Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6hod

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 lis 2010 17:32

Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6hod

#1 Příspěvek od MadBull »

PC je strašně pomalé, jako by nefungovaly RAMky občas po restartu zmizí nějaké soubory :(


Logfile of random's system information tool 1.08 (written by random/random)
Run by The F3@R at 2010-11-24 17:26:44
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 248 GB (41%) free of 610 GB
Total RAM: 2047 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:27:20, on 24.11.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\LogMeIn\x86\LOGMEI~2.EXE
C:\PROGRA~1\LogMeIn\x86\LMIGuardianSvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\tsnpstd3.exe
C:\Program Files\Razer\Diamondback 3G\razerhid.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Razer\Diamondback 3G\razertra.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Razer\Diamondback 3G\razerofa.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\The F3@R\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\The F3@R.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fullarticles.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.2.0.12\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Diamondback] C:\Program Files\Razer\Diamondback 3G\razerhid.exe
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: SigmaTel Audio Service (uokwveoka) - Unknown owner - C:\WINDOWS\system32\gouquoon.exe (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe (file missing)

--
End of file - 9802 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{2606D27B-C854-4676-AD4B-67D6EED0B35B}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{F459FEEF-323E-47EB-944B-928F406D5428}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll [2010-05-13 394608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton 360\Engine\4.2.0.12\IPSBHO.DLL [2009-11-17 79224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll [2010-05-13 394608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-09-27 16844800]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-06-16 221184]
"tsnpstd3"=C:\WINDOWS\tsnpstd3.exe [2005-12-20 94208]
"snpstd3"=C:\WINDOWS\vsnpstd3.exe [2005-09-05 339968]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"Diamondback"=C:\Program Files\Razer\Diamondback 3G\razerhid.exe [2007-08-01 147456]
"LogMeIn GUI"=C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [2010-01-27 63048]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-07-21 141608]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-08-10 421888]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-10-16 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-10-16 13851752]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-08-26 1753192]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-09-16 1164584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"=C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe [2007-09-04 81920]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2007-02-20 741376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^0wwrine.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\0wwrine.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6cnndez.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\6cnndez.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6xnndj2.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\6xnndj2.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^86q81cn.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\86q81cn.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9g1cyyt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\9g1cyyt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9m1ieez.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\9m1ieez.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eaavmmhyyt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\eaavmmhyyt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eezqqlcc.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\eezqqlcc.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ez03gwrx.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\ez03gwrx.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^faa6mm6yy6k.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\faa6mm6yy6k.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^g1cyytkkfw.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\g1cyytkkfw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^jjfvvrhhdtt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\jjfvvrhhdtt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^k3g8cnoz.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\k3g8cnoz.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^llhxxtjjfvv.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\llhxxtjjfvv.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^pfl66sddtup.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\pfl66sddtup.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^qq6cc6ejf.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\qq6cc6ejf.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rrnddzpplbb.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\rrnddzpplbb.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rx5ny2zp.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\rx5ny2zp.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^s6ee6qq6.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\s6ee6qq6.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ull2rhid.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\ull2rhid.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytk.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytk.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytkkfw.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytkkfw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^wwriiduu.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\wwriiduu.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2010-10-06 87424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digest32.dll

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Hry\Beefko2\Battlefield 2\BF2.exe"="C:\Hry\Beefko2\Battlefield 2\BF2.exe:*:Enabled:BF2"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Hry\Valve\cstrike.exe"="C:\Hry\Valve\cstrike.exe:*:Enabled:Counter-Strike Launcher"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Graphisoft\ArchiCAD 12\ArchiCAD.exe"="C:\Program Files\Graphisoft\ArchiCAD 12\ArchiCAD.exe:*:Enabled:ArchiCAD 12.0.0 Component"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\WINDOWS\system32\nvsvc32.exe"="C:\WINDOWS\system32\nvsvc32.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\wbem\wmiprvse.exe"="C:\WINDOWS\system32\wbem\wmiprvse.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Coexistence\balicek pro loader\loader\loader.exe"="C:\Coexistence\balicek pro loader\loader\loader.exe:*:Enabled:CzechGamers Server AutoUpdater"
"C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe"="C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe:*:Enabled:DarkCrusade"
"C:\Program Files\Garena\Garena.exe"="C:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"C:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="C:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"C:\Program Files\TmUnitedForever\TmForever.exe"="C:\Program Files\TmUnitedForever\TmForever.exe:*:Enabled:TmForever"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\Team Fortress 2\hl2.exe"="C:\Program Files\Team Fortress 2\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Activision\Blur(TM)\Blur.exe"="C:\Program Files\Activision\Blur(TM)\Blur.exe:*:Enabled:Blur"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Ubisoft\Demo\Tom Clancy's H.A.W.X\HAWX.exe"="C:\Program Files\Ubisoft\Demo\Tom Clancy's H.A.W.X\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"
"C:\Program Files\Ubisoft\Tom Clancy's H.A.W.X\HAWX.exe"="C:\Program Files\Ubisoft\Tom Clancy's H.A.W.X\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Ventrilo\Ventrilo.exe"="C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe"
"C:\Documents and Settings\The F3@R\Plocha\CS.S\Counter-Strike Source\hl2.exe"="C:\Documents and Settings\The F3@R\Plocha\CS.S\Counter-Strike Source\hl2.exe:*:Enabled:hl2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\WINDOWS\system32\services.exe"="C:\WINDOWS\system32\services.exe:*:Enabled:@xpsp2res.dll,-22019"
"\??\C:\WINDOWS\system32\winlogon.exe"="\??\C:\WINDOWS\system32\winlogon.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\nvsvc32.exe"="C:\WINDOWS\system32\nvsvc32.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\wbem\wmiprvse.exe"="C:\WINDOWS\system32\wbem\wmiprvse.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\lsass.exe"="C:\WINDOWS\system32\lsass.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

======List of files/folders created in the last 1 months======

2010-11-24 17:26:49 ----D---- C:\Program Files\trend micro
2010-11-24 17:26:44 ----D---- C:\rsit
2010-11-24 17:18:21 ----A---- C:\ComboFix.txt
2010-11-24 16:50:47 ----A---- C:\WINDOWS\MBR.exe
2010-11-24 16:16:42 ----ASH---- C:\pagefile.sys
2010-11-24 16:04:24 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\Nero
2010-11-24 15:49:03 ----D---- C:\Program Files\Nero
2010-11-23 19:53:33 ----D---- C:\N360_BACKUP
2010-11-23 19:43:21 ----D---- C:\Program Files\Symantec
2010-11-23 19:43:21 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2010-11-23 19:43:21 ----A---- C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2010-11-23 19:41:12 ----D---- C:\WINDOWS\system32\drivers\N360
2010-11-23 19:41:05 ----D---- C:\Program Files\Windows Sidebar
2010-11-23 19:41:05 ----D---- C:\Program Files\Norton 360
2010-11-23 15:38:27 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-11-23 15:35:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2010-11-23 15:35:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2010-11-23 15:35:10 ----D---- C:\Program Files\NortonInstaller
2010-11-23 15:35:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2010-11-22 22:24:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2010-11-22 21:40:06 ----D---- C:\Program Files\YourWare Solutions
2010-11-22 21:26:01 ----D---- C:\WINDOWS\pss
2010-11-22 20:52:00 ----D---- C:\Program Files\Lavalys
2010-11-21 11:25:41 ----A---- C:\WINDOWS\UPGRADE.TXT
2010-11-15 19:31:44 ----A---- C:\WINDOWS\system32\nvgenco32.dll
2010-11-15 19:31:44 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2010-11-11 23:39:06 ----D---- C:\WINDOWS\B83FC356B7C0441F8A4DD71E088E7974.TMP
2010-11-11 23:37:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Divinity 2
2010-11-11 23:24:14 ----D---- C:\Program Files\Divinity II - DKS
2010-11-03 18:30:34 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\.minecraft
2010-10-28 19:37:11 ----D---- C:\Program Files\JoWooD Entertainment AG

