VIRY.CZ

Zdravím, mám problém s tím že mi padá Counter Strike Source. Hra je originální přes Steam. Už jsem zkoušel Steam 2x restartovat a občas (většinou denně) se mi stává, že když hraju tak se např. při střílení tak 10x zopakuje zvuk a hra spadne do lišty, nejde hýbat kurzorem a nevyhodí to ani žádnou chybovou hlášku, takže to musím zabít přes Správce procesů. Děkuji za rady


Logfile of random's system information tool 1.08 (written by random/random)
Run by Honzik at 2011-04-21 18:28:56
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 49 GB (8%) free of 610 GB
Total RAM: 3062 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:29:00, on 21.4.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\PicPick\picpick.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Unified Remote\RemoteServer.exe
C:\Program Files\ICQ7.5\ICQ.exe
C:\Users\Honzik\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\taskhost.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\Honzik\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Honzik\Downloads\RSIT.exe
C:\Program Files\trend micro\Honzik.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Mouse Gestures - {A6A49249-57AE-4295-8D4D-18A9502C7D8E} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [HTC Sync Loader] "C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PicPick Start] C:\Program Files\PicPick\picpick.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Unified Remote v2] C:\Program Files\Unified Remote\RemoteServer.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.5\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Honzik\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: &Stáhnout &vše FlashGetem - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {4E660F19-E91E-41E1-88EF-D1DFAB118F67} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O9 - Extra 'Tools' menuitem: Mouse Gestures... - {4E660F19-E91E-41E1-88EF-D1DFAB118F67} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\Windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\Windows\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O22 - SharedTaskScheduler: FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files\Stardock\Fences\FencesMenu.dll
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files\ASUS\AsSysCtrlService\1.00.00\AsSysCtrlService.exe
O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\WINDOWS\system32\ASTSRV.EXE
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NLS Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\system32\NLSSRV32.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

--
End of file - 12853 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Ad-Aware Update (Weekly).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-04-18 818280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6A49249-57AE-4295-8D4D-18A9502C7D8E}]
Mouse Gestures - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll [2010-02-23 749568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-04-18 818280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-04-18 3460784]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-01-21 91520]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"WheelMouse"=C:\Program Files\A4Tech\Mouse\Amoumain.exe [2007-05-15 204800]
"HTC Sync Loader"=C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2010-10-28 294912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2010-11-20 144384]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"PicPick Start"=C:\Program Files\PicPick\picpick.exe [2011-04-09 10804224]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304]
"Steam"=C:\Program Files\Steam\steam.exe [2011-04-17 1242448]
"minus"= []
"Unified Remote v2"=C:\Program Files\Unified Remote\RemoteServer.exe [2011-04-12 178688]
"ICQ"=C:\Program Files\ICQ7.5\ICQ.exe [2011-04-19 124216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner]
C:\Program Files\CCleaner\CCleaner.exe [2011-04-01 2228536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gaming 3]
C:\Gaming Mouse\Gaming 3.exe [2009-11-09 1216512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JMB36X IDE Setup]
C:\WINDOWS\RaidTool\xInsIDE.exe [2008-11-18 36864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Six Engine]
C:\Program Files\ASUS\EPU-6 Engine\SixEngine.exe [2008-11-13 5974528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\Steam\steam.exe [2011-04-17 1242448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TurboV]
C:\Program Files\ASUS\TurboV\TurboV.exe [2008-10-21 4040192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VolPanel]
C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe [2008-08-27 233588]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WLSync]
C:\Program Files\Windows Live\Mesh\WLSync.exe [2010-09-23 1448800]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Honzik^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\Honzik\AppData\Roaming\Dropbox\bin\Dropbox.exe [2010-12-17 23343848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Honzik^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Otevřít poznámkový blok.onetoc2]
C:\Users\Honzik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Otevřít poznámkový blok.onetoc2 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Honzik^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk]
C:\PROGRA~1\MIF5BA~1\Office14\ONENOTEM.EXE [2010-01-21 226176]

