VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

BSOD 0x0000008E

https://forum.viry.cz:443/viewtopic.php?t=116456

Stránka 1 z 2

BSOD 0x0000008E

Napsal: 28 říj 2011 18:54
od dusanjuricka
Dobrý den, opět bych se chtěl na vás obrátit s PC
už asi tři dny pozoruji u PC BSOD 0x0000008E, nevím přesně o co se jedná, když jsem hledal na internetu, tak to má mít spojitost s vadnými RAM, tak jsem tedy PC otestoval programem memtest +86, ale ten nic nenašel.
Jinak CPU je taktované a u RAM a CPU je zvýšeno napětí, pokud budete chtít bližší specifikaci systému zašlu jí.
:arrow: Zde je screen:
http://www.nahrejto.cz/pics/8bee29b760b ... 791883.jpg
Děkuji za vyřízení :-)
Log:
  • Logfile of random's system information tool 1.09 (written by random/random)
    Run by Dušan Juřička at 2011-10-28 19:53:58
    Microsoft Windows 7 Ultimate Service Pack 1
    System drive C: has 10 GB (17%) free of 59 GB
    Total RAM: 3070 MB (51% free)

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 19:54:01, on 28.10.2011
    Platform: Windows 7 SP1 (WinNT 6.00.3505)
    MSIE: Internet Explorer v9.00 (9.00.8112.16421)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskhost.exe
    C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
    C:\Windows\vVX1000.exe
    C:\Program Files\Freecorder\FLVSrvc.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    C:\Program Files\AVAST Software\Avast\AvastUI.exe
    C:\Program Files\Logitech\SetPointP\SetPoint.exe
    C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
    C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files\WinFast\WFDTV\WFWIZ.exe
    C:\Program Files\DAEMON Tools Lite\DTLite.exe
    C:\Users\Dušan Juřička\AppData\Roaming\Dropbox\bin\Dropbox.exe
    C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
    C:\Users\Dušan Juřička\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Users\Dušan Juřička\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Dušan Juřička\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Dušan Juřička\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Dušan Juřička\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Dušan Juřička\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Dušan Juřička\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\System32\taskmgr.exe
    C:\Users\Dušan Juřička\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe
    C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe
    C:\Users\Dušan Juřička\Downloads\RSIT.exe
    C:\Program Files\trend micro\Dušan Juřička.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = About:Blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\prxtbFree.dll
    O1 - Hosts: ˙ţ127.0.0.1 localhost
    O1 - Hosts: ::1 localhost
    O2 - BHO: Freecorder - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\prxtbFree.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
    O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
    O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL
    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL
    O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
    O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\prxtbFree.dll
    O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
    O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe
    O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
    O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files\Freecorder\FLVSrvc.exe" /run
    O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
    O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
    O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
    O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.cz/cz.special-uninstalla ... =10.0.1410
    O4 - HKCU\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
    O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Dušan Juřička\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
    O4 - Startup: Dropbox.lnk = ?
    O4 - Startup: VersionCheck.lnk = ?
    O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
    O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
    O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
    O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
    O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
    O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
    O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
    O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
    O22 - SharedTaskScheduler: ObjectDockShellExt - {1984D045-52CF-49cd-DB77-08F378FEA4DB} - C:\Program Files\Stardock\ObjectDockFree\ODMenu.dll
    O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: Aladdin SQL Server - Unknown owner - C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe
    O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    O23 - Service: CyberGhost VPN Client (CGVPNCliSrvc) - mobile concepts GmbH - C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe
    O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\Windows\system32\dgdersvc.exe
    O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
    O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe
    O23 - Service: GS In-Game Service - ClanServers Hosting LLC - C:\Program Files\GameTracker\GSInGameService.exe
    O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
    O23 - Service: HideMyIpSRV - Hide My IP - C:\Program Files\Hide My IP\HideMyIpSrv.exe
    O23 - Service: JMB36X - Unknown owner - C:\Windows\System32\XSrvSetup.exe
    O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe
    O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
    O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
    O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

