng2.doc
[30.04.2009 11:07|---------|718989] Z:\OSVC_Tomas.zfo
[19.04.2009 12:36|---------|58880] Z:\vizitkaTFeng2CR.doc
[09.10.2009 10:57|---h-----|139] Z:\.~lock.Calgary Frisco.doc#
[09.10.2009 10:57|---------|16384] Z:\Calgary Frisco.doc
[10.10.2009 11:37|---------|625755136] Z:\mails.pst
[10.10.2009 11:37|---------|639976448] Z:\outlook.pst
[07.11.2009 14:13|---------|1690092] Z:\SILZ.jpg
[09.11.2009 20:25|---------|29696] Z:\KUPNÖ SMLOUVA.doc
[17.11.2009 12:08|---------|19689472] Z:\PraniOndrovi80.ppt
[17.11.2009 11:55|---h-----|4096] Z:\._PraniOndrovi80.ppt
[06.01.2010 22:29|---------|5803987] Z:\Fig1.eps
[21.03.2010 23:51|---------|29696] Z:\ParteJarousek.doc
[26.03.2010 07:17|---------|5386240] Z:\70961140_2008.mdb
[28.03.2010 18:41|---------|2141316] Z:\garazviz1.jpg

################## | Vaccination |

# C:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# G:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# H:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# I:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# Z:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).

################## | Upload |

Please send the file : C:\UsbFix_Upload_Me_T43P.zip : http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution .

################## | ! End of report # UsbFix V6.108 ! |
Nahoru
promark
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 dub 2010 11:44

Re: services.exe zatezuje procesor

#4 Příspěvek od promark »

log z mbam:
Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databáze: 4026

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

24.4.2010 1:33:58
mbam-log-2010-04-24 (01-33-58).txt

Typ skenu: Úplný sken (C:\|H:\|Z:\|)
Skenované objekty: 223934
Uplynulý čas: 5 hodina(y), 10 minuta(y), 36 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
H:\iso\Cinema 4D Studio Bundle R11\keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
H:\program files\Cubase SX 3\UNWISE.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
Nahoru
Uživatelský avatar
stell
VIP in memoriam
VIP in memoriam
Příspěvky: 5175
Registrován: 09 pro 2007 09:27
Bydliště: SK-REVUCA
Kontaktovat uživatele:
Kontaktovat uživatele stell

Re: services.exe zatezuje procesor

#5 Příspěvek od stell »

ok,este combofix
PROSIM CITAJTE POZORNE NAVODY!!!,

Stáhněte na plochu, ukončete všechna aktivní okna a spusťte>>
http://download.bleepingcomputer.com/sUBs/ComboFix.exe



Suhlasit instalacio Konzoly pre zotavenie (Recovery console)


- ComboFix je třeba spustit pod účtem s právy administrátora.
- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano;

A este raz >ANO<

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího modreho okna

- Po dokončení skenování, trvajícího maximálně 10-15 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah do svého threadu na forum
- Před použitím ComboFixu je treba vypnout všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary. NAVOD: http://www.bleepingcomputer.com/forums/topic114351.html
Mohou zasahovat do činnosti ComboFixu, což může způsobit, že nebude fungovat korektně.
V případě detekce antiviru u ComboFixu se jedná o falešný poplach.
Dôležité informácie.
NEŠLAPE Vám počítač?
Je zavirovaný? Šlape pomalu? Nefunguje program? Problém s instalací?
Využíjte služby vzdálené pomoci!
Obrázek
e-mail: stell(zavináč)forum.viry.cz
Thanks! Vďaka!
Obrázek
Nahoru
promark
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 dub 2010 11:44

Re: services.exe zatezuje procesor

#6 Příspěvek od promark »

ComboFix 10-04-21.01 - Marek 24.04.2010 22:33:17.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2046.1387 [GMT 2:00]
Spuštěný z: c:\documents and settings\Marek\Plocha\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Marek\Dokumenty\cc_20100422_103357.reg
C:\Documents
c:\windows\regedit.com
c:\windows\system32\taskmgr.com
H:\install.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-24 do 2010-04-24 )))))))))))))))))))))))))))))))
.