C:\Users\Honzik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Honzik\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files\Stardock\Fences\FencesMenu.dll [2010-06-22 202088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Documents and Settings\Honzik\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll"="C:\Users\Honzik\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll:*:Enabled:Google Talk Plugin"
"C:\Documents and Settings\Honzik\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Users\Honzik\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"C:\Program Files\Activision\Prototype\prototypef.exe"="C:\Program Files\Activision\Prototype\prototypef.exe:*:Enabled:Prototype(TM)"
"C:\Program Files\Activision\Wolfenstein\MP\Wolf2MP.exe"="C:\Program Files\Activision\Wolfenstein\MP\Wolf2MP.exe:*:Enabled:Wolfenstein(TM) "
"C:\Program Files\Activision\Wolfenstein\MP\Wolf2MPLite.exe"="C:\Program Files\Activision\Wolfenstein\MP\Wolf2MPLite.exe:*:Enabled:Wolfenstein(TM) "
"C:\Program Files\Codemasters\FUEL\FUEL.exe"="C:\Program Files\Codemasters\FUEL\FUEL.exe:*:Enabled:FUEL"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe"="C:\Program Files\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (SRV)"
"C:\Program Files\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe"="C:\Program Files\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (CLI)"
"C:\Program Files\Dragon Age\bin_ship\daorigins.exe"="C:\Program Files\Dragon Age\bin_ship\daorigins.exe:*:Enabled:Dragon Age Prameny Hra"
"C:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe"="C:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe:*:Enabled:Dragon Age Prameny Aktualizovat"
"C:\Program Files\Dragon Age\DAOriginsLauncher.exe"="C:\Program Files\Dragon Age\DAOriginsLauncher.exe:*:Enabled:Dragon Age Prameny Spustit"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe"="C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe"="C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2"
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe"="C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate"
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe"="C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx"
"C:\Program Files\FlashGet\FlashGet.exe"="C:\Program Files\FlashGet\FlashGet.exe:*:Enabled:Flashget"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe"="C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe"="C:\Program Files\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe:*:Enabled:Call of Juarez - Bound in Blood"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\WINDOWS\system32\vomhlm.exe"="C:\WINDOWS\system32\vomhlm.exe:*:Enabled:ENABLE"
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - "%1" /S "%3"
.txt - open - "C:\Program Files\PSPad editor\PSPad.exe" "%1"

======List of files/folders created in the last 1 months======

2011-04-19 16:36:40 ----D---- C:\Program Files\GCFScape
2011-04-19 16:02:22 ----D---- C:\Program Files\ICQ7.5
2011-04-18 18:47:51 ----D---- C:\Users\Honzik\AppData\Roaming\Unified Remote
2011-04-18 18:47:31 ----D---- C:\Program Files\Unified Remote
2011-04-18 18:21:17 ----D---- C:\Program Files\Remote Mouse
2011-04-17 19:41:29 ----D---- C:\Users\Honzik\AppData\Roaming\minus
2011-04-17 19:29:23 ----D---- C:\Program Files\minus
2011-04-17 17:52:30 ----D---- C:\Program Files\Steam
2011-04-17 16:36:33 ----D---- C:\Program Files\Valve
2011-04-15 16:25:20 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-15 16:25:20 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-15 16:25:20 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-15 16:25:19 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-15 16:25:19 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-15 16:25:19 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-15 16:25:18 ----A---- C:\Windows\system32\atmlib.dll
2011-04-15 16:25:18 ----A---- C:\Windows\system32\atmfd.dll
2011-04-15 16:25:17 ----A---- C:\Windows\system32\win32k.sys
2011-04-15 16:25:16 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-04-15 16:25:15 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-04-15 16:25:14 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-15 16:25:13 ----A---- C:\Windows\system32\mfc42.dll
2011-04-15 16:25:12 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-15 16:25:09 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-15 16:25:09 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-15 16:25:09 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-15 16:25:09 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-04-12 22:36:47 ----D---- C:\Program Files\UserTile
2011-04-10 15:26:33 ----D---- C:\Program Files\PSPad editor
2011-04-09 16:02:28 ----D---- C:\Program Files\CCleaner
2011-04-05 18:46:49 ----D---- C:\Program Files\PRemoteDroid
2011-04-05 16:18:03 ----D---- C:\Users\Honzik\AppData\Roaming\Banamalon
2011-04-05 16:17:25 ----D---- C:\Program Files\Banamalon
2011-04-02 19:14:31 ----D---- C:\Program Files\Common Files\Skype
2011-04-02 19:14:27 ----RD---- C:\Program Files\Skype
2011-03-29 21:52:10 ----D---- C:\Users\Honzik\AppData\Roaming\dvdcss
2011-03-29 18:40:46 ----RD---- C:\Program Files\Android SDK
2011-03-29 18:27:32 ----D---- C:\Users\Honzik\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
2011-03-29 18:27:21 ----D---- C:\Users\Honzik\AppData\Roaming\HTC
2011-03-29 18:26:08 ----D---- C:\Program Files\Spirent Communications
2011-03-22 18:11:08 ----D---- C:\Users\Honzik\AppData\Roaming\Mozilla
2011-03-22 18:11:04 ----D---- C:\Program Files\Mozilla Firefox