    --
    End of file - 12733 bytes

    ======Scheduled tasks folder======

    C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-310635791-415630548-3500202841-1001Core.job
    C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-310635791-415630548-3500202841-1001UA.job
    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

    =========Mozilla firefox=========

    ProfilePath - C:\Users\Dušan Juřička\AppData\Roaming\Mozilla\Firefox\Profiles\651kmyw3.default

    prefs.js - "browser.startup.homepage" - "www.seznam.cz"

    "{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
    "wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
    "Description"=Adobe® Flash® Player 10.1 Plugin
    "Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
    "Description"=Adobe Shockwave Player
    "Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
    "Description"=DivX Web Player
    "Path"=C:\Program Files\DivX\DivX Web Player\npdivx32.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
    "Description"=DivX VOD Helper Plug-in
    "Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn.me/esnsonar,version=0.70.0]
    "Description"=ESN Sonar browser plugin
    "Path"=C:\Program Files\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/esnlaunch,version=0.80.0]
    "Description"=
    "Path"=C:\Program Files\Battlelog Web Plugins\0.80.0\npesnlaunch.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
    "Description"=Oracle® Next Generation Java™ Plug-In
    "Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
    "Description"=Ag Player Plugin
    "Path"=c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
    "Description"=Office Authorization plug-in for NPAPI browsers
    "Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
    "Description"=Microsoft SharePoint Plug-in for Firefox
    "Path"=C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
    "Description"=WLPG Install MIME type
    "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
    "Description"=WLPG Install MIME type
    "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
    "Description"=This plugin detects and launches Pando Media Booster
    "Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
    "Description"=Google Update
    "Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
    "Description"=Google Update
    "Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
    "Description"=Handles PDFs in-place in Firefox
    "Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

    C:\Program Files\Mozilla Firefox\extensions\
    {972ce4c6-7e08-4474-a285-3208198ce6fd}
    {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
    {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
    {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

    C:\Program Files\Mozilla Firefox\components\
    binary.manifest
    browsercomps.dll
    nppl3260.xpt
    nsjsrealplayerplugin.xpt

    C:\Program Files\Mozilla Firefox\plugins\
    libdivx.dll
    np-mswmp.dll
    npdeployJava1.dll
    npdivx32.dll
    npdivx32.xpt
    nppdf32.dll
    nppl3260.dll
    nprjplug.dll
    nprpjplug.dll
    ssldivx.dll
    WMP Firefox Plugin License.rtf
    WMP Firefox Plugin RelNotes.txt

    C:\Program Files\Mozilla Firefox\searchplugins\
    amazondotcom.xml
    bing.xml
    eBay.xml
    google.xml
    wikipedia.xml
    yahoo.xml

    C:\Users\Dušan Juřička\AppData\Roaming\Mozilla\Firefox\Profiles\651kmyw3.default\extensions\
    {1392b8d2-5c05-419f-a8f6-b9f15a596612}

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
    Freecorder Toolbar - C:\Program Files\Freecorder\prxtbFree.dll [2011-01-17 175912]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
    Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
    RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-06-01 386264]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
    DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-05-23 115072]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
    Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 4221328]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
    avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
    Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
    Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 561552]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
    Bing Bar BHO - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll [2010-09-22 612616]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-14 42272]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {8dcb7100-df86-4384-8842-8fa844297b3f} - @C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll [2010-09-22 612616]
    {1392b8d2-5c05-419f-a8f6-b9f15a596612} - Freecorder Toolbar - C:\Program Files\Freecorder\prxtbFree.dll [2011-01-17 175912]
    {30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]
    {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-11-02 9808488]
    "VX1000"=C:\Windows\vVX1000.exe [2010-05-20 762736]
    "JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2007-03-20 36864]
    "Freecorder FLV Service"=C:\Program Files\Freecorder\FLVSrvc.exe [2011-03-24 167936]
    "ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-02-06 170496]
    "avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]
    "EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-06-24 1386776]
    "WinFastDTV"=C:\Program Files\WinFast\WFDTV\DTVSchdl.exe [2011-06-08 101888]
    "LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2011-08-15 1955208]
    "StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-09-08 343168]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "AvgUninstallURL"=cmd.exe /c start http://www.avg.cz/cz.special-uninstalla ... =10.0.1410 []