2010-04-23 17:58 . 2010-04-23 17:58 301095 ----a-w- C:\UsbFix_Upload_Me_T43P.zip
2010-04-23 17:11 . 2010-03-29 22:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-23 17:11 . 2010-04-23 17:11 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-04-23 17:11 . 2010-03-29 22:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-23 16:42 . 2010-04-23 17:58 -------- d-----w- C:\UsbFix
2010-04-23 10:50 . 2010-04-23 17:44 -------- d-----w- C:\rsit
2010-04-23 10:50 . 2010-04-23 10:50 -------- d-----w- c:\program files\trend micro
2010-04-22 09:24 . 2010-04-22 09:26 -------- d-----w- c:\program files\Autodesk Revit Architecture 2010
2010-04-22 09:19 . 2010-04-22 09:19 -------- d-----w- c:\program files\Microsoft.NET
2010-04-22 08:49 . 2010-04-22 08:49 -------- d---a-w- c:\windows\VDLL.DLL
2010-04-22 08:49 . 2010-04-22 08:49 -------- d---a-w- c:\windows\system32\runouce.exe
2010-04-22 08:49 . 2010-04-22 08:49 -------- d---a-w- c:\windows\logo_1.exe
2010-04-22 08:44 . 2010-04-22 08:44 632064 ----a-w- c:\windows\system32\msvcr80.dll
2010-04-22 08:44 . 2010-04-22 08:44 554240 ----a-w- c:\windows\system32\msvcp80.dll
2010-04-22 08:44 . 2010-04-22 08:44 34048 ----a-w- c:\windows\system32\eEmpty.exe
2010-04-22 08:44 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2010-04-22 08:44 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2010-04-22 08:44 . 2010-04-22 08:44 -------- d-----w- c:\program files\Common Files\MicroWorld
2010-04-22 08:28 . 2010-04-22 08:28 -------- d-----w- c:\program files\CCleaner
2010-04-22 07:35 . 2010-04-21 19:45 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-04-21 19:45 . 2010-02-04 15:53 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-04-21 19:45 . 2010-04-21 19:45 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-04-21 19:42 . 2010-04-21 19:42 -------- d-----w- c:\program files\Lavasoft
2010-04-21 19:03 . 2010-04-21 19:03 -------- d-----w- c:\program files\Uniblue
2010-04-13 08:16 . 2009-05-19 09:41 254022 ----a-w- c:\windows\system32\wsfwDS.dll
2010-04-13 08:16 . 2009-05-19 09:41 249924 ----a-w- c:\windows\system32\wsimd.dll
2010-04-13 08:16 . 2009-05-19 09:23 82017 ----a-r- c:\windows\system32\dsaNac.dll
2010-04-13 08:16 . 2009-05-19 09:23 1269854 ----a-r- c:\windows\system32\dsa.dll
2010-04-13 08:16 . 2008-02-08 07:46 57408 ----a-w- c:\windows\system32\wsimd.sys
2010-04-13 08:05 . 2009-11-17 17:02 4224 ----a-w- c:\windows\system32\drivers\IBMBLDID.sys
2010-04-13 08:05 . 2009-11-17 17:02 11520 ----a-w- c:\windows\system32\drivers\ANC.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-24 20:44 . 2010-02-18 10:32 -------- d-----w- c:\program files\Common Files\Akamai
2010-04-24 20:41 . 2010-03-10 17:18 0 ----a-w- C:\OverlayCache.dat
2010-04-23 23:40 . 2004-08-18 12:00 77872 ----a-w- c:\windows\system32\perfc005.dat
2010-04-23 23:40 . 2004-08-18 12:00 428750 ----a-w- c:\windows\system32\perfh005.dat
2010-04-23 17:44 . 2009-03-02 20:44 -------- d-----w- c:\program files\Mafia
2010-04-23 17:44 . 2009-01-02 14:25 -------- d-----w- c:\program files\GeoShow3D Lite
2010-04-23 17:44 . 2009-02-02 22:21 -------- d-----w- c:\program files\Autodesk Student Community Download Tool
2010-04-22 09:54 . 2009-06-03 13:06 -------- d-----w- c:\program files\uTorrent
2010-04-22 09:25 . 2008-12-29 22:55 -------- d-----w- c:\program files\Common Files\Autodesk Shared
2010-04-22 09:20 . 2009-02-14 09:36 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0
2010-04-22 09:18 . 2009-02-02 23:03 -------- d-----w- c:\program files\Autodesk
2010-04-22 07:28 . 2009-07-01 08:15 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-04-13 08:05 . 2008-12-29 14:44 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-10 00:30 . 2009-10-23 10:22 -------- d-----w- c:\program files\QuickTime
2010-04-10 00:20 . 2009-06-16 07:08 -------- d-----w- c:\program files\Safari
2010-04-07 20:37 . 2008-12-29 22:55 -------- d-----w- c:\program files\AutoCAD 2009
2010-03-17 19:34 . 2008-12-29 13:56 -------- d-----w- c:\program files\Lenovo
2010-03-11 12:36 . 2004-08-18 12:00 832512 ----a-w- c:\windows\system32\wininet.dll
2010-03-11 12:36 . 2004-08-18 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-03-11 12:36 . 2004-08-18 12:00 17408 ----a-w- c:\windows\system32\corpol.dll
2010-03-10 17:42 . 2010-03-10 17:42 -------- d-----w- c:\program files\WinPcap
2010-03-10 17:41 . 2010-03-10 17:41 -------- d-----w- c:\program files\Network Traffic Monitor
2010-03-09 11:11 . 2004-08-18 12:00 430080 ----a-w- c:\windows\system32\vbscript.dll
2010-03-07 23:42 . 2010-01-15 00:57 -------- d-----w- c:\program files\CINEMA 4D R11.5
2010-02-24 13:11 . 2004-08-18 12:00 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-02-19 23:47 . 2010-02-19 23:47 3604480 ----a-w- c:\windows\system32\GPhotos.scr
2010-02-17 12:09 . 2004-08-18 12:00 2192128 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-16 19:09 . 2004-08-17 15:45 2068992 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-12 04:35 . 2004-08-18 12:00 100864 ----a-w- c:\windows\system32\6to4svc.dll
2010-02-11 12:02 . 2004-08-18 12:00 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-10 216520]
"ISUSPM"="c:\documents and settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-07-12 226904]
"TPKMAPMN"="c:\program files\ThinkPad\Utilities\TpKmapMn.exe" [2007-09-21 49152]
"Genie TimeLine Tray"="c:\program files\Genie-Soft\Genie Timeline\GSTimeLineAgent.exe" [2009-10-06 754304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TVT Scheduler Proxy"="c:\program files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe" [2008-03-04 487424]
"TPHOTKEY"="c:\progra~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe" [2006-10-02 94208]
"PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2009-07-27 421888]
"BLOG"="c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2009-07-27 208896]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-07-03 1323008]
"TpShocks"="TpShocks.exe" [2008-06-06 181536]
"TP4EX"="tp4ex.exe" [2005-10-17 65536]
"SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544]
"EZEJMNAP"="c:\progra~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2008-06-05 242976]
"PSQLLauncher"="c:\program files\ThinkVantage Fingerprint Software\launcher.exe" [2008-06-24 49928]
"TPKMAPHELPER"="c:\program files\ThinkPad\Utilities\TpKmapAp.exe" [2007-01-09 868352]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-03 36352]
"UpdateManager"="c:\program files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 110592]
"iPPCamScan"="c:\windows\iPScan.exe" [2008-01-23 86016]
"PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2006-11-03 319488]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-10-25 652624]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-21 61440]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"ACTray"="c:\program files\ThinkPad\ConnectUtilities\ACTray.exe" [2009-12-10 431464]
"ACWLIcon"="c:\program files\ThinkPad\ConnectUtilities\ACWLIcon.exe" [2009-12-10 181608]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Marek\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-10-5 393216]
Z stupce - TPFanControl.lnk - c:\program files\TPFanControl\TPFanControl.exe [2009-4-18 148992]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2005-8-29 610365]
HotSync Manager.lnk - c:\program files\palmOne\Hotsync.exe [2004-6-9 471040]
TPFanControl.lnk - c:\program files\TPFanControl\TPFanControl.exe [2009-4-18 148992]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
2008-06-24 16:31 95496 ----a-w- c:\windows\system32\psqlpwd.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]
2005-07-05 22:45 28672 ----a-w- c:\windows\system32\notifyf2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]
2005-11-30 19:16 24576 ----a-w- c:\windows\system32\tphklock.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli psqlpwd