======List of files/folders modified in the last 1 months======

2011-04-21 18:28:58 ----D---- C:\Program Files\trend micro
2011-04-21 18:28:55 ----D---- C:\Windows\Temp
2011-04-21 18:21:47 ----D---- C:\Windows\Prefetch
2011-04-21 17:38:08 ----SHD---- C:\Windows\Installer
2011-04-21 17:34:44 ----D---- C:\Windows\system32\config
2011-04-21 17:22:54 ----D---- C:\Users\Honzik\AppData\Roaming\Dropbox
2011-04-21 17:21:24 ----D---- C:\ProgramData\NVIDIA
2011-04-21 08:12:47 ----D---- C:\Users\Honzik\AppData\Roaming\ICQ
2011-04-20 17:27:04 ----D---- C:\Windows\System32
2011-04-20 17:27:04 ----AD---- C:\Windows
2011-04-19 17:50:38 ----D---- C:\Program Files\Common Files\Steam
2011-04-19 16:36:40 ----AD---- C:\Program Files
2011-04-19 16:02:41 ----HD---- C:\Program Files\InstallShield Installation Information
2011-04-19 11:12:26 ----SHD---- C:\System Volume Information
2011-04-18 21:50:53 ----D---- C:\Users\Honzik\AppData\Roaming\Skype
2011-04-18 21:35:43 ----D---- C:\Windows\debug
2011-04-18 19:25:10 ----A---- C:\Windows\system32\aswBoot.exe
2011-04-18 18:47:32 ----SHD---- C:\Config.Msi
2011-04-18 17:51:33 ----D---- C:\Users\Honzik\AppData\Roaming\skypePM
2011-04-16 15:56:43 ----D---- C:\Windows\inf
2011-04-16 15:56:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-15 20:33:53 ----RSD---- C:\Windows\assembly
2011-04-15 20:33:53 ----D---- C:\Windows\Microsoft.NET
2011-04-15 18:29:47 ----D---- C:\Windows\winsxs
2011-04-15 18:27:36 ----D---- C:\Windows\system32\drivers
2011-04-15 18:18:44 ----D---- C:\Windows\system32\catroot
2011-04-15 18:18:24 ----D---- C:\ProgramData\Microsoft Help
2011-04-15 18:13:52 ----D---- C:\Windows\system32\DriverStore
2011-04-15 18:10:06 ----A---- C:\Windows\system32\MRT.exe
2011-04-15 16:25:00 ----D---- C:\Windows\system32\catroot2
2011-04-13 21:31:04 ----D---- C:\Windows\system32\Tasks
2011-04-13 18:49:17 ----RD---- C:\Program Files\Opera
2011-04-10 16:24:01 ----D---- C:\Temp
2011-04-10 15:18:10 ----D---- C:\Program Files\Mp4ForHD
2011-04-09 13:26:08 ----D---- C:\Windows\system32\FxsTmp
2011-04-05 19:04:40 ----D---- C:\ProgramData\Electronic Arts
2011-04-02 19:14:31 ----D---- C:\Program Files\Common Files
2011-04-02 19:14:26 ----D---- C:\ProgramData\Skype
2011-04-02 19:10:04 ----D---- C:\Users\Honzik\AppData\Roaming\FileZilla
2011-04-02 19:09:45 ----D---- C:\Program Files\FileZilla FTP Client
2011-04-02 13:30:29 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-03-30 17:05:23 ----D---- C:\Windows\pss
2011-03-29 21:47:02 ----HD---- C:\Program Files\InstallJammer Registry
2011-03-29 21:46:46 ----D---- C:\Program Files\GmoteServer
2011-03-29 18:26:59 ----D---- C:\Program Files\HTC
2011-03-29 18:14:00 ----D---- C:\Program Files\Common Files\Adobe AIR
2011-03-29 17:31:36 ----D---- C:\Program Files\Java
2011-03-24 15:59:28 ----D---- C:\Users\Honzik\AppData\Roaming\TS3Client
2011-03-23 17:58:56 ----D---- C:\Program Files\Solid Edge ST2
2011-03-23 17:58:31 ----RSD---- C:\Windows\Fonts
2011-03-23 17:42:04 ----D---- C:\Program Files\StickyNotes
2011-03-23 17:42:03 ----D---- C:\ProgramData\Sticky Notes TB Hider