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "WinFast Schedule"=C:\Program Files\WinFast\WFDTV\WFWIZ.exe [2010-08-11 2920448]
    "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
    "Facebook Update"=C:\Users\Dušan Juřička\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-25 137536]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-02-06 170496]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
    C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clownfish]
    C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-03-26 1234216]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
    C:\Program Files\Samsung\Kies\/\KiesTrayAgent.exe [2010-01-28 3404600]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
    C:\Program Files\Microsoft LifeCam\LifeExp.exe [2010-05-20 119152]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
    C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-03-26 1234216]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
    C:\Program Files\Pando Networks\Media Booster\PMB.exe [2011-06-29 3077528]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Registry Repair Wizard Scheduler]
    C:\Program Files\SmartPCTools\Registry Repair Wizard\RCHelper.exe [2009-01-24 1052928]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
    C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler]
    C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 153672]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamePark klient 2.lnk]
    C:\Program Files\GamePark2\gpcl.exe [2011-07-29 409088]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GameParkKlient.lnk]
    []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk]
    C:\Program Files\MSI\TotalMedia 3.5\TMMonitor.exe [2007-12-17 258048]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Core Temp.lnk]
    C:\Program Files\core temp\Core Temp.exe [2010-10-03 470544]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
    C:\Program Files\Common Files\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^StartupCPU.lnk]
    C:\Users\Dušan Juřička\AppData\Roaming\FAH\CPU\StartupCPU.exe [2011-05-01 35944]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^StartupGPU.lnk]
    C:\Users\Dušan Juřička\AppData\Roaming\FAH\GPU\StartupGPU.exe [2011-05-01 35944]

    C:\Users\Dušan Juřička\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    Dropbox.lnk - C:\Users\Dušan Juřička\AppData\Roaming\Dropbox\bin\Dropbox.exe
    VersionCheck.lnk - C:\Users\Dušan Juřička\AppData\Roaming\FAH\VersionCheck.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
    c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-06-17 66328]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-04-10 203776]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
    Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll [2011-06-19 233888]
    ObjectDockShellExt - {1984D045-52CF-49cd-DB77-08F378FEA4DB} - C:\Program Files\Stardock\ObjectDockFree\ODMenu.dll [2010-10-04 511344]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 4221328]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
    "SecurityProviders"=credssp.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "ConsentPromptBehaviorAdmin"=0
    "ConsentPromptBehaviorUser"=3
    "EnableLUA"=0
    "EnableUIADesktopToggle"=0
    "PromptOnSecureDesktop"=0
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1
    "EnableLinkedConnections"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=145
    "NoDrives"=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDrives"=0

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
    "vidc.mrle"=msrle32.dll
    "vidc.msvc"=msvidc32.dll
    "msacm.imaadpcm"=imaadp32.acm
    "msacm.msg711"=msg711.acm
    "msacm.msgsm610"=msgsm32.acm
    "msacm.msadpcm"=msadp32.acm
    "midimapper"=midimap.dll
    "wavemapper"=msacm32.drv
    "VIDC.UYVY"=msyuv.dll
    "VIDC.YUY2"=msyuv.dll
    "VIDC.YVYU"=msyuv.dll
    "VIDC.IYUV"=iyuv_32.dll
    "vidc.i420"=iyuv_32.dll
    "VIDC.YVU9"=tsbyuv.dll
    "msacm.l3acm"=C:\Windows\System32\l3codeca.acm
    "vidc.cvid"=iccvid.dll
    "MSVideo8"=VfWWDM32.dll
    "wave"=wdmaud.drv
    "midi"=wdmaud.drv
    "mixer"=wdmaud.drv
    "aux"=wdmaud.drv
    "wave1"=wdmaud.drv
    "midi1"=wdmaud.drv
    "mixer1"=wdmaud.drv
    "aux1"=wdmaud.drv
    "wave2"=wdmaud.drv
    "mixer2"=wdmaud.drv
    "msacm.lhacm"=lhacm.acm
    "wave4"=wdmaud.drv
    "mixer3"=wdmaud.drv
    "wave5"=wdmaud.drv
    "mixer4"=wdmaud.drv
    "vidc.DIVX"=DivX.dll
    "vidc.yv12"=DivX.dll
    "msacm.siren"=sirenacm.dll
    "VIDC.RTV1"=rtvcvfw32.dll
    "VIDC.FPS1"=frapsvid.dll
    "wave3"=wdmaud.drv