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Program Files\\Pidgin\\pidgin.exe"=
"c:\\Program Files\\palmOne\\Hotsync.exe"=
"c:\\Program Files\\Altap Salamander 2.5\\salamand.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\monitor.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\manager.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\server.exe"=
"c:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"1030:TCP"= 1030:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [21.4.2010 21:45 64288]
R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [14.5.2008 17:21 19496]
R0 TPDiskPM;TPDiskPM;c:\windows\system32\drivers\TPDiskPM.sys [29.12.2008 16:52 14848]
R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [18.8.2004 14:00 14336]
R2 GenieTimelineService;Genie Timeline Service;c:\program files\Genie-Soft\Genie Timeline\GenieTimelineService.exe [6.10.2009 14:49 270976]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [4.2.2010 17:52 1265264]
R2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;c:\program files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [10.3.2008 0:04 65536]
R2 Power Manager DBC Service;Power Manager DBC Service;c:\program files\ThinkPad\Utilities\PWMDBSVC.exe [29.12.2008 16:45 53248]
R2 smihlp;SMI Helper Driver (smihlp);c:\program files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys [24.6.2008 18:07 12560]
R3 TPInput;TPInput;c:\windows\system32\drivers\TPInput.sys [29.12.2008 16:52 6528]
S0 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
S3 DCamUSBTP10;StarCam mini+;c:\windows\system32\drivers\iP293x.SYS [17.2.2009 21:16 241920]
S3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\drivers\motccgp.sys [14.1.2010 12:20 19712]
S3 motccgpfl;MotCcgpFlService;c:\windows\system32\drivers\motccgpfl.sys [14.1.2010 12:20 8320]
S3 MotDev;Motorola Inc. USB Device;c:\windows\system32\drivers\motodrv.sys [14.1.2010 12:20 42752]
S3 motport;Motorola USB Diagnostic Port;c:\windows\system32\drivers\motport.sys [14.1.2010 12:20 23936]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [20.10.2009 20:19 50704]
S3 pnetmdm;PdaNet Modem;c:\windows\system32\drivers\pnetmdm.sys [1.1.2006 22:20 8576]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'

