Stránka 1 z 1

špatně fungující kurzorrrrrrr

Napsal: 24 zář 2010 20:20
od Maky
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jaroslav at 2010-09-24 21:15:30
Microsoft Windows 7 Ultimate
System drive C: has 62 GB (60%) free of 102 GB
Total RAM: 2046 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:16:30, on 24.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\EXPERTool\TBPANEL.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Yamicsoft\Windows 7 Manager\FreeMemory.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Jaroslav\Desktop\RSIT.exe
C:\Program Files\trend micro\Jaroslav.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe

--
End of file - 8946 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Windows 7 Manager - Free Memory.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-07-12 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2009-11-25 202080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-07-12 520192]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2009-11-25 1496408]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-04-07 2145000]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-11-02 2508104]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-09-04 767312]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"GAINWARD"=C:\Program Files\EXPERTool\TBPanel.exe [2009-05-12 2181672]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-09-24 21:15:32 ----D---- C:\Program Files\trend micro
2010-09-24 21:15:30 ----D---- C:\rsit
2010-09-22 20:36:34 ----D---- C:\Users\Jaroslav\AppData\Roaming\CD-LabelPrint
2010-09-22 20:35:56 ----D---- C:\Program Files\CD-LabelPrint
2010-09-22 13:59:12 ----D---- C:\Program Files\FreeRapid-0.83u1
2010-09-15 12:16:59 ----D---- C:\Users\Jaroslav\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2010-09-15 10:16:41 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2010-09-15 10:13:56 ----D---- C:\Program Files\Adobe Media Player
2010-09-15 10:12:07 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-09-14 22:25:04 ----A---- C:\Windows\system32\iertutil.dll
2010-09-14 21:52:37 ----D---- C:\Users\Jaroslav\AppData\Roaming\com.adobe.ExMan
2010-09-14 20:24:51 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-13 18:33:44 ----D---- C:\ProgramData\FLEXnet
2010-09-08 13:35:12 ----A---- C:\Windows\AutoKMS.exe
2010-09-08 13:24:13 ----D---- C:\Program Files\Microsoft Synchronization Services
2010-09-08 13:24:12 ----D---- C:\Program Files\Common Files\DESIGNER
2010-09-08 13:23:46 ----D---- C:\Program Files\Microsoft Sync Framework
2010-09-08 13:23:46 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-09-08 13:22:39 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-09-08 13:21:59 ----D---- C:\Program Files\Microsoft Analysis Services
2010-09-07 22:34:19 ----D---- C:\Users\Jaroslav\AppData\Roaming\NVIDIA
2010-09-07 22:30:11 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-09-07 22:30:06 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-09-07 22:30:06 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-09-07 22:30:04 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-09-07 22:30:04 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-09-07 22:30:04 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-09-07 22:30:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-09-07 22:30:04 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-09-07 22:30:03 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-09-07 22:30:03 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-09-07 22:30:03 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-09-07 22:30:03 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-09-07 22:30:03 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-09-07 22:30:02 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-09-07 22:30:02 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-09-07 22:30:02 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-09-07 22:30:02 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-09-07 22:30:02 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-09-07 22:30:00 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-09-07 22:30:00 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-09-07 22:30:00 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-09-07 22:30:00 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-09-07 22:30:00 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-09-07 22:29:57 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-09-07 22:29:57 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-09-07 22:29:57 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-09-07 22:29:57 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-09-07 22:29:57 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-09-07 22:29:56 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-09-07 22:29:56 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-09-07 22:29:56 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-09-07 22:29:55 ----A---- C:\Windows\system32\xinput1_3.dll
2010-09-07 22:29:55 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-09-07 22:29:55 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-09-07 22:29:55 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-09-07 22:29:55 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-09-07 22:29:54 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-09-07 22:29:54 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-09-07 22:29:54 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-09-07 22:29:53 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-09-07 22:29:53 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-09-07 22:29:53 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-09-07 22:29:53 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-09-07 22:29:53 ----A---- C:\Windows\system32\d3dx10.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\xinput1_2.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\xinput1_1.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-09-07 22:29:51 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-09-07 22:29:47 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-09-07 22:29:47 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-09-07 22:29:47 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-09-07 22:29:46 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-09-07 22:29:46 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-09-07 22:29:46 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-09-07 22:29:46 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-09-07 22:23:15 ----D---- C:\Program Files\2K Games
2010-09-03 12:36:28 ----D---- C:\Program Files\Nero
2010-08-27 21:35:34 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-08-27 21:35:32 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-08-27 21:35:32 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-08-27 17:15:08 ----D---- C:\Program Files\Yamicsoft
2010-08-27 16:37:24 ----D---- C:\Users\Jaroslav\AppData\Roaming\Malwarebytes
2010-08-27 16:37:19 ----D---- C:\ProgramData\Malwarebytes
2010-08-27 12:32:06 ----D---- C:\Windows\system32\appmgmt
2010-08-27 12:27:23 ----D---- C:\Program Files\Common Files\Steam
2010-08-25 20:20:48 ----D---- C:\Users\Jaroslav\AppData\Roaming\ct24crawl
2010-08-25 19:07:44 ----A---- C:\Windows\system32\oleaut32.dll