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2008-11-18 83296]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2009-05-01 43528]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-02-12 431672]
R0 tdrpman;Acronis Try&Decide and Restore Points filter; C:\Windows\system32\DRIVERS\tdrpman.sys [2009-10-28 368736]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 Amfilter;A4Tech Mouse Filter Driver; C:\Windows\system32\DRIVERS\Amfilter.sys [2007-05-14 9216]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2007-12-17 12400]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-04-18 25432]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-04-18 441176]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-04-18 307288]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-04-18 49240]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-04-18 19544]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-04-18 53592]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-09-11 116008]
R2 ncryptpro;ncryptpro; \??\C:\WINDOWS\system32\Drivers\ncryptpro.sys [2009-08-11 186720]
R2 thdudf;TOSHIBA UDF2.5 Reader File System Driver; C:\Windows\system32\DRIVERS\thdudf.sys [2006-11-11 66944]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-10-18 7680]
R3 P17;SB Live! 24-bit; C:\Windows\system32\drivers\P17.sys [2009-04-21 1147392]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-01-21 328808]
S1 MpKsl26304fe0;MpKsl26304fe0; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E90FDFC9-0DF3-4A0B-9477-68D5CCBAC0FB}\MpKsl26304fe0.sys []
S1 MpKsl5981ba83;MpKsl5981ba83; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{72623F6E-E661-46A1-AC25-998F994F85EB}\MpKsl5981ba83.sys []
S1 MpKsl62250eeb;MpKsl62250eeb; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{14698E4C-E468-4440-955E-F8D19496F4E2}\MpKsl62250eeb.sys []
S1 MpKsl82251cfe;MpKsl82251cfe; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4309D1AE-3F07-45D6-ACD6-4DCC8B9DBE79}\MpKsl82251cfe.sys []
S1 MpKslbbbd644e;MpKslbbbd644e; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D295FA0F-84C8-45B9-BB57-C892F6FCE108}\MpKslbbbd644e.sys []
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:\Windows\system32\DRIVERS\Amusbprt.sys [2007-05-14 14336]
S3 appliandMP;appliandMP; C:\Windows\system32\DRIVERS\appliand.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 cpudrv;cpudrv; \??\C:\Program Files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 DSGACommsDriver;DSGACommsDriver; \??\C:\WINDOWS\system32\drivers\DSGACommsDriver.sys [2009-09-30 19168]
S3 DSGAFilterDriver;DSGAFilterDriver; \??\C:\WINDOWS\system32\drivers\DSGAFilterDriver.sys [2009-09-30 17632]
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys [2008-09-17 27672]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 26176]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys []
S3 MagicTune;MagicTune; C:\Windows\system32\drivers\MTiCtwl.sys [2006-08-28 13312]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]
S3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-10-03 133120]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 skfiltv;skfiltv; C:\Windows\system32\drivers\skfiltv.sys [2008-08-14 17408]
S3 SMARTMouseFilterx86;HID-compliant mouse; C:\Windows\system32\DRIVERS\SMARTMouseFilterx86.sys [2010-06-15 11048]
S3 SMARTVHidMini2000x86;SMART HID Device; C:\Windows\system32\DRIVERS\SMARTVHidMini2000x86.sys [2010-06-15 14120]
S3 SMARTVTabletPCx86;SMART Virtual TabletPC; C:\Windows\system32\DRIVERS\SMARTVTabletPCx86.sys [2010-06-15 13440]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 TVICHW32;TVICHW32; \??\C:\Windows\system32\DRIVERS\TVICHW32.SYS [2009-11-11 23600]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 15872]
S3 ute3nda2;AVZ Kernel Driver; \??\C:\Windows\system32\Drivers\ute3nda2.sys [2011-03-02 7168]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2011-01-18 109328]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AsSysCtrlService;ASUS System Control Service; C:\Program Files\ASUS\AsSysCtrlService\1.00.00\AsSysCtrlService.exe [2008-08-15 86016]
R2 astcc;AST Service; C:\WINDOWS\system32\ASTSRV.EXE [2009-09-15 61760]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-04-18 42184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-02-02 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 nlsX86cc;NLS Service; C:\Windows\system32\NLSSRV32.EXE [2011-01-12 68928]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-01-07 608872]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-05-20 66872]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-07 378984]
R2 TeamViewer6;TeamViewer 6; C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-01 2271608]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-11-26 79360]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-04-17 403240]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-27 1343400]
S4 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; C:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Předesílám, že zde neřešíme problematiku her. Od toho jsou jiná fóra. Zde vám zkontrolujeme PC na nákazu, příp. vyčistíme. Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