2010-04-24 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-02-04 19:44]

2010-04-09 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-04-24 c:\windows\Tasks\PMTask.job
- c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2008-12-29 23:02]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\Marek\Data aplikací\Mozilla\Firefox\Profiles\jmsl4y3d.default\
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npcosmop211.dll
FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
FF - plugin: c:\program files\TabletPlugins\npwacom.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-AdobeBridge - (no file)
HKCU-Run-IBM RecordNow! - (no file)
HKLM-Run-Network Traffic Monitor - (no file)
Notify-ACNotify - ACNotify.dll
AddRemove-SC08-ORF_MAIN - c:\games\ORF-Ski Challenge 2008\uninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-24 22:46
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1120)
c:\windows\system32\vrlogon.dll
c:\program files\ThinkPad\ConnectUtilities\ACNotify.dll
c:\program files\ThinkPad\ConnectUtilities\AcSvcStub.dll
c:\program files\ThinkPad\ConnectUtilities\AcLocSettings.dll
c:\program files\ThinkPad\ConnectUtilities\ACHelper.dll
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\psqlpwd.dll
c:\program files\ThinkVantage Fingerprint Software\homefus2.dll
c:\program files\ThinkVantage Fingerprint Software\infql2.dll
c:\program files\ThinkVantage Fingerprint Software\homepass.dll
c:\program files\ThinkVantage Fingerprint Software\bio.dll
c:\program files\ThinkVantage Fingerprint Software\qlbase.dll
c:\program files\ThinkVantage Fingerprint Software\ps2css.dll
c:\windows\system32\tphklock.dll
c:\program files\ThinkVantage Fingerprint Software\pscssint.dll
c:\program files\ThinkVantage Fingerprint Software\vti.dll

- - - - - - - > 'lsass.exe'(1176)
c:\windows\system32\psqlpwd.dll
c:\program files\ThinkVantage Fingerprint Software\homefus2.dll
c:\program files\ThinkVantage Fingerprint Software\infql2.dll

- - - - - - - > 'explorer.exe'(2156)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Altap Salamander 2.5\plugins\salamext.dll
c:\windows\system32\btncopy.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\ibmpmsvc.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
c:\windows\system32\acs.exe
c:\program files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Analog Devices\SoundMAX\SMAgent.exe
c:\program files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
c:\windows\System32\TPHDEXLG.exe
c:\windows\system32\TpKmpSVC.exe
c:\program files\Common Files\Lenovo\Scheduler\tvtsched.exe
c:\program files\ThinkPad\ConnectUtilities\AcSvc.exe
c:\program files\Lenovo\System Update\SUService.exe
c:\program files\Canon\CAL\CALMAIN.exe
c:\program files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
c:\program files\Genie-Soft\Genie Timeline\WebServer\PHP\php-cgi.exe
c:\program files\Genie-Soft\Genie Timeline\WebServer\LighttPD\GenieTimelineWebServer.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\TpShocks.exe
c:\program files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
c:\program files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
c:\program files\Synaptics\SynTP\SynTPLpr.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\Microsoft ActiveSync\Wcescomm.exe
c:\progra~1\MI3AA1~1\rapimgr.exe
c:\progra~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\documents and settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\agent.exe
.
**************************************************************************
.
Celkový čas: 2010-04-24 22:57:05 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-04-24 20:56