======List of files/folders modified in the last 1 months======

2010-09-24 21:16:20 ----D---- C:\Windows\Temp
2010-09-24 21:15:37 ----D---- C:\Windows\Prefetch
2010-09-24 21:15:32 ----RD---- C:\Program Files
2010-09-24 21:11:44 ----SHD---- C:\System Volume Information
2010-09-24 21:11:05 ----SHD---- C:\Windows\Installer
2010-09-24 21:10:49 ----D---- C:\Windows\system32\catroot2
2010-09-24 20:52:58 ----D---- C:\Users\Jaroslav\AppData\Roaming\Skype
2010-09-24 20:17:32 ----D---- C:\Windows\Tasks
2010-09-24 20:17:32 ----D---- C:\Windows\system32\Tasks
2010-09-24 16:03:01 ----D---- C:\Users\Jaroslav\AppData\Roaming\skypePM
2010-09-24 14:57:09 ----D---- C:\Windows\System32
2010-09-24 14:57:08 ----D---- C:\Windows\inf
2010-09-24 14:57:08 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-24 14:53:14 ----HD---- C:\ProgramData
2010-09-24 14:38:38 ----D---- C:\Windows\system32\config
2010-09-22 20:38:50 ----D---- C:\Windows\system32\FxsTmp
2010-09-21 21:12:15 ----D---- C:\Users\Jaroslav\AppData\Roaming\uTorrent
2010-09-17 19:47:27 ----D---- C:\Windows\system32\drivers
2010-09-17 19:47:27 ----D---- C:\Windows\SchCache
2010-09-17 19:35:32 ----D---- C:\Windows\system32\NDF
2010-09-17 18:33:06 ----D---- C:\Program Files\Microsoft Office
2010-09-16 17:54:55 ----D---- C:\Program Files\Adobe
2010-09-16 17:51:18 ----D---- C:\ProgramData\Adobe
2010-09-15 15:13:15 ----SD---- C:\ProgramData\Microsoft
2010-09-15 14:55:30 ----RSD---- C:\Windows\Fonts
2010-09-15 10:16:20 ----D---- C:\Users\Jaroslav\AppData\Roaming\Adobe
2010-09-15 10:15:00 ----D---- C:\Program Files\Common Files\Adobe
2010-09-15 10:12:07 ----D---- C:\Program Files\Common Files
2010-09-15 10:11:11 ----D---- C:\Windows\winsxs
2010-09-14 22:26:59 ----D---- C:\ProgramData\Microsoft Help
2010-09-14 22:25:29 ----A---- C:\Windows\system32\MRT.exe
2010-09-14 22:25:07 ----D---- C:\Windows\system32\catroot
2010-09-12 12:46:49 ----D---- C:\ProgramData\CanonIJPLM
2010-09-09 21:04:46 ----SD---- C:\Users\Jaroslav\AppData\Roaming\Microsoft
2010-09-08 20:59:05 ----D---- C:\Windows\Microsoft.NET
2010-09-08 20:57:00 ----RSD---- C:\Windows\assembly
2010-09-08 13:35:12 ----D---- C:\Windows
2010-09-08 13:25:05 ----D---- C:\Windows\ShellNew
2010-09-08 13:25:02 ----D---- C:\Program Files\Common Files\microsoft shared
2010-09-08 13:24:50 ----D---- C:\Program Files\MSBuild
2010-09-08 13:22:16 ----A---- C:\Windows\win.ini
2010-09-08 13:22:15 ----D---- C:\Program Files\Common Files\System
2010-09-07 22:30:58 ----D---- C:\Program Files\NVIDIA Corporation
2010-09-07 22:29:11 ----D---- C:\Windows\Logs
2010-09-07 18:51:30 ----D---- C:\Program Files\uTorrent
2010-09-05 20:10:14 ----D---- C:\Users\Jaroslav\AppData\Roaming\BSplayer PRO
2010-09-03 12:38:09 ----A---- C:\Windows\system32\MsiExec.exe.log
2010-09-03 12:37:22 ----D---- C:\Program Files\Common Files\Nero
2010-09-03 12:36:28 ----D---- C:\ProgramData\Nero
2010-09-03 10:32:49 ----D---- C:\Program Files\Microsoft Silverlight
2010-08-29 13:36:18 ----D---- C:\Windows\Web
2010-08-28 17:12:12 ----D---- C:\Windows\system32\cs-CZ
2010-08-28 17:09:38 ----D---- C:\Windows\system32\en-US
2010-08-28 17:09:37 ----D---- C:\Program Files\Microsoft.NET
2010-08-28 10:43:11 ----D---- C:\Windows\ModemLogs
2010-08-27 17:19:05 ----D---- C:\Program Files\WinRar
2010-08-27 09:46:26 ----D---- C:\Windows\system32\LogFiles
2010-08-26 22:08:29 ----D---- C:\Users\Jaroslav\AppData\Roaming\vlc
2010-08-25 19:08:04 ----D---- C:\Windows\AppPatch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-12 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-07 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 TBPanel;TBPanel; C:\Windows\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-07 32584]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2010-04-29 20952]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 ap81ekyn;ap81ekyn; C:\Windows\system32\drivers\ap81ekyn.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 97432]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2010-04-29 304464]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-04-03 129640]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2009-12-17 185640]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-04-07 33560]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