    ======File associations======

    .js - edit - C:\Windows\System32\Notepad.exe %1

    ======List of files/folders created in the last 1 month======

    2011-10-28 19:52:57 ----D---- C:\rsit
    2011-10-28 19:37:14 ----D---- C:\Program Files\Marvell
    2011-10-28 19:32:21 ----D---- C:\ProgramData\Uniblue
    2011-10-28 19:24:42 ----A---- C:\Windows\reimage.ini
    2011-10-28 18:32:03 ----A---- C:\Windows\system32\~$bu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Drbu vrbu Dr.lnk
    2011-10-27 20:30:51 ----D---- C:\ProgramData\ATI
    2011-10-27 20:14:30 ----A---- C:\Windows\system32\mshtmled.dll
    2011-10-27 20:14:30 ----A---- C:\Windows\system32\iertutil.dll
    2011-10-27 20:14:29 ----A---- C:\Windows\system32\jscript.dll
    2011-10-27 20:14:29 ----A---- C:\Windows\system32\ieui.dll
    2011-10-27 20:14:28 ----A---- C:\Windows\system32\wininet.dll
    2011-10-27 20:14:28 ----A---- C:\Windows\system32\jsproxy.dll
    2011-10-27 20:14:28 ----A---- C:\Windows\system32\jscript9.dll
    2011-10-27 20:14:27 ----A---- C:\Windows\system32\urlmon.dll
    2011-10-27 20:14:27 ----A---- C:\Windows\system32\url.dll
    2011-10-27 20:14:27 ----A---- C:\Windows\system32\ieframe.dll
    2011-10-27 20:14:25 ----A---- C:\Windows\system32\mshtml.dll
    2011-10-27 19:59:41 ----A---- C:\Windows\system32\oleaut32.dll
    2011-10-27 19:59:41 ----A---- C:\Windows\system32\oleacc.dll
    2011-10-27 19:59:28 ----A---- C:\Windows\system32\tzres.dll
    2011-10-27 19:59:20 ----A---- C:\Windows\system32\psisdecd.dll
    2011-10-27 19:59:18 ----A---- C:\Windows\system32\shell32.dll
    2011-10-27 19:59:14 ----A---- C:\Windows\system32\win32k.sys
    2011-10-27 19:53:36 ----D---- C:\Program Files\Common Files\ATI Technologies
    2011-10-27 19:52:37 ----D---- C:\Program Files\ATI Technologies
    2011-10-27 19:52:36 ----D---- C:\Program Files\ATI
    2011-10-27 19:52:11 ----D---- C:\ATI
    2011-10-27 18:39:39 ----A---- C:\Users\Dušan Juřička\AppData\Roaming\Stardockfences_debug_snapshot.dat
    2011-10-27 18:39:34 ----DC---- C:\ProgramData\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}
    2011-10-27 18:07:17 ----D---- C:\Users\Dušan Juřička\AppData\Roaming\Stardock
    2011-10-27 18:07:02 ----HDC---- C:\ProgramData\{5486EA6B-AF91-4B4B-868E-F80AB4BCD83A}
