Stránka 1 z 1

Prosím o kontrolu logu

Napsal: 30 říj 2010 17:10
od Martinus
Prosím o kontrolu logu, pokouším se manželce zrychlit PC, bylo ukrutně pomalé. Upgradována RAM z 1 na 2GB, odinstalováno vše nepotřebné, promazáno CC Cleanerem. Asi by bylo dost potřeba znovu nainstalovat Visty (3 roky stará instalace a bez údržby), ale to se mi ukrutně nechce :) Díky

Logfile of random's system information tool 1.08 (written by random/random)
Run by Iveta at 2010-10-30 18:04:54
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 116 GB (50%) free of 230 GB
Total RAM: 2047 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:05:20, on 30.10.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Users\Iveta\Downloads\RSIT.exe
C:\Program Files\trend micro\Iveta.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Toolbar_eula_launcher] C:\install\google\eula\EULALauncher.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Kniha klipů HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Chytrý výběr - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

--
End of file - 7065 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{26958099-1A09-4978-8485-0D80C8FEF5A2}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2007-12-07 1377576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-10-28 1623392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQ Toolbar - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-09-19 4702208]
"Toolbar_eula_launcher"=C:\install\google\eula\EULALauncher.exe []
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2006-11-23 56928]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2006-12-05 54832]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2007-12-20 37376]
"Skytel"=C:\Windows\Skytel.exe [2007-08-03 1826816]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-10-04 2067808]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-06 102400]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-05-16 153136]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-10-30 17:40:55 ----D---- C:\rsit
2010-10-30 17:15:31 ----D---- C:\Program Files\CCleaner
2010-10-28 10:49:40 ----D---- C:\ProgramData\ATI
2010-10-28 10:49:39 ----D---- C:\Users\Iveta\AppData\Roaming\ATI
2010-10-28 10:47:32 ----ASH---- C:\hiberfil.sys
2010-10-28 10:38:48 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-10-28 10:37:31 ----A---- C:\Windows\system32\drivers\AtiHdmi.sys
2010-10-28 10:33:57 ----A---- C:\Windows\system32\Difxapi.dll
2010-10-28 10:33:57 ----A---- C:\Windows\system32\ATIDEMGX.dll
2010-10-28 10:33:55 ----A---- C:\Windows\system32\coinst.dll
2010-10-28 10:33:18 ----A---- C:\Windows\system32\gameux.dll
2010-10-28 10:33:16 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-10-28 10:33:16 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-10-28 10:25:34 ----D---- C:\Program Files\ATI Technologies
2010-10-28 10:25:31 ----D---- C:\Program Files\ATI
2010-10-13 16:57:22 ----A---- C:\Windows\system32\wmp.dll
2010-10-13 16:57:20 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-13 16:57:10 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-13 16:57:10 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-13 16:57:10 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-13 16:57:09 ----A---- C:\Windows\system32\netevent.dll
2010-10-13 16:57:09 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-13 16:56:41 ----A---- C:\Windows\system32\schannel.dll
2010-10-13 16:56:37 ----A---- C:\Windows\system32\ole32.dll
2010-10-13 16:56:33 ----A---- C:\Windows\system32\t2embed.dll
2010-10-13 16:56:29 ----A---- C:\Windows\system32\mshtml.dll
2010-10-13 16:56:28 ----A---- C:\Windows\system32\ieframe.dll
2010-10-13 16:56:27 ----A---- C:\Windows\system32\wininet.dll
2010-10-13 16:56:27 ----A---- C:\Windows\system32\urlmon.dll
2010-10-13 16:56:27 ----A---- C:\Windows\system32\mshtmled.dll
2010-10-13 16:56:27 ----A---- C:\Windows\system32\msfeeds.dll
2010-10-13 16:56:27 ----A---- C:\Windows\system32\licmgr10.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\occache.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\mstime.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\jsproxy.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\ieUnatt.exe
2010-10-13 16:56:26 ----A---- C:\Windows\system32\ieui.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\iesysprep.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\iesetup.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\iertutil.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\iernonce.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\iepeers.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\iedkcs32.dll
2010-10-13 16:56:26 ----A---- C:\Windows\system32\ie4uinit.exe
2010-10-13 16:56:25 ----A---- C:\Windows\system32\msfeedssync.exe
2010-10-13 16:56:23 ----A---- C:\Windows\system32\mfc40u.dll
2010-10-13 16:56:23 ----A---- C:\Windows\system32\mfc40.dll
2010-10-13 16:56:20 ----A---- C:\Windows\system32\win32k.sys
2010-10-13 16:56:15 ----A---- C:\Windows\system32\msshsq.dll
2010-10-13 16:56:12 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-13 16:56:10 ----A---- C:\Windows\system32\comctl32.dll
2010-10-08 15:59:49 ----D---- C:\Program Files\Common Files\Adobe