Re: špatně fungující kurzorrrrrrr

Napsal: 24 zář 2010 20:25
od Rudy
Nic nebezpečného nevidím. Jak se kurzor chová?

Re: špatně fungující kurzorrrrrrr

Napsal: 24 zář 2010 20:32
od Maky
jako by zpomaleně (((písmenko za sekundu) a nebo mnohonásobné opakování v podstatě se nedá psát

Re: špatně fungující kurzorrrrrrr

Napsal: 24 zář 2010 21:34
od Rudy
Vyčistěte PC CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 a provedte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php . Dejte log, předem nic nemažte.

Re: špatně fungující kurzorrrrrrr

Napsal: 24 zář 2010 21:56
od Maky
díky za pomoc

pravděpodobně pomohlo čištění PC CCleanerem, problém zmizel

nicméně přikládám ještě vámi požadovaný log


Logfile of random's system information tool 1.08 (written by random/random)
Run by Jaroslav at 2010-09-24 22:52:36
Microsoft Windows 7 Ultimate
System drive C: has 65 GB (64%) free of 102 GB
Total RAM: 2046 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:52:48, on 24.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Yamicsoft\Windows 7 Manager\FreeMemory.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\EXPERTool\TBPANEL.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Jaroslav\Desktop\RSIT.exe
C:\Program Files\trend micro\Jaroslav.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe

--
End of file - 8963 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Windows 7 Manager - Free Memory.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-07-12 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2009-11-25 202080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-07-12 520192]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2009-11-25 1496408]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-04-07 2145000]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-11-02 2508104]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-09-04 767312]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"GAINWARD"=C:\Program Files\EXPERTool\TBPanel.exe [2009-05-12 2181672]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-09-24 22:40:11 ----D---- C:\Program Files\CCleaner
2010-09-24 21:15:32 ----D---- C:\Program Files\trend micro
2010-09-24 21:15:30 ----D---- C:\rsit
2010-09-22 20:36:34 ----D---- C:\Users\Jaroslav\AppData\Roaming\CD-LabelPrint
2010-09-22 20:35:56 ----D---- C:\Program Files\CD-LabelPrint
2010-09-22 13:59:12 ----D---- C:\Program Files\FreeRapid-0.83u1
2010-09-15 12:16:59 ----D---- C:\Users\Jaroslav\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2010-09-15 10:16:41 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2010-09-15 10:13:56 ----D---- C:\Program Files\Adobe Media Player
2010-09-15 10:12:07 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-09-14 22:25:04 ----A---- C:\Windows\system32\iertutil.dll
2010-09-14 21:52:37 ----D---- C:\Users\Jaroslav\AppData\Roaming\com.adobe.ExMan
2010-09-14 20:24:51 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-13 18:33:44 ----D---- C:\ProgramData\FLEXnet
2010-09-08 13:35:12 ----A---- C:\Windows\AutoKMS.exe
2010-09-08 13:24:13 ----D---- C:\Program Files\Microsoft Synchronization Services
2010-09-08 13:24:12 ----D---- C:\Program Files\Common Files\DESIGNER
2010-09-08 13:23:46 ----D---- C:\Program Files\Microsoft Sync Framework
2010-09-08 13:23:46 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-09-08 13:22:39 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-09-08 13:21:59 ----D---- C:\Program Files\Microsoft Analysis Services
2010-09-07 22:34:19 ----D---- C:\Users\Jaroslav\AppData\Roaming\NVIDIA
2010-09-07 22:30:11 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-09-07 22:30:06 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-09-07 22:30:06 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-09-07 22:30:05 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-09-07 22:30:04 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-09-07 22:30:04 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-09-07 22:30:04 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-09-07 22:30:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-09-07 22:30:04 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-09-07 22:30:03 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-09-07 22:30:03 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-09-07 22:30:03 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-09-07 22:30:03 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-09-07 22:30:03 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-09-07 22:30:02 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-09-07 22:30:02 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-09-07 22:30:02 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-09-07 22:30:02 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-09-07 22:30:02 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-09-07 22:30:01 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-09-07 22:30:00 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-09-07 22:30:00 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-09-07 22:30:00 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-09-07 22:30:00 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-09-07 22:30:00 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-09-07 22:29:59 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-09-07 22:29:58 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-09-07 22:29:57 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-09-07 22:29:57 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-09-07 22:29:57 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-09-07 22:29:57 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-09-07 22:29:57 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-09-07 22:29:56 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-09-07 22:29:56 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-09-07 22:29:56 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-09-07 22:29:55 ----A---- C:\Windows\system32\xinput1_3.dll
2010-09-07 22:29:55 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-09-07 22:29:55 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-09-07 22:29:55 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-09-07 22:29:55 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-09-07 22:29:54 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-09-07 22:29:54 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-09-07 22:29:54 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-09-07 22:29:53 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-09-07 22:29:53 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-09-07 22:29:53 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-09-07 22:29:53 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-09-07 22:29:53 ----A---- C:\Windows\system32\d3dx10.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\xinput1_2.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\xinput1_1.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-09-07 22:29:52 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-09-07 22:29:51 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-09-07 22:29:47 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-09-07 22:29:47 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-09-07 22:29:47 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-09-07 22:29:46 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-09-07 22:29:46 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-09-07 22:29:46 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-09-07 22:29:46 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-09-07 22:23:15 ----D---- C:\Program Files\2K Games
2010-09-03 12:36:28 ----D---- C:\Program Files\Nero
2010-08-27 21:35:34 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-08-27 21:35:32 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-08-27 21:35:32 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-08-27 17:15:08 ----D---- C:\Program Files\Yamicsoft
2010-08-27 16:37:24 ----D---- C:\Users\Jaroslav\AppData\Roaming\Malwarebytes
2010-08-27 16:37:19 ----D---- C:\ProgramData\Malwarebytes
2010-08-27 12:32:06 ----D---- C:\Windows\system32\appmgmt
2010-08-27 12:27:23 ----D---- C:\Program Files\Common Files\Steam
2010-08-25 20:20:48 ----D---- C:\Users\Jaroslav\AppData\Roaming\ct24crawl
2010-08-25 19:07:44 ----A---- C:\Windows\system32\oleaut32.dll