    2011-10-27 18:06:56 ----D---- C:\Program Files\Stardock
    2011-10-26 11:15:18 ----D---- C:\Program Files\LogMeIn Hamachi
    2011-10-18 17:53:48 ----A---- C:\Windows\system32\drivers\wfcxxbar.sys
    2011-10-18 17:53:48 ----A---- C:\Windows\system32\drivers\wfcxtcap.sys
    2011-10-18 17:53:48 ----A---- C:\Windows\system32\drivers\wfcxdtun.sys
    2011-10-18 17:53:48 ----A---- C:\Windows\system32\drivers\wfcxatun.sys
    2011-10-18 17:53:48 ----A---- C:\Windows\system32\drivers\wfcxacap.sys
    2011-10-18 13:17:39 ----D---- C:\Users\Dušan Juřička\AppData\Roaming\InstallShield
    2011-10-18 13:01:09 ----A---- C:\Windows\system32\drivers\wfcxvcap.sys
    2011-10-12 22:14:03 ----D---- C:\Program Files\Defraggler
    2011-10-12 21:40:57 ----A---- C:\Windows\system32\Dvbpws.dll
    2011-10-12 21:36:35 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
    2011-10-12 21:36:34 ----A---- C:\Windows\system32\drivers\aswSP.sys
    2011-10-12 21:36:27 ----A---- C:\Windows\system32\drivers\aswRdr.sys
    2011-10-12 21:36:25 ----A---- C:\Windows\system32\drivers\aswTdi.sys
    2011-10-12 21:36:23 ----A---- C:\Windows\system32\drivers\aswSnx.sys
    2011-10-12 21:36:19 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
    2011-10-12 21:35:58 ----A---- C:\Windows\system32\aswBoot.exe
    2011-10-12 21:35:58 ----A---- C:\Windows\avastSS.scr
    2011-10-12 21:35:53 ----D---- C:\ProgramData\AVAST Software
    2011-10-12 21:35:53 ----D---- C:\Program Files\AVAST Software
    2011-10-12 21:31:36 ----SHD---- C:\$RECYCLE.BIN
    2011-10-12 14:00:31 ----D---- C:\Program Files\trend micro
    2011-10-11 22:10:37 ----A---- C:\Windows\system32\drivers\afc.sys
    2011-10-11 22:10:10 ----D---- C:\Program Files\MSI
    2011-10-11 20:21:10 ----A---- C:\Windows\system32\unicows.dll
    2011-10-11 15:37:20 ----A---- C:\Windows\system32\drivers\ULCDRHlp.sys
    2011-10-08 13:55:32 ----D---- C:\Program Files\Battlelog Web Plugins
    2011-10-08 13:47:52 ----HD---- C:\Program Files\Common Files\EAInstaller
    2011-10-08 12:32:59 ----D---- C:\Users\Dušan Juřička\AppData\Roaming\Origin
    2011-10-08 12:31:10 ----D---- C:\Program Files\Origin Games
    2011-10-08 12:30:54 ----D---- C:\Program Files\Origin
    2011-10-08 10:07:30 ----A---- C:\Windows\wcx_ftp.ini