======List of files/folders modified in the last 1 months======

2010-10-30 18:04:58 ----D---- C:\Program Files\Trend Micro
2010-10-30 18:04:50 ----D---- C:\Windows\Temp
2010-10-30 18:00:39 ----D---- C:\Users\Iveta\AppData\Roaming\ICQ
2010-10-30 17:58:55 ----D---- C:\Windows
2010-10-30 17:28:43 ----D---- C:\Users\Iveta\AppData\Roaming\Winamp
2010-10-30 17:27:58 ----D---- C:\Windows\Minidump
2010-10-30 17:27:58 ----D---- C:\Windows\Debug
2010-10-30 17:15:31 ----RD---- C:\Program Files
2010-10-30 17:05:02 ----D---- C:\Test
2010-10-30 17:01:30 ----D---- C:\Hry
2010-10-30 16:58:27 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-30 16:57:09 ----D---- C:\Program Files\Common Files
2010-10-30 16:57:04 ----SHD---- C:\System Volume Information
2010-10-30 16:56:11 ----D---- C:\Users\Iveta\AppData\Roaming\Atari
2010-10-30 16:44:25 ----D---- C:\Windows\system32\drivers\Avg
2010-10-30 16:40:44 ----D---- C:\Windows\Prefetch
2010-10-30 16:38:49 ----HD---- C:\ProgramData
2010-10-28 11:18:24 ----D---- C:\Windows\winsxs
2010-10-28 11:18:24 ----D---- C:\Windows\System32
2010-10-28 11:18:24 ----D---- C:\Windows\AppPatch
2010-10-28 11:00:36 ----SHD---- C:\Windows\Installer
2010-10-28 11:00:36 ----HD---- C:\Config.Msi
2010-10-28 10:41:13 ----RSD---- C:\Windows\assembly
2010-10-28 10:38:33 ----D---- C:\Windows\system32\drivers
2010-10-28 10:37:54 ----D---- C:\Windows\system32\catroot
2010-10-28 10:37:53 ----D---- C:\Windows\inf
2010-10-28 10:28:49 ----D---- C:\Windows\system32\catroot2
2010-10-19 15:57:57 ----D---- C:\Windows\LiveKernelReports
2010-10-17 20:24:18 ----D---- C:\Windows\rescache
2010-10-17 20:00:05 ----D---- C:\Windows\system32\cs-CZ
2010-10-17 20:00:05 ----D---- C:\Program Files\Windows Media Player
2010-10-17 20:00:04 ----D---- C:\Program Files\Internet Explorer
2010-10-17 20:00:03 ----D---- C:\Windows\system32\migration
2010-10-17 19:37:53 ----A---- C:\Windows\system32\mrt.exe
2010-10-10 21:36:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-08 16:18:35 ----D---- C:\Program Files\Mozilla Firefox
2010-10-08 16:00:16 ----D---- C:\ProgramData\Adobe
2010-10-08 15:59:49 ----D---- C:\Program Files\Adobe
2010-10-07 15:40:01 ----D---- C:\Windows\Microsoft.NET

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2010-07-27 216400]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2010-06-02 29584]
R1 AvgTdiX;AVG Free8 Network Redirector; C:\Windows\System32\Drivers\avgtdix.sys [2010-07-27 243024]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-04-07 5430272]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-07 157184]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-03-09 104464]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-09-19 1959832]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-04-30 81408]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-04-07 5430272]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-07 172032]
R2 avg9emc;AVG Free E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-07-27 921952]
R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-07-27 308136]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2005-08-08 167936]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S4 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S4 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]

-----------------EOF-----------------

Re: Prosím o kontrolu logu

Napsal: 30 říj 2010 17:26
od Martinus
Teď mě ještě napadlo, že jsem v CC Cleaneru použil jen čistič a úplně jsem zapomněl na registry. Takže to ještě můžu provést.