ComboFix 11-04-20.04 - Honzik 21.04.2011 18:57:08.1.8 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3062.1955 [GMT 2:00]
Spuštěný z: c:\users\Honzik\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Autorun.exe
c:\program files\Steam\Steam.exe
c:\programdata\page
c:\programdata\page\page.ico
c:\programdata\page\page.URL
c:\users\Honzik\AppData\Roaming\AD ON Multimedia
c:\users\Honzik\AppData\Roaming\minus
c:\users\Honzik\AppData\Roaming\minus\minus.ini
c:\windows\struct~.ini
c:\windows\system32\detoured.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-21 do 2011-04-21 )))))))))))))))))))))))))))))))
.
.
2011-04-21 17:04 . 2011-04-21 17:04 -------- d-----w- c:\users\Honzik\AppData\Local\temp
2011-04-21 17:04 . 2011-04-21 17:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-20 16:00 . 2011-04-20 16:11 -------- d-----w- c:\users\Honzik\AppData\Local\A3 Labs
2011-04-19 14:36 . 2011-04-19 14:39 -------- d-----w- c:\program files\GCFScape
2011-04-19 14:02 . 2011-04-19 14:03 -------- d-----w- c:\program files\ICQ7.5
2011-04-19 09:12 . 2011-04-11 07:04 7071056 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{360148F5-AE4D-42A0-840F-E00AC165B4DD}\mpengine.dll
2011-04-18 16:47 . 2011-04-18 16:47 -------- d-----w- c:\users\Honzik\AppData\Roaming\Unified Remote
2011-04-18 16:47 . 2011-04-18 16:47 -------- d-----w- c:\program files\Unified Remote
2011-04-18 16:21 . 2011-04-18 16:34 -------- d-----w- c:\program files\Remote Mouse
2011-04-17 17:29 . 2011-04-17 17:29 -------- d-----w- c:\program files\minus
2011-04-17 15:52 . 2011-04-21 17:03 -------- d-----w- c:\program files\Steam
2011-04-17 14:36 . 2011-04-17 14:36 -------- d-----w- c:\program files\Valve
2011-04-12 20:36 . 2011-04-12 20:46 -------- d-----w- c:\program files\UserTile
2011-04-10 13:26 . 2011-04-10 13:26 -------- d-----w- c:\program files\PSPad editor
2011-04-09 14:02 . 2011-04-09 14:02 -------- d-----w- c:\program files\CCleaner
2011-04-08 13:26 . 2011-04-08 13:26 -------- d-----w- c:\users\Honzik\AppData\Local\Biro_Solutions
2011-04-05 17:04 . 2011-04-05 17:04 -------- d-----w- c:\users\Honzik\AppData\Local\Electronic Arts
2011-04-05 16:46 . 2011-04-05 16:47 -------- d-----w- c:\program files\PRemoteDroid
2011-04-05 14:18 . 2011-04-05 14:18 -------- d-----w- c:\users\Honzik\AppData\Roaming\Banamalon
2011-04-05 14:18 . 2011-04-05 14:18 -------- d-----w- c:\users\Honzik\AppData\Local\Banamalon
2011-04-05 14:17 . 2011-04-05 14:17 -------- d-----w- c:\program files\Banamalon
2011-04-05 13:31 . 2011-04-05 13:31 -------- d-----w- c:\users\Honzik\AppData\Local\Relmtech
2011-04-02 17:14 . 2011-04-02 17:14 -------- d-----w- c:\program files\Common Files\Skype
2011-04-02 17:14 . 2011-04-02 17:14 -------- d-----r- c:\program files\Skype
2011-03-31 12:56 . 2011-03-31 12:56 -------- d-----w- c:\users\Default\AppData\Local\Google
2011-03-29 19:52 . 2011-03-30 10:41 -------- d-----w- c:\users\Honzik\AppData\Roaming\dvdcss
2011-03-29 16:40 . 2011-03-30 15:11 -------- d-----r- c:\program files\Android SDK
2011-03-29 16:27 . 2011-03-29 16:27 -------- d-----w- c:\users\Honzik\AppData\Roaming\HTC
2011-03-29 16:26 . 2011-03-29 16:26 -------- d-----w- c:\program files\Spirent Communications
2011-03-25 23:48 . 2011-03-25 23:48 4284416 ----a-w- c:\windows\system32\GPhotos.scr
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-18 17:25 . 2011-03-06 18:37 40112 ----a-w- c:\windows\avastSS.scr
2011-04-18 17:25 . 2011-03-06 18:37 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-04-18 17:17 . 2011-03-06 18:37 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-04-18 17:17 . 2011-03-06 18:38 307288 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-04-18 17:16 . 2011-03-06 18:37 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-04-18 17:13 . 2011-03-06 18:37 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-04-18 17:13 . 2011-03-06 18:37 53592 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-04-18 17:12 . 2011-03-06 18:38 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-03-15 14:00 . 2011-03-15 14:00 86528 ----a-w- c:\windows\system32\iesysprep.dll
2011-03-15 14:00 . 2011-03-15 14:00 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-03-15 14:00 . 2011-03-15 14:00 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-03-15 14:00 . 2011-03-15 14:00 74752 ----a-w- c:\windows\system32\iesetup.dll