======List of files/folders modified in the last 1 months======

2010-11-24 17:26:49 ----RD---- C:\Program Files
2010-11-24 17:26:48 ----AD---- C:\WINDOWS\Temp
2010-11-24 17:18:25 ----D---- C:\WINDOWS\system32\drivers
2010-11-24 17:18:25 ----D---- C:\Qoobox
2010-11-24 17:17:14 ----SD---- C:\WINDOWS\Tasks
2010-11-24 17:16:39 ----D---- C:\WINDOWS\ERDNT
2010-11-24 17:16:23 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-24 17:12:43 ----D---- C:\WINDOWS
2010-11-24 17:12:43 ----A---- C:\WINDOWS\system.ini
2010-11-24 17:11:06 ----D---- C:\WINDOWS\system32\drivers\etc
2010-11-24 17:06:11 ----D---- C:\WINDOWS\system32\config
2010-11-24 17:03:58 ----D---- C:\WINDOWS\system32
2010-11-24 17:01:32 ----D---- C:\WINDOWS\AppPatch
2010-11-24 17:01:25 ----D---- C:\Program Files\Common Files
2010-11-24 16:50:58 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-11-24 16:49:23 ----D---- C:\ComboFix
2010-11-24 16:35:27 ----D---- C:\WINDOWS\Microsoft.NET
2010-11-24 16:35:13 ----RSD---- C:\WINDOWS\assembly
2010-11-24 16:04:58 ----SHD---- C:\WINDOWS\Installer
2010-11-24 09:18:29 ----D---- C:\Program Files\TNod User & Password Finder
2010-11-24 07:12:01 ----D---- C:\WINDOWS\Prefetch
2010-11-24 05:27:41 ----SHD---- C:\System Volume Information
2010-11-24 05:26:57 ----D---- C:\Program Files\LogMeIn
2010-11-23 19:40:49 ----D---- C:\WINDOWS\WinSxS
2010-11-23 08:18:45 ----D---- C:\Documents and Settings
2010-11-22 22:26:45 ----D---- C:\Program Files\DivX
2010-11-22 22:26:42 ----D---- C:\Program Files\Common Files\DivX Shared
2010-11-22 22:15:26 ----ASH---- C:\boot.ini
2010-11-22 21:28:18 ----A---- C:\WINDOWS\win.ini
2010-11-22 21:22:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-11-22 21:20:24 ----D---- C:\Program Files\Spyware Terminator
2010-11-22 21:11:53 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\Spyware Terminator
2010-11-22 20:44:42 ----HD---- C:\WINDOWS\inf
2010-11-22 20:44:25 ----A---- C:\WINDOWS\hpdj3600.ini
2010-11-22 20:44:15 ----D---- C:\Program Files\Hewlett-Packard
2010-11-22 20:42:46 ----D---- C:\Program Files\Get Styles
2010-11-21 11:20:19 ----D---- C:\WINDOWS\system32\Restore
2010-11-20 12:08:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-11-20 12:02:04 ----A---- C:\WINDOWS\system32\MRT.exe
2010-11-19 16:39:06 ----D---- C:\Program Files\R.G. Mechanics
2010-11-19 16:38:25 ----HD---- C:\Program Files\InstallShield Installation Information
2010-11-19 16:34:37 ----D---- C:\Program Files\Common Files\BioWare
2010-11-19 16:33:19 ----D---- C:\Program Files\Frets on Fire
2010-11-19 16:32:34 ----D---- C:\Program Files\Outspark
2010-11-17 15:03:03 ----D---- C:\Program Files\Mozilla Firefox
2010-11-17 11:41:23 ----D---- C:\All my music
2010-11-16 16:04:45 ----D---- C:\WINDOWS\Minidump
2010-11-16 14:00:38 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-15 21:05:25 ----D---- C:\totalcmd
2010-11-15 21:05:25 ----D---- C:\Program Files\Lineage II
2010-11-15 19:33:32 ----D---- C:\WINDOWS\Help
2010-11-15 19:33:12 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-11-15 19:31:52 ----D---- C:\Program Files\NVIDIA Corporation
2010-11-15 17:16:46 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\uTorrent
2010-11-14 17:59:36 ----D---- C:\Program Files\Activision
2010-11-11 20:34:28 ----D---- C:\Program Files\Cheat Engine
2010-11-11 20:20:54 ----D---- C:\Program Files\WinClamAVShield
2010-11-07 08:11:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-28 19:59:41 ----D---- C:\WINDOWS\system32\DirectX
2010-10-25 16:45:19 ----D---- C:\Program Files\Team Fortress 2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\System32\Drivers\vbtenum.sys [2007-03-05 20880]
R0 BTHidMgr;Bluetooth HID Manager Service; C:\WINDOWS\System32\Drivers\BTHidMgr.sys [2007-03-05 35600]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-05-01 43528]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-08-06 721904]
R0 SymDS;Symantec Data Store; C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMDS.SYS [2009-10-15 328752]
R0 SymEFA;Symantec Extended File Attributes; C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMEFA.SYS [2010-04-22 173104]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2008-10-02 82380]
R1 appdrv01;Application Driver (01); C:\WINDOWS\System32\Drivers\appdrv01.sys [2009-10-28 2915944]
R1 BHDrvx86;BHDrvx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20101104.001\BHDrvx86.sys []
R1 ccHP;Symantec Hash Provider; C:\WINDOWS\system32\drivers\N360\0402000.00C\ccHPx86.sys [2010-02-26 501888]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys []
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\WINDOWS\system32\drivers\N360\0402000.00C\SRTSPX.SYS [2010-04-22 43696]
R1 SymIRON;Symantec Iron Driver; C:\WINDOWS\system32\drivers\N360\0402000.00C\Ironx86.SYS [2010-04-29 116784]
R1 SYMTDI;Symantec Network Dispatch Driver; C:\WINDOWS\System32\Drivers\N360\0402000.00C\SYMTDI.SYS [2010-05-06 361904]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-10-20 281760]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-10-20 25888]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R2 npkcrypt;npkcrypt; \??\C:\Hry\Czechgamers\system\npkcrypt.sys []
R3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2007-05-11 34704]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2007-03-05 27792]
R3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2007-03-05 18320]
R3 catchme;catchme; \??\C:\beruška.com\catchme.sys []
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-09-28 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20101122.006\IDSxpx86.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-10-02 4613120]
R3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [2010-01-27 10144]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-10-22 9623680]
R3 NVR0Dev;NVR0Dev; \??\C:\WINDOWS\nvoclock.sys []
R3 radpms;Driver for RADPMS Device; C:\WINDOWS\system32\DRIVERS\radpms.sys [2010-05-18 13408]
R3 Razerlow;Diamondback 3G USB Filter Driver; C:\WINDOWS\System32\Drivers\DB3G.sys [2005-04-24 13225]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-18 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-10-03 102656]
R3 SbieDrv;SbieDrv; \??\C:\Program Files\Sandboxie\SbieDrv.sys []
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2005-12-08 8718848]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2007-03-05 34448]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2007-03-05 44304]
S3 avt4g9ug;avt4g9ug; C:\WINDOWS\system32\drivers\avt4g9ug.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2007-05-09 36496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp []
S3 GMSIPCI;GMSIPCI; C:\WINDOWS\system32\drivers\GMSIPCI.sys []
S3 mbr;mbr; \??\C:\DOCUME~1\THEF3@~1\LOCALS~1\Temp\mbr.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMP50.sys []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMP50a64.sys []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMPR5.sys []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRENDIS5.sys []
S3 MRESP50;MRESP50 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRESP50.sys []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRESP50a64.sys []
S3 MSICPL;MSICPL; C:\WINDOWS\system32\drivers\MSICPL.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20101123.051\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20101123.051\NAVEX15.SYS []
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NTACCESS;NTACCESS; C:\WINDOWS\system32\drivers\NTACCESS.sys []
S3 PsSdk40;PsSdk40; \??\C:\WINDOWS\system32\Drivers\pssdk40.sys []
S3 PsSdkLBF;PsSdkLBF; \??\C:\WINDOWS\system32\Drivers\pssdklbf.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 s616bus;Sony Ericsson Device 616 driver (WDM); C:\WINDOWS\system32\DRIVERS\s616bus.sys [2007-04-03 83208]
S3 s616mdfl;Sony Ericsson Device 616 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s616mdfl.sys [2007-04-03 15112]
S3 s616mdm;Sony Ericsson Device 616 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s616mdm.sys [2007-04-03 108680]
S3 s616mgmt;Sony Ericsson Device 616 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s616mgmt.sys [2007-04-03 100360]
S3 s616nd5;Sony Ericsson Device 616 USB Ethernet Emulation SEMC616 (NDIS); C:\WINDOWS\system32\DRIVERS\s616nd5.sys [2007-04-03 23176]
S3 s616obex;Sony Ericsson Device 616 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s616obex.sys [2007-04-03 98568]
S3 s616unic;Sony Ericsson Device 616 USB Ethernet Emulation SEMC616 (WDM); C:\WINDOWS\system32\DRIVERS\s616unic.sys [2007-04-03 99080]
S3 SetupNTGLM7X;SetupNTGLM7X; C:\WINDOWS\system32\drivers\SetupNTGLM7X.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SRTSP;Symantec Real Time Storage Protection; C:\WINDOWS\System32\Drivers\N360\0402000.00C\SRTSP.SYS [2010-04-22 325680]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 tap0901_2gm;VPN Anonymizer Adapter; C:\WINDOWS\system32\DRIVERS\tap0901_2gm.sys [2007-06-21 30720]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 w200bus;Sony Ericsson W200 driver (WDM); C:\WINDOWS\system32\DRIVERS\w200bus.sys [2006-11-07 61504]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 XDva344;XDva344; \??\C:\WINDOWS\system32\XDva344.sys []
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-17 153376]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe [2010-09-27 374152]
R2 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2010-10-06 116104]
R2 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2010-01-27 63040]
R2 MySQL;MySQL; C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt --defaults-file=C:\Program Files\MySQL\MySQL Server 5.0\my.ini MySQL []
R2 N360;Norton 360; C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe [2010-02-26 126392]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
R2 nTuneService;nTune Service; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [2007-09-04 131072]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-10-16 156776]
R2 SbieSvc;Sandboxie Service; C:\Program Files\Sandboxie\SbieSvc.exe [2009-09-30 65024]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-08-19 488960]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-21 540968]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\WINDOWS\System32\appdrvrem01.exe [2009-10-28 304528]
S2 uokwveoka;SigmaTel Audio Service; C:\WINDOWS\system32\gouquoon.exe []
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-04-06 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe []
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Uživatelský avatar
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8721
Registrován: 09 pro 2006 06:19
Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#2 Příspěvek od cernohous13 »

Zdravím,

RSIT log po použití ComboFixu je nám platný jak mrtvému zuby :(

Dej sem C:\ComboFix.txt
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#3 Příspěvek od MadBull »

ComboFix 10-11-23.05 - The F3@R 24.11.2010 16:54:58.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2047.1385 [GMT 1:00]
Spuštěný z: c:\documents and settings\The F3@R\Plocha\beruška.com.exe
AV: Norton 360 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\The F3@R\Data aplikací\system32
c:\documents and settings\The F3@R\Data aplikací\system32\klog.dat
c:\documents and settings\The F3@R\secupdat.dat
C:\Thumbs.db
c:\windows\box.exe
c:\windows\system32\Drivers\wuxttify.sys
c:\windows\system32\secupdat.dat
c:\windows\system32\Thumbs.db
c:\windows\Temp\spoolsv
c:\windows\Temp\spoolsv\Desktop.ini
c:\windows\Temp\spoolsv\mirc.ico
c:\windows\Temp\spoolsv\popups.txt
.
---- Předchozí spuštění -------
.
C:\a2h2.com
c:\docume~1\THEF3@~1\LOCALS~1\Temp\tmp1.tmp
c:\docume~1\THEF3@~1\LOCALS~1\Temp\tmp2.tmp
C:\install.exe
c:\program files\altcmd\altcmd.inf
c:\program files\altcmd\uninstall.bat
c:\windows\AhnRpta.exe
c:\windows\inform.dat
c:\windows\system32\DIGEST32.DLL
c:\windows\system32\snapapi32.dll
c:\windows\system32\wowfx.dll

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_KAVSYS
-------\Service_svchost
-------\Legacy_wuxttify
-------\Service_wuxttify


((((((((((((((((((((((((( Soubory vytvořené od 2010-10-24 do 2010-11-24 )))))))))))))))))))))))))))))))
.