======List of files/folders modified in the last 1 months======

2010-09-24 22:52:49 ----D---- C:\Windows\Temp
2010-09-24 22:52:26 ----D---- C:\Windows\system32\config
2010-09-24 22:50:14 ----D---- C:\Users\Jaroslav\AppData\Roaming\Skype
2010-09-24 22:49:57 ----HD---- C:\ProgramData
2010-09-24 22:49:39 ----D---- C:\Users\Jaroslav\AppData\Roaming\skypePM
2010-09-24 22:49:18 ----D---- C:\Windows
2010-09-24 22:46:58 ----D---- C:\Windows\debug
2010-09-24 22:45:06 ----D---- C:\Windows\Prefetch
2010-09-24 22:40:11 ----RD---- C:\Program Files
2010-09-24 21:20:50 ----SHD---- C:\System Volume Information
2010-09-24 21:11:05 ----SHD---- C:\Windows\Installer
2010-09-24 21:10:49 ----D---- C:\Windows\system32\catroot2
2010-09-24 20:17:32 ----D---- C:\Windows\Tasks
2010-09-24 20:17:32 ----D---- C:\Windows\system32\Tasks
2010-09-24 14:57:09 ----D---- C:\Windows\System32
2010-09-24 14:57:08 ----D---- C:\Windows\inf
2010-09-24 14:57:08 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-22 20:38:50 ----D---- C:\Windows\system32\FxsTmp
2010-09-21 21:12:15 ----D---- C:\Users\Jaroslav\AppData\Roaming\uTorrent
2010-09-17 19:47:27 ----D---- C:\Windows\system32\drivers
2010-09-17 19:47:27 ----D---- C:\Windows\SchCache
2010-09-17 19:35:32 ----D---- C:\Windows\system32\NDF
2010-09-17 18:33:06 ----D---- C:\Program Files\Microsoft Office
2010-09-16 17:54:55 ----D---- C:\Program Files\Adobe
2010-09-16 17:51:18 ----D---- C:\ProgramData\Adobe
2010-09-15 15:13:15 ----SD---- C:\ProgramData\Microsoft
2010-09-15 14:55:30 ----RSD---- C:\Windows\Fonts
2010-09-15 10:16:20 ----D---- C:\Users\Jaroslav\AppData\Roaming\Adobe
2010-09-15 10:15:00 ----D---- C:\Program Files\Common Files\Adobe
2010-09-15 10:12:07 ----D---- C:\Program Files\Common Files
2010-09-15 10:11:11 ----D---- C:\Windows\winsxs
2010-09-14 22:26:59 ----D---- C:\ProgramData\Microsoft Help
2010-09-14 22:25:29 ----A---- C:\Windows\system32\MRT.exe
2010-09-14 22:25:07 ----D---- C:\Windows\system32\catroot
2010-09-12 12:46:49 ----D---- C:\ProgramData\CanonIJPLM
2010-09-09 21:04:46 ----SD---- C:\Users\Jaroslav\AppData\Roaming\Microsoft
2010-09-08 20:59:05 ----D---- C:\Windows\Microsoft.NET
2010-09-08 20:57:00 ----RSD---- C:\Windows\assembly
2010-09-08 13:25:05 ----D---- C:\Windows\ShellNew
2010-09-08 13:25:02 ----D---- C:\Program Files\Common Files\microsoft shared
2010-09-08 13:24:50 ----D---- C:\Program Files\MSBuild
2010-09-08 13:22:16 ----A---- C:\Windows\win.ini
2010-09-08 13:22:15 ----D---- C:\Program Files\Common Files\System
2010-09-07 22:30:58 ----D---- C:\Program Files\NVIDIA Corporation
2010-09-07 22:29:11 ----D---- C:\Windows\Logs
2010-09-07 18:51:30 ----D---- C:\Program Files\uTorrent
2010-09-05 20:10:14 ----D---- C:\Users\Jaroslav\AppData\Roaming\BSplayer PRO
2010-09-03 12:38:09 ----A---- C:\Windows\system32\MsiExec.exe.log
2010-09-03 12:37:22 ----D---- C:\Program Files\Common Files\Nero
2010-09-03 12:36:28 ----D---- C:\ProgramData\Nero
2010-09-03 10:32:49 ----D---- C:\Program Files\Microsoft Silverlight
2010-08-29 13:36:18 ----D---- C:\Windows\Web
2010-08-28 17:12:12 ----D---- C:\Windows\system32\cs-CZ
2010-08-28 17:09:38 ----D---- C:\Windows\system32\en-US
2010-08-28 17:09:37 ----D---- C:\Program Files\Microsoft.NET
2010-08-28 10:43:11 ----D---- C:\Windows\ModemLogs
2010-08-27 17:19:05 ----D---- C:\Program Files\WinRar
2010-08-27 09:46:26 ----D---- C:\Windows\system32\LogFiles
2010-08-26 22:08:29 ----D---- C:\Users\Jaroslav\AppData\Roaming\vlc
2010-08-25 19:08:04 ----D---- C:\Windows\AppPatch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-12 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-07 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 TBPanel;TBPanel; C:\Windows\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-07 32584]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2010-04-29 20952]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S3 a21w476g;a21w476g; C:\Windows\system32\drivers\a21w476g.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 97432]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2010-04-29 304464]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-04-03 129640]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2009-12-17 185640]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-04-07 33560]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

Re: špatně fungující kurzorrrrrrr

Napsal: 25 zář 2010 18:37
od Rudy
Log vypadá čistý.