Před spuštěním: 887 713 792
Po spuštění: 1 205 907 456

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 7DEA7CA4B7BC7D40A031367F4644D8F2
Nahoru
Uživatelský avatar
stell
VIP in memoriam
VIP in memoriam
Příspěvky: 5175
Registrován: 09 pro 2007 09:27
Bydliště: SK-REVUCA
Kontaktovat uživatele:
Kontaktovat uživatele stell

Re: services.exe zatezuje procesor

#7 Příspěvek od stell »

ok
ako sa chova pc??
Dôležité informácie.
NEŠLAPE Vám počítač?
Je zavirovaný? Šlape pomalu? Nefunguje program? Problém s instalací?
Využíjte služby vzdálené pomoci!
Obrázek
e-mail: stell(zavináč)forum.viry.cz
Thanks! Vďaka!
Obrázek
Nahoru
promark
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 dub 2010 11:44

Re: services.exe zatezuje procesor

#8 Příspěvek od promark »

skvele...uz bezi naprosto normalne, diky moc.
Jdu zjistit, jak je na tom muj paypal a neco vam prispet.

btw, Jaky antivir bys doporucil? Planuju domu koupit asi nod, ale porad se jeste rozhoduju.
Nahoru
Uživatelský avatar
stell
VIP in memoriam
VIP in memoriam
Příspěvky: 5175
Registrován: 09 pro 2007 09:27
Bydliště: SK-REVUCA
Kontaktovat uživatele:
Kontaktovat uživatele stell

Re: services.exe zatezuje procesor

#9 Příspěvek od stell »

nevidim ani AV-ani Firewall
1:odinstaluj combofix-start-spustit- do okna skopiruj prikaz combofix /uninstall ok

2:
Stáhni si a spusť program StartUpLite - http://www.malwarebytes.org/StartUpLite.exe
- Program vypíše seznam zbytečných programů spouštějících se při startu Windows
- K vypnutí spouštění těchto programů zaškrtni u příslušných řádků Disable a klikni na Continue

> Vyčisti počítač od nepotřebných souborů, vyčisti a optimalizuj registry:

Stáhni, nainstaluj program CCleaner - http://www.ccleaner.com/download/downloadpage.aspx?f=2
- PravyKlik na kos-spustit ccleaner ->>>Cakas>>na cistenie,,
PravyKlik na kos-otvorit ccleaner-záložka Windows a stiskni Analyzovat a poté Spustit Cleaner
- Klikni na záložku Aplikace a stiskni Analyzovat a poté Spustit Cleaner
- Klikni na Registry, stiskni Hledej problémy, po dokončení skenování klikni na Opravit vybrané problémy,
-zvol Ano pro vytvoření zálohy, ulož nabídnutý soubor a klikni na Opravit všechny problémy,

Start-spustit-napis cleanmgr klik>> ok>>pockas>>dalsie moznosti-obnova systemu-vycistit,,ok,,ok
Stiahnes na plochu TFC
zatvor vsetko co mas otvorene a spust-po skane restart
A to je vsetko,dakujeme za podporu,
nemas zaco. :wink:
Dôležité informácie.
NEŠLAPE Vám počítač?
Je zavirovaný? Šlape pomalu? Nefunguje program? Problém s instalací?
Využíjte služby vzdálené pomoci!
Obrázek
e-mail: stell(zavináč)forum.viry.cz
Thanks! Vďaka!
Obrázek
Nahoru
promark
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 dub 2010 11:44

Re: services.exe zatezuje procesor

#10 Příspěvek od promark »

mel sem avast, ktery sem pred temito operacemi odinstaloval...
nejde mi stahnout tfc, vypada to, ze geekstogo.com nebezi, nejde to stahnout nekde jinde?
Nahoru
Uživatelský avatar
stell
VIP in memoriam
VIP in memoriam
Příspěvky: 5175
Registrován: 09 pro 2007 09:27
Bydliště: SK-REVUCA
Kontaktovat uživatele:
Kontaktovat uživatele stell

Re: services.exe zatezuje procesor

#11 Příspěvek od stell »

http://leteckaposta.cz/482686332
Dôležité informácie.
NEŠLAPE Vám počítač?
Je zavirovaný? Šlape pomalu? Nefunguje program? Problém s instalací?
Využíjte služby vzdálené pomoci!
Obrázek
e-mail: stell(zavináč)forum.viry.cz
Thanks! Vďaka!
Obrázek
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“