2010-11-24 15:04 . 2010-11-24 15:04 -------- d-----w- c:\documents and settings\The F3@R\Data aplikací\Nero
2010-11-24 14:49 . 2010-11-24 14:49 -------- d-----w- c:\program files\Nero
2010-11-23 18:53 . 2010-11-23 18:53 -------- d-----w- C:\N360_BACKUP
2010-11-23 18:43 . 2010-11-23 18:43 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
2010-11-23 18:43 . 2010-11-23 18:43 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2010-11-23 18:43 . 2010-11-23 18:43 -------- d-----w- c:\program files\Symantec
2010-11-23 18:41 . 2010-11-24 13:47 -------- d-----w- c:\windows\system32\drivers\N360
2010-11-23 18:41 . 2010-11-23 18:41 -------- d-----w- c:\program files\Norton 360
2010-11-23 18:41 . 2010-11-23 18:41 -------- d-----w- c:\program files\Windows Sidebar
2010-11-23 14:38 . 2010-11-23 18:52 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-11-23 14:35 . 2010-11-23 18:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Norton
2010-11-23 14:35 . 2010-11-23 14:35 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Symantec
2010-11-23 14:35 . 2010-11-24 04:26 -------- d-----w- c:\program files\NortonInstaller
2010-11-23 07:18 . 2010-11-23 07:18 -------- d-----w- c:\documents and settings\Jára.LINEAGE
2010-11-22 21:24 . 2010-11-22 21:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\DivX
2010-11-22 20:40 . 2010-11-22 20:40 -------- d-----w- c:\program files\YourWare Solutions
2010-11-22 19:52 . 2010-11-22 19:52 -------- d-----w- c:\program files\Lavalys
2010-11-22 19:43 . 2003-09-01 12:10 266240 ----a-w- c:\windows\system32\hpdj3600
2010-11-21 10:45 . 2010-11-21 10:45 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\O&O
2010-11-17 09:57 . 2010-11-17 09:57 -------- d-----w- c:\documents and settings\Guest
2010-11-15 18:31 . 2010-10-22 06:23 888424 ----a-w- c:\windows\system32\nvdispco32.dll
2010-11-15 18:31 . 2010-10-22 06:23 813672 ----a-w- c:\windows\system32\nvgenco32.dll
2010-11-14 18:06 . 2010-11-14 18:06 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\Activision
2010-11-11 22:39 . 2010-11-11 22:39 -------- d-----w- c:\windows\B83FC356B7C0441F8A4DD71E088E7974.TMP
2010-11-11 22:38 . 2010-11-11 22:38 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\Divinity 2
2010-11-11 22:37 . 2010-11-11 22:37 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Divinity 2
2010-11-11 22:24 . 2010-11-11 22:39 -------- d-----w- c:\program files\Divinity II - DKS
2010-11-09 08:33 . 2010-11-09 08:33 -------- d-sh--w- c:\documents and settings\Jára\PrivacIE
2010-11-03 17:30 . 2010-11-01 18:13 -------- d-----w- c:\documents and settings\The F3@R\Data aplikací\.minecraft
2010-10-28 18:37 . 2010-10-28 18:37 -------- d-----w- c:\program files\JoWooD Entertainment AG

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-22 06:23 . 2010-08-31 18:39 61440 ----a-w- c:\windows\system32\OpenCL.dll
2010-10-22 06:23 . 2008-07-26 10:48 14532608 ----a-w- c:\windows\system32\nvoglnt.dll
2010-10-22 06:23 . 2009-08-16 22:57 2932840 ----a-w- c:\windows\system32\nvcuvid.dll
2010-10-22 06:23 . 2009-08-16 22:57 2666600 ----a-w- c:\windows\system32\nvcuvenc.dll
2010-10-22 06:23 . 2008-07-26 10:48 4882432 ----a-w- c:\windows\system32\nvcuda.dll
2010-10-22 06:23 . 2010-08-31 18:39 13012992 ----a-w- c:\windows\system32\nvcompiler.dll
2010-10-22 06:23 . 2008-07-26 10:48 9623680 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2010-10-22 06:23 . 2008-07-26 10:48 6359552 ----a-w- c:\windows\system32\nv4_disp.dll
2010-10-22 06:23 . 2008-07-26 10:48 1462272 ----a-w- c:\windows\system32\nvapi.dll
2010-10-16 11:05 . 2010-10-16 11:05 81920 ----a-w- c:\windows\system32\nvwddi.dll
2010-10-16 11:05 . 2010-10-16 11:05 335872 ----a-w- c:\windows\system32\nvrsar.dll
2010-10-16 11:05 . 2010-10-16 11:05 331776 ----a-w- c:\windows\system32\nvrshe.dll
2010-10-16 11:05 . 2010-10-16 11:05 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrses.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrsel.dll
2010-10-16 11:05 . 2010-10-16 11:05 278528 ----a-w- c:\windows\system32\nvrsde.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsru.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2010-10-16 11:05 . 2010-10-16 11:05 266240 ----a-w- c:\windows\system32\nvrsko.dll
2010-10-16 11:05 . 2010-10-16 11:05 262144 ----a-w- c:\windows\system32\nvrshu.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrstr.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrssl.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrssk.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsth.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrssv.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsda.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrseng.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrscs.dll
2010-10-16 11:05 . 2010-10-16 11:05 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2010-10-16 11:05 . 2010-10-16 11:05 126976 ----a-w- c:\windows\system32\nvrszht.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrsit.dll
2010-10-16 11:05 . 2010-10-16 11:05 277608 ----a-w- c:\windows\system32\nvmccs.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrspt.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsja.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrspl.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsno.dll
2010-10-16 11:05 . 2010-10-16 11:05 156776 ----a-w- c:\windows\system32\nvsvc32.exe
2010-10-16 11:05 . 2010-10-16 11:05 145000 ----a-w- c:\windows\system32\nvcolor.exe
2010-10-16 11:05 . 2010-10-16 11:05 13851752 ----a-w- c:\windows\system32\nvcpl.dll
2010-10-16 11:05 . 2010-10-16 11:05 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-10-06 11:34 . 2010-08-16 14:32 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2010-10-06 11:34 . 2010-08-16 14:32 53632 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll
2010-10-06 11:34 . 2010-08-16 14:32 29568 ----a-w- c:\windows\system32\LMIport.dll
2010-10-06 11:34 . 2010-08-16 14:32 87424 ----a-w- c:\windows\system32\LMIinit.dll
2010-09-18 10:23 . 2004-08-18 12:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2004-08-18 12:00 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2004-08-18 12:00 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2004-08-18 12:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:52 . 2004-08-18 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 05:52 . 2004-08-18 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-09-10 05:52 . 2004-08-18 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:52 . 2004-08-18 12:00 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-09-01 07:57 . 2004-08-18 12:00 1852800 ----a-w- c:\windows\system32\win32k.sys
2010-08-27 08:03 . 2004-08-18 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:54 . 2004-08-18 12:00 99840 ----a-w- c:\windows\system32\srvsvc.dll
2010-08-27 01:43 . 2008-05-05 05:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 81920]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-09-27 16844800]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-06-16 221184]
"tsnpstd3"="c:\windows\tsnpstd3.exe" [2005-12-20 94208]
"snpstd3"="c:\windows\vsnpstd3.exe" [2005-09-05 339968]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"Diamondback"="c:\program files\Razer\Diamondback 3G\razerhid.exe" [2007-08-01 147456]
"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2010-01-27 63048]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-07-21 141608]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-08-10 421888]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-10-16 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-10-16 13851752]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-08-25 1753192]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-16 1164584]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableLockWorkstation"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2010-10-06 11:34 87424 ----a-w- c:\windows\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digest32.dll

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^0wwrine.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\0wwrine.exe
backup=c:\windows\pss\0wwrine.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6cnndez.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\6cnndez.exe
backup=c:\windows\pss\6cnndez.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6xnndj2.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\6xnndj2.exe
backup=c:\windows\pss\6xnndj2.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^86q81cn.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\86q81cn.exe
backup=c:\windows\pss\86q81cn.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9g1cyyt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\9g1cyyt.exe
backup=c:\windows\pss\9g1cyyt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9m1ieez.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\9m1ieez.exe
backup=c:\windows\pss\9m1ieez.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eaavmmhyyt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\eaavmmhyyt.exe
backup=c:\windows\pss\eaavmmhyyt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eezqqlcc.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\eezqqlcc.exe
backup=c:\windows\pss\eezqqlcc.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ez03gwrx.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\ez03gwrx.exe
backup=c:\windows\pss\ez03gwrx.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^faa6mm6yy6k.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\faa6mm6yy6k.exe
backup=c:\windows\pss\faa6mm6yy6k.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^g1cyytkkfw.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\g1cyytkkfw.exe
backup=c:\windows\pss\g1cyytkkfw.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^jjfvvrhhdtt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\jjfvvrhhdtt.exe
backup=c:\windows\pss\jjfvvrhhdtt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^k3g8cnoz.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\k3g8cnoz.exe
backup=c:\windows\pss\k3g8cnoz.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^llhxxtjjfvv.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\llhxxtjjfvv.exe
backup=c:\windows\pss\llhxxtjjfvv.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^pfl66sddtup.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\pfl66sddtup.exe
backup=c:\windows\pss\pfl66sddtup.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^qq6cc6ejf.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\qq6cc6ejf.exe
backup=c:\windows\pss\qq6cc6ejf.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rrnddzpplbb.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\rrnddzpplbb.exe
backup=c:\windows\pss\rrnddzpplbb.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rx5ny2zp.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\rx5ny2zp.exe
backup=c:\windows\pss\rx5ny2zp.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^s6ee6qq6.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\s6ee6qq6.exe
backup=c:\windows\pss\s6ee6qq6.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ull2rhid.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\ull2rhid.exe
backup=c:\windows\pss\ull2rhid.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytk.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytk.exe
backup=c:\windows\pss\vmmhyytk.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytkkfw.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytkkfw.exe
backup=c:\windows\pss\vmmhyytkkfw.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^wwriiduu.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\wwriiduu.exe
backup=c:\windows\pss\wwriiduu.exeStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 10:44 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2004-06-16 04:03 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
2007-02-20 12:06 741376 ----a-w- c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Hry\\Beefko2\\Battlefield 2\\BF2.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Hry\\Valve\\cstrike.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Graphisoft\\ArchiCAD 12\\ArchiCAD.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"c:\\WINDOWS\\system32\\nvsvc32.exe"=
"c:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"=
"c:\\Program Files\\Warcraft III\\Warcraft III.exe"=
"c:\\Coexistence\\balicek pro loader\\loader\\loader.exe"=
"c:\\Program Files\\THQ\\Dawn of War - Dark Crusade\\DarkCrusade.exe"=
"c:\\Program Files\\Garena\\Garena.exe"=
"c:\\Program Files\\Electronic Arts\\Battlefield Bad Company 2\\BFBC2Updater.exe"=
"c:\\Program Files\\TmUnitedForever\\TmForever.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Program Files\\Team Fortress 2\\hl2.exe"=
"c:\\Program Files\\Activision\\Blur(TM)\\Blur.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\Ubisoft\\Demo\\Tom Clancy's H.A.W.X\\HAWX.exe"=
"c:\\Program Files\\Ubisoft\\Tom Clancy's H.A.W.X\\HAWX.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe"=
"c:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Ventrilo\\Ventrilo.exe"=
"c:\\Documents and Settings\\The F3@R\\Plocha\\CS.S\\Counter-Strike Source\\hl2.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"4719:TCP"= 4719:TCP:4719
"58452:TCP"= 58452:TCP:Pando Media Booster
"58452:UDP"= 58452:UDP:Pando Media Booster