2011-03-15 14:00 . 2011-03-15 14:00 63488 ----a-w- c:\windows\system32\tdc.ocx
2011-03-15 14:00 . 2011-03-15 14:00 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-03-15 14:00 . 2011-03-15 14:00 420864 ----a-w- c:\windows\system32\vbscript.dll
2011-03-15 14:00 . 2011-03-15 14:00 367104 ----a-w- c:\windows\system32\html.iec
2011-03-15 14:00 . 2011-03-15 14:00 35840 ----a-w- c:\windows\system32\imgutil.dll
2011-03-15 14:00 . 2011-03-15 14:00 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-03-15 14:00 . 2011-03-15 14:00 23552 ----a-w- c:\windows\system32\licmgr10.dll
2011-03-15 14:00 . 2011-03-15 14:00 1797632 ----a-w- c:\windows\system32\jscript9.dll
2011-03-15 14:00 . 2011-03-15 14:00 161792 ----a-w- c:\windows\system32\msls31.dll
2011-03-15 14:00 . 2011-03-15 14:00 152064 ----a-w- c:\windows\system32\wextract.exe
2011-03-15 14:00 . 2011-03-15 14:00 150528 ----a-w- c:\windows\system32\iexpress.exe
2011-03-15 14:00 . 2011-03-15 14:00 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2011-03-15 14:00 . 2011-03-15 14:00 1427456 ----a-w- c:\windows\system32\inetcpl.cpl
2011-03-15 14:00 . 2011-03-15 14:00 11776 ----a-w- c:\windows\system32\mshta.exe
2011-03-15 14:00 . 2011-03-15 14:00 1126912 ----a-w- c:\windows\system32\wininet.dll
2011-03-15 14:00 . 2011-03-15 14:00 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-03-15 14:00 . 2011-03-15 14:00 101888 ----a-w- c:\windows\system32\admparse.dll
2011-03-12 00:01 . 2011-03-12 00:01 3584 ----a-r- c:\users\Honzik\AppData\Roaming\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
2011-03-09 17:55 . 2010-06-24 09:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-03-05 12:32 . 2011-03-05 12:32 98392 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-03-02 17:24 . 2011-03-02 17:24 7168 ----a-w- c:\windows\system32\drivers\ute3nda2.sys
2011-02-23 19:14 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2011-02-23 06:27 . 2011-03-19 22:28 941160 ----a-w- c:\windows\system32\nvdispco322090.dll
2011-02-23 06:27 . 2011-03-19 22:28 837736 ----a-w- c:\windows\system32\nvgenco322040.dll
2011-02-23 06:27 . 2011-02-23 06:27 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-02-23 06:27 . 2011-02-23 06:27 4942952 ----a-w- c:\windows\system32\nvcuda.dll
2011-02-23 06:27 . 2011-02-23 06:27 2895976 ----a-w- c:\windows\system32\nvcuvid.dll
2011-02-23 06:27 . 2011-02-23 06:27 2251368 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-02-23 06:27 . 2011-02-23 06:27 15047272 ----a-w- c:\windows\system32\nvoglv32.dll
2011-02-23 06:27 . 2011-02-23 06:27 13011560 ----a-w- c:\windows\system32\nvcompiler.dll
2011-02-23 06:27 . 2011-02-23 06:27 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-02-23 06:27 . 2011-02-23 06:27 10468360 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2011-02-23 06:27 . 2010-04-03 20:55 5654120 ----a-w- c:\windows\system32\nvwgf2um.dll
2011-02-23 06:27 . 2010-04-03 20:55 1965672 ----a-w- c:\windows\system32\nvapi.dll
2011-02-23 06:27 . 2010-04-03 20:55 10079336 ----a-w- c:\windows\system32\nvd3dum.dll
2011-02-19 06:30 . 2011-03-09 14:09 805376 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 06:30 . 2011-03-09 14:09 1076736 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 06:30 . 2011-03-09 14:09 739840 ----a-w- c:\windows\system32\d2d1.dll
2011-02-15 19:10 . 2009-04-10 15:53 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2011-02-15 19:10 . 2009-04-10 15:53 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2011-02-12 13:51 . 2009-04-14 19:47 431672 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-02-03 05:54 . 2011-02-09 10:30 219008 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-02-02 20:40 . 2010-05-09 10:25 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-02 16:11 . 2009-11-08 18:27 222080 ------w- c:\windows\system32\MpSigStub.exe
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
2011-03-18 17:55 . 2011-03-22 16:11 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-04-18 17:25 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Honzik\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Honzik\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Honzik\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Honzik\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2010-11-20 144384]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"PicPick Start"="c:\program files\PicPick\picpick.exe" [2011-04-09 10804224]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [2009-07-14 354304]