Re: Prosím o kontrolu logu

Napsal: 30 říj 2010 19:18
od vyosek
Zdravim a pekny vecer preji :)

:arrow: Ja bych ho zrychlil i tak ze bych vymenil AVG za Avast nebo Aviru a uvidite ze to pomuze :wink:

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: CCleanaer projedte i registry
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
:arrow: Stahnete OTM (viz muj podpis)
  • Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize
  • Kód: Vybrat vše

    :reg
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Toolbar_eula_launcher"=-
    "RemoteControl"=-
    "LanguageShortcut"=-
    "NeroFilterCheck"=-
    "HP Software Update"=-
    "WinampAgent"="Adobe Reader Speed Launcher"=-
    "Adobe ARM"=-
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "WMPNSCFG"=-
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
    "ICQ"=-
    
    :files
    C:\PROGRA~1\ICQTOO~1
    %windir%\system32\*.tmp.dll /s
    %windir%\system32\SET*.tmp /s
    %windir%\*.tmp /s
    
    :commands
    [RESETHOSTS]
    [EMPTYTEMP]
    [EMPTYFLASH]
  • Kliknete na cervene tlacitko MoveIt!
  • Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte
:arrow: Doporucuji provest defragmentaci disku
  • Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
    • Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
    • prepnete se do zalozky Nastroje
    • Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
    • Toto provedte se vsemi disky
  • Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
    • Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
    • Kliknete na Analyzovat
    • Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
    • Postup provedte se vsemi disky
  • Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
    • Vyhodou programku je, ze se neinstaluje
    • Staci tedy jen stahnout dle verze vaseho OS a rozbalit
    • Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
    • Probehne analyza disku a nasledne i defragmentace

Re: Prosím o kontrolu logu

Napsal: 30 říj 2010 20:25
od Martinus
Děkuji moc za pomoc, start PC je teď podstatně rychlejší a celkově je to živější :) Vyměnil jsem i AVG za Avast, jen tu defragmentaci jsem zatím z časových důvodů nedělal. Manželka bude mít radost :D
A ještě log OTM

All processes killed
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Toolbar_eula_launcher not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\RemoteControl deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\LanguageShortcut deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NeroFilterCheck deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HP Software Update deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WinampAgent"="Adobe Reader Speed Launcher not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\WMPNSCFG deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ deleted successfully.
========== FILES ==========
C:\PROGRA~1\ICQToolbar\Cache folder moved successfully.
C:\PROGRA~1\ICQToolbar folder moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1FC0.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DF2.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6335.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81A.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA42B.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPCA6F.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE752.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEEF0.tmp folder moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC64CD.tmp moved successfully.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp1003.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp20D3.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp30C0.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp3263.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp3306.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp3574.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp42D8.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp465.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp4D36.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp579B.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp64FB.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp6683.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp6F09.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp744B.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp7BD0.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp8A27.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp9226.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp947B.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspA5A4.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspA868.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspB131.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspBAEE.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspBB70.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspD398.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspD7B0.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspD8C9.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspE249.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspE506.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspE5A6.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspF001.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspF366.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspF4C0.tmp scheduled to be moved on reboot.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Iveta
->Temp folder emptied: 32637 bytes
->Temporary Internet Files folder emptied: 604687 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 4376858 bytes
->Flash cache emptied: 405 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 5,00 mb


OTM by OldTimer - Version 3.1.17.1 log created on 10302010_203631

Files moved on Reboot...
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp1003.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp20D3.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp30C0.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp3263.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp3306.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp3574.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp42D8.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp465.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp4D36.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp579B.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp64FB.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp6683.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp6F09.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp744B.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp7BD0.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp8A27.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp9226.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\csp947B.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspA5A4.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspA868.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspB131.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspBAEE.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspBB70.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspD398.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspD7B0.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspD8C9.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspE249.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspE506.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspE5A6.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspF001.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspF366.tmp scheduled to be moved on reboot.
File move failed. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cspF4C0.tmp scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Re: Prosím o kontrolu logu

Napsal: 30 říj 2010 20:59
od vyosek
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC
:arrow: Defragmentaci udelejte, jeste muze PC urychlit...

Nemate zac, rad jsem pomohl :) Zase nekdy Obrázek