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [19.9.2008 14:38 721904]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360\0402000.00C\symds.sys [24.11.2010 5:39 328752]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\0402000.00C\symefa.sys [24.11.2010 5:39 173104]
R1 appdrv01;Application Driver (01);c:\windows\system32\drivers\appdrv01.sys [28.10.2009 23:27 2915944]
R1 BHDrvx86;BHDrvx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20101104.001\BHDrvx86.sys [4.11.2010 15:02 691248]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360\0402000.00C\cchpx86.sys [24.11.2010 5:39 501888]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [19.8.2010 9:28 142592]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360\0402000.00C\ironx86.sys [24.11.2010 5:39 116784]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn\x86\LMIGuardianSvc.exe [21.10.2010 15:25 374152]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\rainfo.sys [27.1.2010 11:22 12856]
R2 N360;Norton 360;c:\program files\Norton 360\Engine\4.2.0.12\ccsvchst.exe [24.11.2010 5:38 126392]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [23.11.2010 19:57 102448]
R3 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20101122.006\IDSXpx86.sys [24.11.2010 8:30 341944]
R3 radpms;Driver for RADPMS Device;c:\windows\system32\drivers\radpms.sys [18.5.2010 15:54 13408]
R3 Razerlow;Diamondback 3G USB Filter Driver;c:\windows\system32\drivers\DB3G.sys [25.8.2009 11:42 13225]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc --> c:\windows\System32\appdrvrem01.exe svc [?]
S2 uokwveoka;SigmaTel Audio Service;c:\windows\system32\gouquoon.exe --> c:\windows\system32\gouquoon.exe [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp --> c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp [?]
S3 PsSdk40;PsSdk40;c:\windows\system32\drivers\pssdk40.sys [18.12.2008 18:02 36928]
S3 PsSdkLBF;PsSdkLBF;c:\windows\system32\drivers\pssdklbf.sys [18.12.2008 18:02 53312]
S3 SetupNTGLM7X;SetupNTGLM7X; [x]
S3 tap0901_2gm;VPN Anonymizer Adapter;c:\windows\system32\drivers\tap0901_2gm.sys [21.6.2007 16:21 30720]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys --> c:\windows\system32\DRIVERS\wdcsam.sys [?]
S3 XDva344;XDva344;\??\c:\windows\system32\XDva344.sys --> c:\windows\system32\XDva344.sys [?]
.
Obsah adresáře 'Naplánované úlohy'

2010-11-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50]

2010-11-24 c:\windows\Tasks\User_Feed_Synchronization-{2606D27B-C854-4676-AD4B-67D6EED0B35B}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

2010-11-24 c:\windows\Tasks\User_Feed_Synchronization-{F459FEEF-323E-47EB-944B-928F406D5428}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://fullarticles.net
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Get Styles\ct.htm
FF - ProfilePath - c:\documents and settings\The F3@R\Data aplikací\Mozilla\Firefox\Profiles\42j9amxb.default\
FF - prefs.js: browser.startup.homepage - hxxp://search-styles.com/
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\Pando Networks\Media Booster\npPandoWebPlugin.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Notify-byXPFXoN - byXPFXoN.dll
Notify-geBtUKBu - geBtUKBu.dll
Notify-nnnnKdcY - nnnnKdcY.dll
Notify-tuvUKApn - tuvUKApn.dll
Notify-tuvWpqPj - tuvWpqPj.dll
Notify-wvUnNefd - wvUnNefd.dll
SafeBoot-wuxttify.sys
AddRemove-Fraps - c:\fraps\uninstall.exe
AddRemove-mIRC - c:\windows\temp\spoolsv\spoolsv.exe
AddRemove-SSF Realism Mod - c:\program files\S.W.A.T. 4\Uninstal.exe
AddRemove-VPN Anonymizer - c:\program files\VPN Anonymizer\uninst.exe
AddRemove-WinLiveSuite_Wave3 - c:\program files\Windows Live\Installer\wlarp.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-24 17:11
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\N360]
"ImagePath"="\"c:\program files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\4.2.0.12\diMaster.dll\" /prefetch:1"

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp"

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MySQL]
"ImagePath"="\"c:\program files\MySQL\MySQL Server 5.0\bin\mysqld-nt\" --defaults-file=\"c:\program files\MySQL\MySQL Server 5.0\my.ini\" MySQL"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:3d,ec,eb,de,c3,d3,e7,2a,b6,62,dd,ee,6b,68,ed,7d,99,7a,6e,71,1e,f0,d3,
e2,7e,06,5f,0b,2b,96,db,58,f1,ba,fd,66,8f,d2,3b,25,3b,e6,1e,bc,f2,23,b4,55,\
"??"=hex:a7,61,c4,92,34,60,18,e8,7c,ea,92,73,36,ea,44,87

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:97,2b,dd,90,c9,e0,d2,72,e9,ea,5d,7f,45,13,e6,13,50,fc,b1,e8,5c,
7d,b0,9b,95,d8,f4,02,36,5d,84,95,f0,8e,24,6f,21,92,27,c7,61,ea,f4,4a,65,61,\
"rkeysecu"=hex:9b,ad,47,3a,89,d5,35,7c,e1,b5,1d,6e,51,d3,bb,ea

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG12.00.00.01PROFESSIONAL"="C248198D85B000CDD7B480382EE9ACCB9F24996AF302BCFCC6E01D3EC106FD8444E57A3993EF5059E0C3362EC0AB1093564FD77964ED0908F59F6A7C4EDE803465E389F8061247FD69FD7EB0D94EE5BABCF8735E06A7CB117E43ABF663671DA12FC5D53E2F41848530BCEC2CD4E21C9A6BF09E24DA45E21E763152F34DD8C21E4D25B4AB437E27AE9D6F5341714EA57C249BCE874C2F322814DF97ED3C44E46E112F3D19DC1ED32BBA96CDC44FC97721486E3FFAA4A51F9833DD7594448A7B4BEEA64C1377C633A034C936BEF7610A3ADEF6EC2314B71551D4C92BC85E6482E101FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C5D575E7D6A3B9808A2D97226D213B5558EDD5E5BE2F6E667C038D530D6EB34526652DA1D391236DF134F24A96D49118014456FF35EE98746074E10A0D876082A4134DD9081A55ED70B2C7B8F43B4E02938A5EC2007B6F1B07FA8F743BA7F42D0B447DC62AA14796D4019DA3EAA37191FF3C8FDF28BFE3D7FAEB54C896977A809C3A1B61B3F5EA17848EC5B8450639DD015671CA5DF863C5D33AE84B5BE7519D2079BFB271D8C617550C24B18B6D1C555FCFC71D54C15B498C790C66E6613E55729D5F1D476283A039A782F10379D616321CA5F84EB79E0A1349CF0BDE16CD75F69309356CF411D6578B4BBEA7B66305A8AD4F618AE046F8FD659929285A4A85C1B520DC505E87585D45ADB0701CE66B955E181D85787001C228D70BF7A61075FA4A5BF1DC1371E6D2A982E2A9B002EA5347FFAF580DE2BA41DC6047A3C4B972082D8C23B09C6E54F89DA857A722624E86CFC90FE13E57AABE1D8F85D1E1070F7435EDC6330B412FC1657E8877FEE5A6FD66F286A51FCE9571ED430E7C2E19B680B6B0FBE6025DAEF0A8311BF918F54C961ADD8104D086EEF14183EFAA3F6999210FA0857193EEB43AF9A6E784B3F8BAD8CD46CAFEDF0EB651ABBEADE8C085DBD1E4A2F1EAAAA6536E89D22E9A5396C736D45646871A4BDC81BA433BBA053CC55145C1DE33B99DAAE294C03AFE83DD997ADA2F341E59231CF157548225299C467E5769EE1453CD4B279309C4A3390273C0B5481A3303088549A170E836C2113289AA337B2944A4F6F7494AC9E7A779E265688A9DB8775F8D450B89CB50AB47A6CCD321BD6CDFDB9B3CC88267682407CBCF32D3B1B77DF2E7272CAC1749B20B1B0ADB3B430649778F3C45E2EFAE8BA710E5F783B78DE7045734F81FCDC68B4E514FE7D9F07A357E34835ACA0BE99B923CB24615F6C74AAD0C1C65703F1874AB35818AAAF872885C76D0BCF8CB65994AAC8E3231454BC96D5EAD108BB99E4392F65E39A6940E46BE3C04567B23A3DA6947F54BFF77295C2CEA2F916451FC25FDFC4E1EC85A39D596DC7F9550B0532D0E1"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(892)
c:\windows\system32\LMIinit.dll

- - - - - - - > 'explorer.exe'(1320)
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
c:\windows\system32\LMIRfsClientNP.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\progra~1\LogMeIn\x86\LOGMEI~2.EXE
c:\progra~1\LogMeIn\x86\LMIGuardianSvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\LogMeIn\x86\RaMaint.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\program files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\program files\NVIDIA Corporation\nTune\nTuneService.exe
c:\program files\Sandboxie\SbieSvc.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\program files\Razer\Diamondback 3G\razertra.exe
c:\program files\Razer\Diamondback 3G\razerofa.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Common Files\Java\Java Update\jucheck.exe
.
**************************************************************************
.
Celkový čas: 2010-11-24 17:18:21 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-24 16:18

Před spuštěním: Volných bajtů: 257 589 735 424
Po spuštění: Volných bajtů: 259 546 755 072

Current=3 Default=3 Failed=1 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 4FE8B039C8CB6DE79A5B93ED819F7F12


(Omlouvám se, jsem si to zkoušel opravit sám ale akorát bych to asi zase rozesral )

Uživatelský avatar
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8721
Registrován: 09 pro 2006 06:19
Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#4 Příspěvek od cernohous13 »

Připravím script - jen otázka
používáš a musí ti běžet:
iPod ?
Bonjour ?
Klikni na https://www.virustotal.com/cs/
klik "Procházet" > do zadávacího pole "Název souboru" jen zkopíruj:

C:\WINDOWS\system32\nvgenco32.dll

"Send file" (pokud byl již testován, nech testovat znovu - Reanalyse)
Trpělivě vyčkej dokončení scanu dokud se neobjeví konečný výsledek např.0/41
Do fóra zkopíruj výsledný log. nebo odkaz z adresního řádku na stránku.
Pokud nebude nález stačí jen oznámit
totéž se souborem:
C:\WINDOWS\system32\nvdispco32.dll
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#5 Příspěvek od MadBull »

Chyba serveru!