"Unified Remote v2"="c:\program files\Unified Remote\RemoteServer.exe" [2011-04-12 178688]
"ICQ"="c:\program files\ICQ7.5\ICQ.exe" [2011-04-19 124216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-04-18 3460784]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-01-21 91520]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-15 932288]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-05-15 204800]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2010-10-28 294912]
.
c:\users\Honzik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Honzik\AppData\Roaming\Dropbox\bin\Dropbox.exe [2010-12-17 23343848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files\Stardock\Fences\FencesMenu.dll" [2010-06-22 202088]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKLM\~\startupfolder\C:^Users^Honzik^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
path=c:\users\Honzik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
backup=c:\windows\pss\Dropbox.lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^Honzik^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Otevřít poznámkový blok.onetoc2]
path=c:\users\Honzik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Otevřít poznámkový blok.onetoc2
backup=c:\windows\pss\Otevřít poznámkový blok.onetoc2.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^Honzik^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk]
path=c:\users\Honzik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk
backup=c:\windows\pss\Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner]
2011-04-01 16:25 2228536 ----a-w- c:\program files\CCleaner\CCleaner.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2011-01-20 09:20 1305408 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gaming 3]
2009-11-09 08:28 1216512 ----a-w- c:\gaming mouse\Gaming 3.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JMB36X IDE Setup]
2008-11-18 03:27 36864 ----a-r- c:\windows\RaidTool\xInsIDE.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Six Engine]
2008-11-13 20:31 5974528 ----a-w- c:\program files\ASUS\EPU-6 Engine\SixEngine.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TurboV]
2008-10-21 20:14 4040192 ----a-w- c:\program files\ASUS\TurboV\TurboV.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VolPanel]
2008-08-27 16:19 233588 ------w- c:\program files\Creative\USB Headsets\Volume Panel\VolPanlu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WLSync]
2010-09-22 22:19 1448800 ----a-w- c:\program files\Windows Live\Mesh\WLSync.exe
.
R1 MpKsl26304fe0;MpKsl26304fe0;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E90FDFC9-0DF3-4A0B-9477-68D5CCBAC0FB}\MpKsl26304fe0.sys [x]
R1 MpKsl5981ba83;MpKsl5981ba83;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{72623F6E-E661-46A1-AC25-998F994F85EB}\MpKsl5981ba83.sys [x]
R1 MpKsl62250eeb;MpKsl62250eeb;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{14698E4C-E468-4440-955E-F8D19496F4E2}\MpKsl62250eeb.sys [x]
R1 MpKsl82251cfe;MpKsl82251cfe;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{4309D1AE-3F07-45D6-ACD6-4DCC8B9DBE79}\MpKsl82251cfe.sys [x]
R1 MpKslbbbd644e;MpKslbbbd644e;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D295FA0F-84C8-45B9-BB57-C892F6FCE108}\MpKslbbbd644e.sys [x]
R2 AsSysCtrlService;ASUS System Control Service;c:\program files\ASUS\AsSysCtrlService\1.00.00\AsSysCtrlService.exe [2008-08-15 86016]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 appliandMP;appliandMP;c:\windows\system32\DRIVERS\appliand.sys [x]
R3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-11-26 79360]
R3 DSGACommsDriver;DSGACommsDriver;c:\windows\system32\drivers\DSGACommsDriver.sys [2009-09-30 19168]
R3 DSGAFilterDriver;DSGAFilterDriver;c:\windows\system32\drivers\DSGAFilterDriver.sys [2009-09-30 17632]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 skfiltv;skfiltv;c:\windows\system32\drivers\skfiltv.sys [2008-08-14 17408]
R3 SMARTMouseFilterx86;HID-compliant mouse;c:\windows\system32\DRIVERS\SMARTMouseFilterx86.sys [2010-06-15 11048]
R3 SMARTVHidMini2000x86;SMART HID Device;c:\windows\system32\DRIVERS\SMARTVHidMini2000x86.sys [2010-06-15 14120]
R3 SMARTVTabletPCx86;SMART Virtual TabletPC;c:\windows\system32\DRIVERS\SMARTVTabletPCx86.sys [2010-06-15 13440]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 TVICHW32;TVICHW32;c:\windows\system32\DRIVERS\TVICHW32.SYS [2009-11-11 23600]
R3 ute3nda2;AVZ Kernel Driver;c:\windows\system32\Drivers\ute3nda2.sys [2011-03-02 7168]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2011-01-18 109328]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-27 1343400]
R4 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu;c:\program files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-04-18 53592]
S2 ncryptpro;ncryptpro;c:\windows\system32\Drivers\ncryptpro.sys [2009-08-11 186720]
S2 nlsX86cc;NLS Service;c:\windows\system32\NLSSRV32.EXE [2011-01-12 68928]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-07 378984]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-01 2271608]
S2 thdudf;TOSHIBA UDF2.5 Reader File System Driver;c:\windows\system32\DRIVERS\thdudf.sys [2006-11-11 66944]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-01-21 328808]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - ehdrv
*Deregistered* - epfw
*Deregistered* - epfwtdi
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uStart Page = hxxp://www.google.com/
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: &Stáhnout &vše FlashGetem - c:\program files\FlashGet\jc_all.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MIF5BA~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MIF5BA~1\Office14\ONBttnIE.dll/105
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
FF - ProfilePath - c:\users\Honzik\AppData\Roaming\Mozilla\Firefox\Profiles\lo8zxial.default\
.
.
------- Asociace souborů -------
.
txtfile="c:\program files\PSPad editor\PSPad.exe" "%1"
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
HKCU-Run-Steam - c:\program files\Steam\steam.exe
HKCU-Run-minus - (no file)
MSConfigStartUp-Steam - c:\program files\Steam\steam.exe
AddRemove-Steam App 240 - c:\program files\Steam\steam.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-350281380-233495102-1455855570-1004\Software\SecuROM\License information*]
"datasecu"=hex:1a,e3,5c,a5,bc,da,a9,df,5d,00,d5,4e,1e,d4,c3,bb,dc,bc,cd,fc,a6,
e1,a9,de,24,46,07,42,7b,70,fd,cb,1d,05,26,7f,f9,99,b7,4b,ec,8b,d6,1d,5b,d7,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Premiere Pro\1.5\DefaultPreset]
@DACL=(02 0000)
@="c:\\Program Files\\Adobe\\Premiere Pro 1.5 Tryout\\Settings\\DV - NTSC\\Standard 48kHz.prpreset"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Premiere Pro\1.5\Help]
@DACL=(02 0000)
"AdobeMediaEncoder"="c:\\Program Files\\Adobe\\Premiere Pro 1.5 Tryout\\Help\\1_0_0_0.html"
"Contents"="c:\\Program Files\\Adobe\\Premiere Pro 1.5 Tryout\\Help\\1_0_0_0.html"
"ExportToDVD"="c:\\Program Files\\Adobe\\Premiere Pro 1.5 Tryout\\Help\\1_19_2_0.html"
"HowToUse"="c:\\Program Files\\Adobe\\Premiere Pro 1.5 Tryout\\Help\\0_0_0_0.html"
"Keyboard"="c:\\Program Files\\Adobe\\Premiere Pro 1.5 Tryout\\Help\\1_21_0_0.html"
"Search"="c:\\Program Files\\Adobe\\Premiere Pro 1.5 Tryout\\Help\\search.html"
"Support"="http://www.adobe.com/support/products/premiere.html"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-04-21 19:06:19
ComboFix-quarantined-files.txt 2011-04-21 17:06
.
Před spuštěním: Volných bajtů: 54 793 371 648
Po spuštění: Volných bajtů: 54 466 072 576
.
- - End Of File - - 96AA4B6784E0BAAAC7600D657551D6DE

Docela by mě zajímalo proč to smazalo Steam.exe... pochybuji že by ve Steamu byl vir. Teď CSSko 'díky' CF nespustím vůbec.

CF zřejmě vyhodnotil Steam jako vir. Můžete ho obnovit ze složky C:\Quoobox , ale jhen za poředpokladu, jste-li si jist, že je čistý. Až hru spustíte, dejte vědět, co se zmněnilo.

Tak zatím hra nespadla, takže to asi pomohlo. Děkuji

edit: No tak po napsání příspěvku padla asi 2x za sebou...

Buď se hra nesnáší s něčím, co máte nainstalováno v PC, nebo je to problém samotné hry. Nejde o problém nákazy. Zkuste se poptat na některém herním fóru, na tohle tady nejsme odborníci.

Dobře, zkusím. Po virové stránce je tedy jinak log v pořádku? Děkuji za kontrolu.

Nyní ano, CF několik infikovaných položek smazal. Nemáte zač!