Nastala vnitřní chyba a server nebyl schopen dokončit Váš požadavek. Buď je server přetížen, nebo došlo k chybě v CGI skriptu.

A stále dokola :x , Bonjour vůbec netuším co je a i Pod mám a používám jen nejsem nadšený že procesy na něj nabíhají hned po startu PC

Uživatelský avatar
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8721
Registrován: 09 pro 2006 06:19
Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#6 Příspěvek od cernohous13 »

jj, VT má problémy - otestuj zde http://virusscan.jotti.org/cs
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#7 Příspěvek od MadBull »

0 nálezů a počítač je po combofixu trošku plynulejší ale furt mi příjde že dosahuje tak 30% původního výkonu

Uživatelský avatar
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8721
Registrován: 09 pro 2006 06:19
Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#8 Příspěvek od cernohous13 »

Start -> spustit... - zadej services.msc
najdi iPod Service -> pravým "Vlastnosti" -> typ spouštění -> Ručně -> OK
:arrow: na ploše Beruška.com smaž příponu .exe
:arrow: Otevři Poznámkový blok (Notepad) a zkopíruj celý zelený text z "CFscriptu".
Soubor ulož na plochu jako CFscript.txt a jeho ikonu přetáhni myší nad ikonu Beruška - tam pusť.
Obrázek
ComboFix se spustí - počkej na log a vlož ho sem.
CF script

Kód: Vybrat vše

KillAll::

Driver::
WLSetupSvc
uokwveoka
MySQL
JavaQuickStarterService
SetupNTGLM7X
XDva344
Bonjour Service

Registry::
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=-
"AdobeCS4ServiceManager"=-
"Adobe Reader Speed Launcher"=-
"QuickTime Task"=-
"SunJavaUpdateSched"=-
"DivXUpdate"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
:arrow: vyčisti Ccleanerem
Stáhni Ccleaner - http://www.slunecnice.cz/sw/ccleaner/
Při instalaci vyhodit fajfku u "Instalovat Yahoo! Toolbar"

zavřít Internetový prohlížeč a
spustit "Čistič" > "Spustit Ccleaner" - odstraní nepotřebné
spustit "Registry" > "Hledej problémy" > "Opravit vybrané problémy"
souhlas se zálohou registrů - opakovat dokud nebudou registry čisté.
spustit "Nástroje" > "Start" - tady můžeš zkusit deaktivovat procesy, které při spuštění nepotřebuješ (pokud by ti potom něco nechodilo, stejným způsobem je povolíš)
Návod:http://jnp.zive.cz/Clanky/Prirucka-do-k ... fault.aspx
Ten si můžeš nechat i na budoucí občasné čištění.

:arrow: přidej aktuální RSIT po restartu
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#9 Příspěvek od MadBull »

ComboFix 10-11-23.05 - The F3@R 24.11.2010 20:24:05.3.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2047.1410 [GMT 1:00]
Spuštěný z: c:\documents and settings\The F3@R\Plocha\beruška.exe
Použité ovládací přepínače :: c:\documents and settings\The F3@R\Plocha\CFscript.txt.txt
AV: Norton 360 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BONJOUR_SERVICE
-------\Legacy_JAVAQUICKSTARTERSERVICE
-------\Legacy_MYSQL
-------\Legacy_SETUPNTGLM7X
-------\Legacy_UOKWVEOKA
-------\Legacy_WLSETUPSVC
-------\Legacy_XDVA344
-------\Service_Bonjour Service
-------\Service_JavaQuickStarterService
-------\Service_MySQL
-------\Service_SetupNTGLM7X
-------\Service_uokwveoka
-------\Service_WLSetupSvc
-------\Service_XDva344


((((((((((((((((((((((((( Soubory vytvořené od 2010-10-24 do 2010-11-24 )))))))))))))))))))))))))))))))
.

2010-11-24 16:26 . 2010-11-24 16:27 -------- d-----w- c:\program files\trend micro
2010-11-24 16:26 . 2010-11-24 16:27 -------- d-----w- C:\rsit
2010-11-24 15:04 . 2010-11-24 15:04 -------- d-----w- c:\documents and settings\The F3@R\Data aplikací\Nero
2010-11-24 14:49 . 2010-11-24 14:49 -------- d-----w- c:\program files\Nero
2010-11-23 18:53 . 2010-11-23 18:53 -------- d-----w- C:\N360_BACKUP
2010-11-23 18:43 . 2010-11-23 18:43 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
2010-11-23 18:43 . 2010-11-23 18:43 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2010-11-23 18:43 . 2010-11-23 18:43 -------- d-----w- c:\program files\Symantec
2010-11-23 18:41 . 2010-11-24 13:47 -------- d-----w- c:\windows\system32\drivers\N360
2010-11-23 18:41 . 2010-11-23 18:41 -------- d-----w- c:\program files\Norton 360
2010-11-23 18:41 . 2010-11-23 18:41 -------- d-----w- c:\program files\Windows Sidebar
2010-11-23 14:38 . 2010-11-23 18:52 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-11-23 14:35 . 2010-11-23 18:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Norton
2010-11-23 14:35 . 2010-11-23 14:35 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Symantec
2010-11-23 14:35 . 2010-11-24 04:26 -------- d-----w- c:\program files\NortonInstaller
2010-11-23 07:18 . 2010-11-23 07:18 -------- d-----w- c:\documents and settings\Jára.LINEAGE
2010-11-22 21:24 . 2010-11-22 21:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\DivX
2010-11-22 20:40 . 2010-11-22 20:40 -------- d-----w- c:\program files\YourWare Solutions
2010-11-22 19:52 . 2010-11-22 19:52 -------- d-----w- c:\program files\Lavalys
2010-11-22 19:43 . 2003-09-01 12:10 266240 ----a-w- c:\windows\system32\hpdj3600
2010-11-21 10:45 . 2010-11-21 10:45 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\O&O
2010-11-17 09:57 . 2010-11-17 09:57 -------- d-----w- c:\documents and settings\Guest
2010-11-15 18:31 . 2010-10-22 06:23 888424 ----a-w- c:\windows\system32\nvdispco32.dll
2010-11-15 18:31 . 2010-10-22 06:23 813672 ----a-w- c:\windows\system32\nvgenco32.dll
2010-11-14 18:06 . 2010-11-14 18:06 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\Activision
2010-11-11 22:39 . 2010-11-11 22:39 -------- d-----w- c:\windows\B83FC356B7C0441F8A4DD71E088E7974.TMP
2010-11-11 22:38 . 2010-11-11 22:38 -------- d-----w- c:\documents and settings\The F3@R\Local Settings\Data aplikací\Divinity 2
2010-11-11 22:37 . 2010-11-11 22:37 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Divinity 2
2010-11-11 22:24 . 2010-11-11 22:39 -------- d-----w- c:\program files\Divinity II - DKS
2010-11-09 08:33 . 2010-11-09 08:33 -------- d-sh--w- c:\documents and settings\Jára\PrivacIE
2010-11-03 17:30 . 2010-11-01 18:13 -------- d-----w- c:\documents and settings\The F3@R\Data aplikací\.minecraft
2010-10-28 18:37 . 2010-10-28 18:37 -------- d-----w- c:\program files\JoWooD Entertainment AG

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-22 06:23 . 2010-08-31 18:39 61440 ----a-w- c:\windows\system32\OpenCL.dll
2010-10-22 06:23 . 2008-07-26 10:48 14532608 ----a-w- c:\windows\system32\nvoglnt.dll
2010-10-22 06:23 . 2009-08-16 22:57 2932840 ----a-w- c:\windows\system32\nvcuvid.dll
2010-10-22 06:23 . 2009-08-16 22:57 2666600 ----a-w- c:\windows\system32\nvcuvenc.dll
2010-10-22 06:23 . 2008-07-26 10:48 4882432 ----a-w- c:\windows\system32\nvcuda.dll
2010-10-22 06:23 . 2010-08-31 18:39 13012992 ----a-w- c:\windows\system32\nvcompiler.dll
2010-10-22 06:23 . 2008-07-26 10:48 9623680 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2010-10-22 06:23 . 2008-07-26 10:48 6359552 ----a-w- c:\windows\system32\nv4_disp.dll
2010-10-22 06:23 . 2008-07-26 10:48 1462272 ----a-w- c:\windows\system32\nvapi.dll
2010-10-16 11:05 . 2010-10-16 11:05 81920 ----a-w- c:\windows\system32\nvwddi.dll
2010-10-16 11:05 . 2010-10-16 11:05 335872 ----a-w- c:\windows\system32\nvrsar.dll
2010-10-16 11:05 . 2010-10-16 11:05 331776 ----a-w- c:\windows\system32\nvrshe.dll
2010-10-16 11:05 . 2010-10-16 11:05 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrses.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrsel.dll
2010-10-16 11:05 . 2010-10-16 11:05 278528 ----a-w- c:\windows\system32\nvrsde.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsru.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2010-10-16 11:05 . 2010-10-16 11:05 266240 ----a-w- c:\windows\system32\nvrsko.dll
2010-10-16 11:05 . 2010-10-16 11:05 262144 ----a-w- c:\windows\system32\nvrshu.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrstr.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrssl.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrssk.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsth.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrssv.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsda.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrseng.dll
2010-10-16 11:05 . 2010-10-16 11:05 249856 ----a-w- c:\windows\system32\nvrscs.dll
2010-10-16 11:05 . 2010-10-16 11:05 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2010-10-16 11:05 . 2010-10-16 11:05 126976 ----a-w- c:\windows\system32\nvrszht.dll
2010-10-16 11:05 . 2010-10-16 11:05 282624 ----a-w- c:\windows\system32\nvrsit.dll
2010-10-16 11:05 . 2010-10-16 11:05 277608 ----a-w- c:\windows\system32\nvmccs.dll
2010-10-16 11:05 . 2010-10-16 11:05 274432 ----a-w- c:\windows\system32\nvrspt.dll
2010-10-16 11:05 . 2010-10-16 11:05 270336 ----a-w- c:\windows\system32\nvrsja.dll
2010-10-16 11:05 . 2010-10-16 11:05 258048 ----a-w- c:\windows\system32\nvrspl.dll
2010-10-16 11:05 . 2010-10-16 11:05 253952 ----a-w- c:\windows\system32\nvrsno.dll
2010-10-16 11:05 . 2010-10-16 11:05 156776 ----a-w- c:\windows\system32\nvsvc32.exe
2010-10-16 11:05 . 2010-10-16 11:05 145000 ----a-w- c:\windows\system32\nvcolor.exe
2010-10-16 11:05 . 2010-10-16 11:05 13851752 ----a-w- c:\windows\system32\nvcpl.dll
2010-10-16 11:05 . 2010-10-16 11:05 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-10-06 11:34 . 2010-08-16 14:32 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2010-10-06 11:34 . 2010-08-16 14:32 53632 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll
2010-10-06 11:34 . 2010-08-16 14:32 29568 ----a-w- c:\windows\system32\LMIport.dll
2010-10-06 11:34 . 2010-08-16 14:32 87424 ----a-w- c:\windows\system32\LMIinit.dll
2010-09-18 10:23 . 2004-08-18 12:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2004-08-18 12:00 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2004-08-18 12:00 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2004-08-18 12:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:52 . 2004-08-18 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 05:52 . 2004-08-18 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-09-10 05:52 . 2004-08-18 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:52 . 2004-08-18 12:00 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-09-01 07:57 . 2004-08-18 12:00 1852800 ----a-w- c:\windows\system32\win32k.sys
2010-08-27 08:03 . 2004-08-18 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:54 . 2004-08-18 12:00 99840 ----a-w- c:\windows\system32\srvsvc.dll
2010-08-27 01:43 . 2008-05-05 05:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-11-24_16.12.42 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-11-24 19:39 . 2010-11-24 19:39 16384 c:\windows\Temp\Perflib_Perfdata_498.dat
+ 2010-11-24 19:40 . 2010-11-24 19:40 16384 c:\windows\Temp\Perflib_Perfdata_258.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 81920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-09-27 16844800]
"tsnpstd3"="c:\windows\tsnpstd3.exe" [2005-12-20 94208]
"snpstd3"="c:\windows\vsnpstd3.exe" [2005-09-05 339968]
"Diamondback"="c:\program files\Razer\Diamondback 3G\razerhid.exe" [2007-08-01 147456]
"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2010-01-27 63048]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-07-21 141608]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-10-16 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-10-16 13851752]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-08-25 1753192]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableLockWorkstation"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2010-10-06 11:34 87424 ----a-w- c:\windows\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digest32.dll

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^0wwrine.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\0wwrine.exe
backup=c:\windows\pss\0wwrine.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6cnndez.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\6cnndez.exe
backup=c:\windows\pss\6cnndez.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6xnndj2.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\6xnndj2.exe
backup=c:\windows\pss\6xnndj2.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^86q81cn.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\86q81cn.exe
backup=c:\windows\pss\86q81cn.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9g1cyyt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\9g1cyyt.exe
backup=c:\windows\pss\9g1cyyt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9m1ieez.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\9m1ieez.exe
backup=c:\windows\pss\9m1ieez.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eaavmmhyyt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\eaavmmhyyt.exe
backup=c:\windows\pss\eaavmmhyyt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eezqqlcc.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\eezqqlcc.exe
backup=c:\windows\pss\eezqqlcc.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ez03gwrx.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\ez03gwrx.exe
backup=c:\windows\pss\ez03gwrx.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^faa6mm6yy6k.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\faa6mm6yy6k.exe
backup=c:\windows\pss\faa6mm6yy6k.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^g1cyytkkfw.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\g1cyytkkfw.exe
backup=c:\windows\pss\g1cyytkkfw.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^jjfvvrhhdtt.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\jjfvvrhhdtt.exe
backup=c:\windows\pss\jjfvvrhhdtt.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^k3g8cnoz.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\k3g8cnoz.exe
backup=c:\windows\pss\k3g8cnoz.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^llhxxtjjfvv.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\llhxxtjjfvv.exe
backup=c:\windows\pss\llhxxtjjfvv.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^pfl66sddtup.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\pfl66sddtup.exe
backup=c:\windows\pss\pfl66sddtup.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^qq6cc6ejf.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\qq6cc6ejf.exe
backup=c:\windows\pss\qq6cc6ejf.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rrnddzpplbb.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\rrnddzpplbb.exe
backup=c:\windows\pss\rrnddzpplbb.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rx5ny2zp.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\rx5ny2zp.exe
backup=c:\windows\pss\rx5ny2zp.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^s6ee6qq6.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\s6ee6qq6.exe
backup=c:\windows\pss\s6ee6qq6.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ull2rhid.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\ull2rhid.exe
backup=c:\windows\pss\ull2rhid.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytk.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytk.exe
backup=c:\windows\pss\vmmhyytk.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytkkfw.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytkkfw.exe
backup=c:\windows\pss\vmmhyytkkfw.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^wwriiduu.exe]
path=c:\documents and settings\The F3@R\Nabídka Start\Programy\Po spuštění\wwriiduu.exe
backup=c:\windows\pss\wwriiduu.exeStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 10:44 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
2007-02-20 12:06 741376 ----a-w- c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Hry\\Beefko2\\Battlefield 2\\BF2.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Hry\\Valve\\cstrike.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Graphisoft\\ArchiCAD 12\\ArchiCAD.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"c:\\WINDOWS\\system32\\nvsvc32.exe"=
"c:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"=
"c:\\Program Files\\Warcraft III\\Warcraft III.exe"=
"c:\\Coexistence\\balicek pro loader\\loader\\loader.exe"=
"c:\\Program Files\\THQ\\Dawn of War - Dark Crusade\\DarkCrusade.exe"=
"c:\\Program Files\\Garena\\Garena.exe"=
"c:\\Program Files\\Electronic Arts\\Battlefield Bad Company 2\\BFBC2Updater.exe"=
"c:\\Program Files\\TmUnitedForever\\TmForever.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Program Files\\Team Fortress 2\\hl2.exe"=
"c:\\Program Files\\Activision\\Blur(TM)\\Blur.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\Ubisoft\\Demo\\Tom Clancy's H.A.W.X\\HAWX.exe"=
"c:\\Program Files\\Ubisoft\\Tom Clancy's H.A.W.X\\HAWX.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe"=
"c:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Ventrilo\\Ventrilo.exe"=
"c:\\Documents and Settings\\The F3@R\\Plocha\\CS.S\\Counter-Strike Source\\hl2.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"4719:TCP"= 4719:TCP:4719
"58452:TCP"= 58452:TCP:Pando Media Booster
"58452:UDP"= 58452:UDP:Pando Media Booster

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [19.9.2008 14:38 721904]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360\0402000.00C\symds.sys [24.11.2010 5:39 328752]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\0402000.00C\symefa.sys [24.11.2010 5:39 173104]
R1 appdrv01;Application Driver (01);c:\windows\system32\drivers\appdrv01.sys [28.10.2009 23:27 2915944]
R1 BHDrvx86;BHDrvx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20101104.001\BHDrvx86.sys [4.11.2010 15:02 691248]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360\0402000.00C\cchpx86.sys [24.11.2010 5:39 501888]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [19.8.2010 9:28 142592]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360\0402000.00C\ironx86.sys [24.11.2010 5:39 116784]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn\x86\LMIGuardianSvc.exe [21.10.2010 15:25 374152]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\rainfo.sys [27.1.2010 11:22 12856]
R2 N360;Norton 360;c:\program files\Norton 360\Engine\4.2.0.12\ccsvchst.exe [24.11.2010 5:38 126392]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [23.11.2010 19:57 102448]
R3 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20101122.006\IDSXpx86.sys [24.11.2010 8:30 341944]
R3 radpms;Driver for RADPMS Device;c:\windows\system32\drivers\radpms.sys [18.5.2010 15:54 13408]
R3 Razerlow;Diamondback 3G USB Filter Driver;c:\windows\system32\drivers\DB3G.sys [25.8.2009 11:42 13225]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc --> c:\windows\System32\appdrvrem01.exe svc [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp --> c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp [?]
S3 PsSdk40;PsSdk40;c:\windows\system32\drivers\pssdk40.sys [18.12.2008 18:02 36928]
S3 PsSdkLBF;PsSdkLBF;c:\windows\system32\drivers\pssdklbf.sys [18.12.2008 18:02 53312]
S3 tap0901_2gm;VPN Anonymizer Adapter;c:\windows\system32\drivers\tap0901_2gm.sys [21.6.2007 16:21 30720]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys --> c:\windows\system32\DRIVERS\wdcsam.sys [?]
.
Obsah adresáře 'Naplánované úlohy'

2010-11-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50]

2010-11-24 c:\windows\Tasks\User_Feed_Synchronization-{2606D27B-C854-4676-AD4B-67D6EED0B35B}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

2010-11-24 c:\windows\Tasks\User_Feed_Synchronization-{F459FEEF-323E-47EB-944B-928F406D5428}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://fullarticles.net
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Get Styles\ct.htm
FF - ProfilePath - c:\documents and settings\The F3@R\Data aplikací\Mozilla\Firefox\Profiles\42j9amxb.default\
FF - prefs.js: browser.startup.homepage - hxxp://search-styles.com/
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-24 20:40
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\N360]
"ImagePath"="\"c:\program files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\4.2.0.12\diMaster.dll\" /prefetch:1"

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:3d,ec,eb,de,c3,d3,e7,2a,b6,62,dd,ee,6b,68,ed,7d,99,7a,6e,71,1e,f0,d3,
e2,7e,06,5f,0b,2b,96,db,58,f1,ba,fd,66,8f,d2,3b,25,3b,e6,1e,bc,f2,23,b4,55,\
"??"=hex:a7,61,c4,92,34,60,18,e8,7c,ea,92,73,36,ea,44,87

[HKEY_USERS\S-1-5-21-842925246-73586283-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:97,2b,dd,90,c9,e0,d2,72,e9,ea,5d,7f,45,13,e6,13,50,fc,b1,e8,5c,
7d,b0,9b,95,d8,f4,02,36,5d,84,95,f0,8e,24,6f,21,92,27,c7,61,ea,f4,4a,65,61,\
"rkeysecu"=hex:9b,ad,47,3a,89,d5,35,7c,e1,b5,1d,6e,51,d3,bb,ea

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG12.00.00.01PROFESSIONAL"="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"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(888)
c:\windows\system32\LMIinit.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
c:\windows\system32\LMIRfsClientNP.dll

- - - - - - - > 'explorer.exe'(2668)
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
c:\windows\system32\LMIRfsClientNP.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\LogMeIn\x86\RaMaint.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\program files\NVIDIA Corporation\nTune\nTuneService.exe
c:\program files\Sandboxie\SbieSvc.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\program files\Razer\Diamondback 3G\razertra.exe
c:\program files\Razer\Diamondback 3G\razerofa.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Celkový čas: 2010-11-24 20:46:13 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-24 19:46
ComboFix2.txt 2010-11-24 16:18

Před spuštěním: Volných bajtů: 259 544 506 368
Po spuštění: Volných bajtů: 259 523 915 776

Current=3 Default=3 Failed=1 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 2F6A457B6B745ACFC1B087373D45F8A7

Zatím combonaut, tedka jeste mazu pres CC cleaner

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#10 Příspěvek od MadBull »

Logfile of random's system information tool 1.08 (written by random/random)
Run by The F3@R at 2010-11-24 21:10:02
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 248 GB (41%) free of 610 GB
Total RAM: 2047 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:10:10, on 24.11.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\tsnpstd3.exe
C:\Program Files\Razer\Diamondback 3G\razerhid.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Razer\Diamondback 3G\razertra.exe
C:\Program Files\Razer\Diamondback 3G\razerofa.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\The F3@R\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The F3@R\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The F3@R\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The F3@R\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The F3@R\Dokumenty\Downloads\RSIT (1).exe
C:\Program Files\trend micro\The F3@R.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fullarticles.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.2.0.12\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [Diamondback] C:\Program Files\Razer\Diamondback 3G\razerhid.exe
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 8506 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{2606D27B-C854-4676-AD4B-67D6EED0B35B}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{F459FEEF-323E-47EB-944B-928F406D5428}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll [2010-05-13 394608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton 360\Engine\4.2.0.12\IPSBHO.DLL [2009-11-17 79224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\4.2.0.12\coIEPlg.dll [2010-05-13 394608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-09-27 16844800]
"tsnpstd3"=C:\WINDOWS\tsnpstd3.exe [2005-12-20 94208]
"snpstd3"=C:\WINDOWS\vsnpstd3.exe [2005-09-05 339968]
"Diamondback"=C:\Program Files\Razer\Diamondback 3G\razerhid.exe [2007-08-01 147456]
"LogMeIn GUI"=C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [2010-01-27 63048]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-07-21 141608]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-10-16 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-10-16 13851752]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-08-26 1753192]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"=C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe [2007-09-04 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2007-02-20 741376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^0wwrine.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\0wwrine.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6cnndez.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\6cnndez.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^6xnndj2.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\6xnndj2.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^86q81cn.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\86q81cn.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9g1cyyt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\9g1cyyt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^9m1ieez.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\9m1ieez.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eaavmmhyyt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\eaavmmhyyt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^eezqqlcc.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\eezqqlcc.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ez03gwrx.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\ez03gwrx.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^faa6mm6yy6k.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\faa6mm6yy6k.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^g1cyytkkfw.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\g1cyytkkfw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^jjfvvrhhdtt.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\jjfvvrhhdtt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^k3g8cnoz.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\k3g8cnoz.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^llhxxtjjfvv.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\llhxxtjjfvv.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^pfl66sddtup.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\pfl66sddtup.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^qq6cc6ejf.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\qq6cc6ejf.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rrnddzpplbb.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\rrnddzpplbb.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^rx5ny2zp.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\rx5ny2zp.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^s6ee6qq6.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\s6ee6qq6.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^ull2rhid.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\ull2rhid.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytk.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytk.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^vmmhyytkkfw.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\vmmhyytkkfw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The F3@R^Nabídka Start^Programy^Po spuštění^wwriiduu.exe]
C:\Documents and Settings\The F3@R\Nabídka Start\Programy\Po spuštění\wwriiduu.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2010-10-06 87424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digest32.dll

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Hry\Beefko2\Battlefield 2\BF2.exe"="C:\Hry\Beefko2\Battlefield 2\BF2.exe:*:Enabled:BF2"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Hry\Valve\cstrike.exe"="C:\Hry\Valve\cstrike.exe:*:Enabled:Counter-Strike Launcher"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Graphisoft\ArchiCAD 12\ArchiCAD.exe"="C:\Program Files\Graphisoft\ArchiCAD 12\ArchiCAD.exe:*:Enabled:ArchiCAD 12.0.0 Component"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\WINDOWS\system32\nvsvc32.exe"="C:\WINDOWS\system32\nvsvc32.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\wbem\wmiprvse.exe"="C:\WINDOWS\system32\wbem\wmiprvse.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Coexistence\balicek pro loader\loader\loader.exe"="C:\Coexistence\balicek pro loader\loader\loader.exe:*:Enabled:CzechGamers Server AutoUpdater"
"C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe"="C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe:*:Enabled:DarkCrusade"
"C:\Program Files\Garena\Garena.exe"="C:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"C:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="C:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"C:\Program Files\TmUnitedForever\TmForever.exe"="C:\Program Files\TmUnitedForever\TmForever.exe:*:Enabled:TmForever"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\Team Fortress 2\hl2.exe"="C:\Program Files\Team Fortress 2\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Activision\Blur(TM)\Blur.exe"="C:\Program Files\Activision\Blur(TM)\Blur.exe:*:Enabled:Blur"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Ubisoft\Demo\Tom Clancy's H.A.W.X\HAWX.exe"="C:\Program Files\Ubisoft\Demo\Tom Clancy's H.A.W.X\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"
"C:\Program Files\Ubisoft\Tom Clancy's H.A.W.X\HAWX.exe"="C:\Program Files\Ubisoft\Tom Clancy's H.A.W.X\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Ventrilo\Ventrilo.exe"="C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe"
"C:\Documents and Settings\The F3@R\Plocha\CS.S\Counter-Strike Source\hl2.exe"="C:\Documents and Settings\The F3@R\Plocha\CS.S\Counter-Strike Source\hl2.exe:*:Enabled:hl2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\WINDOWS\system32\services.exe"="C:\WINDOWS\system32\services.exe:*:Enabled:@xpsp2res.dll,-22019"
"\??\C:\WINDOWS\system32\winlogon.exe"="\??\C:\WINDOWS\system32\winlogon.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\nvsvc32.exe"="C:\WINDOWS\system32\nvsvc32.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\wbem\wmiprvse.exe"="C:\WINDOWS\system32\wbem\wmiprvse.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\lsass.exe"="C:\WINDOWS\system32\lsass.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

======List of files/folders created in the last 1 months======

2010-11-24 21:04:15 ----SHD---- C:\RECYCLER
2010-11-24 20:46:14 ----A---- C:\ComboFix.txt
2010-11-24 17:26:49 ----D---- C:\Program Files\trend micro
2010-11-24 17:26:44 ----D---- C:\rsit
2010-11-24 16:50:47 ----A---- C:\WINDOWS\MBR.exe
2010-11-24 16:16:42 ----ASH---- C:\pagefile.sys
2010-11-24 16:04:24 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\Nero
2010-11-24 15:49:03 ----D---- C:\Program Files\Nero
2010-11-23 19:53:33 ----D---- C:\N360_BACKUP
2010-11-23 19:43:21 ----D---- C:\Program Files\Symantec
2010-11-23 19:43:21 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2010-11-23 19:43:21 ----A---- C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2010-11-23 19:41:12 ----D---- C:\WINDOWS\system32\drivers\N360
2010-11-23 19:41:05 ----D---- C:\Program Files\Windows Sidebar
2010-11-23 19:41:05 ----D---- C:\Program Files\Norton 360
2010-11-23 15:38:27 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-11-23 15:35:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2010-11-23 15:35:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2010-11-23 15:35:10 ----D---- C:\Program Files\NortonInstaller
2010-11-23 15:35:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2010-11-22 22:24:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2010-11-22 21:40:06 ----D---- C:\Program Files\YourWare Solutions
2010-11-22 21:26:01 ----D---- C:\WINDOWS\pss
2010-11-22 20:52:00 ----D---- C:\Program Files\Lavalys
2010-11-21 11:25:41 ----A---- C:\WINDOWS\UPGRADE.TXT
2010-11-15 19:31:44 ----A---- C:\WINDOWS\system32\nvgenco32.dll
2010-11-15 19:31:44 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2010-11-11 23:39:06 ----D---- C:\WINDOWS\B83FC356B7C0441F8A4DD71E088E7974.TMP
2010-11-11 23:37:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Divinity 2
2010-11-11 23:24:14 ----D---- C:\Program Files\Divinity II - DKS
2010-11-03 18:30:34 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\.minecraft
2010-10-28 19:37:11 ----D---- C:\Program Files\JoWooD Entertainment AG

======List of files/folders modified in the last 1 months======

2010-11-24 21:10:03 ----AD---- C:\WINDOWS\Temp
2010-11-24 21:04:15 ----D---- C:\WINDOWS\Minidump
2010-11-24 21:04:15 ----D---- C:\WINDOWS\Debug
2010-11-24 21:04:15 ----D---- C:\WINDOWS
2010-11-24 20:53:47 ----D---- C:\Program Files\CCleaner
2010-11-24 20:46:17 ----D---- C:\WINDOWS\system32\drivers
2010-11-24 20:46:17 ----D---- C:\Qoobox
2010-11-24 20:44:19 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-24 20:41:24 ----A---- C:\WINDOWS\system.ini
2010-11-24 20:39:41 ----D---- C:\WINDOWS\system32\drivers\etc
2010-11-24 20:35:51 ----D---- C:\WINDOWS\system32\config
2010-11-24 20:34:37 ----D---- C:\WINDOWS\ERDNT
2010-11-24 20:31:33 ----D---- C:\WINDOWS\system32
2010-11-24 20:31:33 ----D---- C:\WINDOWS\AppPatch
2010-11-24 20:31:30 ----D---- C:\Program Files\Common Files
2010-11-24 20:16:55 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-11-24 17:26:49 ----RD---- C:\Program Files
2010-11-24 17:17:14 ----SD---- C:\WINDOWS\Tasks
2010-11-24 16:49:23 ----D---- C:\ComboFix
2010-11-24 16:35:27 ----D---- C:\WINDOWS\Microsoft.NET
2010-11-24 16:35:13 ----RSD---- C:\WINDOWS\assembly
2010-11-24 16:04:58 ----SHD---- C:\WINDOWS\Installer
2010-11-24 09:18:29 ----D---- C:\Program Files\TNod User & Password Finder
2010-11-24 07:12:01 ----D---- C:\WINDOWS\Prefetch
2010-11-24 05:27:41 ----SHD---- C:\System Volume Information
2010-11-24 05:26:57 ----D---- C:\Program Files\LogMeIn
2010-11-23 19:40:49 ----D---- C:\WINDOWS\WinSxS
2010-11-23 08:18:45 ----D---- C:\Documents and Settings
2010-11-22 22:26:45 ----D---- C:\Program Files\DivX
2010-11-22 22:26:42 ----D---- C:\Program Files\Common Files\DivX Shared
2010-11-22 22:15:26 ----ASH---- C:\boot.ini
2010-11-22 21:28:18 ----A---- C:\WINDOWS\win.ini
2010-11-22 21:22:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-11-22 21:20:24 ----D---- C:\Program Files\Spyware Terminator
2010-11-22 21:11:53 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\Spyware Terminator
2010-11-22 20:44:42 ----HD---- C:\WINDOWS\inf
2010-11-22 20:44:25 ----A---- C:\WINDOWS\hpdj3600.ini
2010-11-22 20:44:15 ----D---- C:\Program Files\Hewlett-Packard
2010-11-22 20:42:46 ----D---- C:\Program Files\Get Styles
2010-11-21 11:20:19 ----D---- C:\WINDOWS\system32\Restore
2010-11-20 12:08:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-11-20 12:02:04 ----A---- C:\WINDOWS\system32\MRT.exe
2010-11-19 16:39:06 ----D---- C:\Program Files\R.G. Mechanics
2010-11-19 16:38:25 ----HD---- C:\Program Files\InstallShield Installation Information
2010-11-19 16:34:37 ----D---- C:\Program Files\Common Files\BioWare
2010-11-19 16:33:19 ----D---- C:\Program Files\Frets on Fire
2010-11-19 16:32:34 ----D---- C:\Program Files\Outspark
2010-11-17 15:03:03 ----D---- C:\Program Files\Mozilla Firefox
2010-11-17 11:41:23 ----D---- C:\All my music
2010-11-16 14:00:38 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-15 21:05:25 ----D---- C:\totalcmd
2010-11-15 21:05:25 ----D---- C:\Program Files\Lineage II
2010-11-15 19:33:32 ----D---- C:\WINDOWS\Help
2010-11-15 19:33:12 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-11-15 19:31:52 ----D---- C:\Program Files\NVIDIA Corporation
2010-11-15 17:16:46 ----D---- C:\Documents and Settings\The F3@R\Data aplikací\uTorrent
2010-11-14 17:59:36 ----D---- C:\Program Files\Activision
2010-11-11 20:34:28 ----D---- C:\Program Files\Cheat Engine
2010-11-11 20:20:54 ----D---- C:\Program Files\WinClamAVShield
2010-11-07 08:11:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-28 19:59:41 ----D---- C:\WINDOWS\system32\DirectX
2010-10-25 16:45:19 ----D---- C:\Program Files\Team Fortress 2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\System32\Drivers\vbtenum.sys [2007-03-05 20880]
R0 BTHidMgr;Bluetooth HID Manager Service; C:\WINDOWS\System32\Drivers\BTHidMgr.sys [2007-03-05 35600]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-05-01 43528]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-08-06 721904]
R0 SymDS;Symantec Data Store; C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMDS.SYS [2009-10-15 328752]
R0 SymEFA;Symantec Extended File Attributes; C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMEFA.SYS [2010-04-22 173104]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2008-10-02 82380]
R1 appdrv01;Application Driver (01); C:\WINDOWS\System32\Drivers\appdrv01.sys [2009-10-28 2915944]
R1 BHDrvx86;BHDrvx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20101104.001\BHDrvx86.sys []
R1 ccHP;Symantec Hash Provider; C:\WINDOWS\system32\drivers\N360\0402000.00C\ccHPx86.sys [2010-02-26 501888]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys []
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\WINDOWS\system32\drivers\N360\0402000.00C\SRTSPX.SYS [2010-04-22 43696]
R1 SymIRON;Symantec Iron Driver; C:\WINDOWS\system32\drivers\N360\0402000.00C\Ironx86.SYS [2010-04-29 116784]
R1 SYMTDI;Symantec Network Dispatch Driver; C:\WINDOWS\System32\Drivers\N360\0402000.00C\SYMTDI.SYS [2010-05-06 361904]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-10-20 281760]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-10-20 25888]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R2 npkcrypt;npkcrypt; \??\C:\Hry\Czechgamers\system\npkcrypt.sys []
R3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2007-05-11 34704]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2007-03-05 27792]
R3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2007-03-05 18320]
R3 catchme;catchme; \??\C:\beruška\catchme.sys []
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-09-28 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20101122.006\IDSxpx86.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-10-02 4613120]
R3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [2010-01-27 10144]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-10-22 9623680]
R3 NVR0Dev;NVR0Dev; \??\C:\WINDOWS\nvoclock.sys []
R3 radpms;Driver for RADPMS Device; C:\WINDOWS\system32\DRIVERS\radpms.sys [2010-05-18 13408]
R3 Razerlow;Diamondback 3G USB Filter Driver; C:\WINDOWS\System32\Drivers\DB3G.sys [2005-04-24 13225]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-18 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-10-03 102656]
R3 SbieDrv;SbieDrv; \??\C:\Program Files\Sandboxie\SbieDrv.sys []
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2005-12-08 8718848]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-04-19 41984]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2007-03-05 34448]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2007-03-05 44304]
S3 aenyn9qr;aenyn9qr; C:\WINDOWS\system32\drivers\aenyn9qr.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2007-05-09 36496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\THEF3@~1\LOCALS~1\Temp\PCG103.tmp []
S3 GMSIPCI;GMSIPCI; C:\WINDOWS\system32\drivers\GMSIPCI.sys []
S3 mbr;mbr; \??\C:\DOCUME~1\THEF3@~1\LOCALS~1\Temp\mbr.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMP50.sys []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMP50a64.sys []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MREMPR5.sys []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRENDIS5.sys []
S3 MRESP50;MRESP50 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRESP50.sys []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; C:\WINDOWS\system32\drivers\MRESP50a64.sys []
S3 MSICPL;MSICPL; C:\WINDOWS\system32\drivers\MSICPL.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20101123.051\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20101123.051\NAVEX15.SYS []
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NTACCESS;NTACCESS; C:\WINDOWS\system32\drivers\NTACCESS.sys []
S3 PsSdk40;PsSdk40; \??\C:\WINDOWS\system32\Drivers\pssdk40.sys []
S3 PsSdkLBF;PsSdkLBF; \??\C:\WINDOWS\system32\Drivers\pssdklbf.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 s616bus;Sony Ericsson Device 616 driver (WDM); C:\WINDOWS\system32\DRIVERS\s616bus.sys [2007-04-03 83208]
S3 s616mdfl;Sony Ericsson Device 616 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s616mdfl.sys [2007-04-03 15112]
S3 s616mdm;Sony Ericsson Device 616 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s616mdm.sys [2007-04-03 108680]
S3 s616mgmt;Sony Ericsson Device 616 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s616mgmt.sys [2007-04-03 100360]
S3 s616nd5;Sony Ericsson Device 616 USB Ethernet Emulation SEMC616 (NDIS); C:\WINDOWS\system32\DRIVERS\s616nd5.sys [2007-04-03 23176]
S3 s616obex;Sony Ericsson Device 616 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s616obex.sys [2007-04-03 98568]
S3 s616unic;Sony Ericsson Device 616 USB Ethernet Emulation SEMC616 (WDM); C:\WINDOWS\system32\DRIVERS\s616unic.sys [2007-04-03 99080]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SRTSP;Symantec Real Time Storage Protection; C:\WINDOWS\System32\Drivers\N360\0402000.00C\SRTSP.SYS [2010-04-22 325680]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 tap0901_2gm;VPN Anonymizer Adapter; C:\WINDOWS\system32\DRIVERS\tap0901_2gm.sys [2007-06-21 30720]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 w200bus;Sony Ericsson W200 driver (WDM); C:\WINDOWS\system32\DRIVERS\w200bus.sys [2006-11-07 61504]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe [2010-09-27 374152]
R2 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2010-10-06 116104]
R2 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2010-01-27 63040]
R2 N360;Norton 360; C:\Program Files\Norton 360\Engine\4.2.0.12\ccSvcHst.exe [2010-02-26 126392]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
R2 nTuneService;nTune Service; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [2007-09-04 131072]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-10-16 156776]
R2 SbieSvc;Sandboxie Service; C:\Program Files\Sandboxie\SbieSvc.exe [2009-09-30 65024]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-08-19 488960]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-21 540968]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\WINDOWS\System32\appdrvrem01.exe [2009-10-28 304528]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-04-06 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------


RSIT

Uživatelský avatar
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8721
Registrován: 09 pro 2006 06:19
Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#11 Příspěvek od cernohous13 »

:arrow: Otevři Poznámkový blok
Start -> Spustit -> napiš "notepad" -> OK
Zkopíruj a vlož zelený text

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
Soubor ulož jako oprava.reg
Při ukládání dej uložit jako typ Všechny soubory (nastavení je uvedeno na obrázku níže)
Obrázek
Zavři notepad a spusť dvojklikem oprava.reg
Dotaz na změnu registru potvrdit
Okno jen problikne a opraví registry - soubor můžeš smazat

:???: Určitě jsi dal v Ccleaneru vyčistit registry?
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#12 Příspěvek od MadBull »

Tak hotovo, v prostředí Windows je to už daleko plynulejší i programy nabíhají lépe ale stále Windows nabíhají strašně dlouho a načítání nových dat (loadingy u her a podobně) jsou stále nepřirozeně dlouhé, nemám chybu někde v Harddisku? nedávno na mě vyběhla hláška o nějakých vadných sektorech :/

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#13 Příspěvek od MadBull »

Registry jsem čistil ale dva nejdou opravit pokaždé se objeví znovu, Norton360 Rscan.dll a ibackuplocationsshellfolrderimpl

Uživatelský avatar
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8721
Registrován: 09 pro 2006 06:19
Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#14 Příspěvek od cernohous13 »

:arrow: Start - Spustit - napiš cmd Ok
do černého okna napiš příkaz chkdsk /f/r -> "Enter"
souhlas - restart - proběhne kontrola a případná oprava chyb HDD.
stáhni a spusť http://www.stahuj.centrum.cz/utility_a_ ... hd-tune-2/
klik -> Error scan -> start
výsledek po dokončení oznam.
:arrow: nový RSIT ať vidím jestli zmizely ty vadné záznamy v registrech
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

MadBull
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 24 lis 2010 17:32

Re: Nabíhání Windows 4minuty, pomalé PC, Kontrola v NODu= 6h

#15 Příspěvek od MadBull »

HD Scan (quick) Naprosto v pořádku všechno zelený ale u chkdsk nastal problém ve čtvrté fázi z pěti trvá jedno procento hodinu, nevydržel jsem to a restartoval PC, dříve mi stejne chkdsk proběhl behem 20ti minut :X . Ještě mě napadá chvíli před tím než se to podělalo jsem mazal a přidával uživatelské účty ale když nějaký smažu stejně po něm zůstanou na disku data, neexistuje neco co by ho absolutně smazalo? manuálně v documents and settings to nejde

Odpovědět