    ======List of files/folders modified in the last 1 month======

    2011-10-28 19:54:00 ----D---- C:\Windows\Temp
    2011-10-28 19:46:56 ----D---- C:\Windows\System32
    2011-10-28 19:46:56 ----D---- C:\Windows\inf
    2011-10-28 19:46:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
    2011-10-28 19:45:20 ----D---- C:\Windows\system32\config
    2011-10-28 19:41:58 ----RD---- C:\Program Files
    2011-10-28 19:41:53 ----D---- C:\Windows\Prefetch
    2011-10-28 19:41:49 ----D---- C:\Windows\Tasks
    2011-10-28 19:41:49 ----D---- C:\Windows\system32\Tasks
    2011-10-28 19:41:32 ----D---- C:\Windows
    2011-10-28 19:41:13 ----D---- C:\Users\Dušan Juřička\AppData\Roaming\Dropbox
    2011-10-28 19:37:47 ----D---- C:\Windows\system32\catroot
    2011-10-28 19:37:43 ----D---- C:\Windows\system32\drivers
    2011-10-28 19:37:40 ----D---- C:\Windows\system32\DriverStore
    2011-10-28 19:32:21 ----D---- C:\ProgramData
    2011-10-28 19:21:03 ----D---- C:\Windows\system32\catroot2
    2011-10-28 13:27:53 ----D---- C:\Windows\rescache
    2011-10-28 11:31:43 ----D---- C:\Users\Dušan Juřička\AppData\Roaming\AIMP
    2011-10-28 10:24:44 ----D---- C:\Users\Dušan Juřička\AppData\Roaming\DAEMON Tools Lite
    2011-10-27 20:47:34 ----RSD---- C:\Windows\assembly
    2011-10-27 20:47:34 ----D---- C:\Windows\Microsoft.NET
    2011-10-27 20:30:13 ----D---- C:\Windows\winsxs
    2011-10-27 20:29:01 ----D---- C:\Program Files\Microsoft Silverlight
    2011-10-27 20:29:00 ----D---- C:\Config.Msi
    2011-10-27 20:27:41 ----D---- C:\Windows\ehome
    2011-10-27 20:27:40 ----D---- C:\Windows\system32\migration
    2011-10-27 20:27:40 ----D---- C:\Windows\system32\cs-CZ
    2011-10-27 20:27:40 ----D---- C:\Program Files\Internet Explorer
    2011-10-27 20:18:36 ----SHD---- C:\Windows\Installer
    2011-10-27 20:17:50 ----D---- C:\ProgramData\Microsoft Help
    2011-10-27 20:11:59 ----D---- C:\Windows\debug
    2011-10-27 20:04:13 ----SHD---- C:\System Volume Information
    2011-10-27 19:53:36 ----D---- C:\Program Files\Common Files
    2011-10-27 19:05:24 ----D---- C:\Windows\system32\wfp
    2011-10-27 19:05:21 ----D---- C:\Windows\system32\wbem
    2011-10-27 19:04:15 ----D---- C:\Windows\system32\Msdtc
    2011-10-27 19:04:11 ----D---- C:\Users\Dušan Juřička\AppData\Roaming\uTorrent
    2011-10-27 19:04:09 ----D---- C:\ProgramData\Real
    2011-10-27 19:04:05 ----D---- C:\Windows\registration
    2011-10-27 19:00:30 ----AD---- C:\ProgramData\TEMP
    2011-10-27 12:13:27 ----D---- C:\Users\Dušan Juřička\AppData\Roaming\Skype
    2011-10-27 10:04:24 ----D---- C:\Program Files\uTorrent
    2011-10-19 19:07:33 ----RD---- C:\Program Files\Skype
    2011-10-19 18:51:40 ----HD---- C:\Program Files\InstallShield Installation Information
    2011-10-19 18:49:57 ----D---- C:\Program Files\Common Files\ArcSoft
    2011-10-19 18:48:55 ----D---- C:\Program Files\WinFast
    2011-10-18 16:52:39 ----D---- C:\Windows\system32\WinFast
    2011-10-18 14:13:46 ----SD---- C:\Users\Dušan Juřička\AppData\Roaming\Microsoft
    2011-10-16 18:43:11 ----D---- C:\Program Files\Common Files\LogiShrd
    2011-10-16 18:42:08 ----D---- C:\ProgramData\Logishrd
    2011-10-16 18:42:08 ----D---- C:\Program Files\Logitech
    2011-10-14 18:20:52 ----D---- C:\Qoobox
    2011-10-14 17:50:07 ----D---- C:\Windows\pss
    2011-10-12 22:12:40 ----D---- C:\Windows\SoftwareDistribution
    2011-10-12 21:49:20 ----D---- C:\Windows\system32\drivers\etc
    2011-10-12 21:29:55 ----A---- C:\Windows\system.ini
    2011-10-12 21:27:27 ----D---- C:\Windows\AppPatch
    2011-10-12 21:17:50 ----D---- C:\ProgramData\AVG10
    2011-10-12 20:04:08 ----D---- C:\ProgramData\MFAData
    2011-10-11 22:10:52 ----D---- C:\Users\Dušan Juřička\AppData\Roaming\ArcSoft
    2011-10-11 15:13:52 ----D---- C:\Windows\Panther
    2011-10-11 15:13:51 ----D---- C:\Windows\Minidump
    2011-10-11 15:13:51 ----D---- C:\Windows\Logs
    2011-10-11 15:13:31 ----D---- C:\Program Files\CCleaner
    2011-10-10 21:18:49 ----A---- C:\Windows\system32\PnkBstrB.exe
    2011-10-09 13:52:44 ----D---- C:\Windows\system32\NDF
    2011-10-08 13:48:09 ----D---- C:\ProgramData\Electronic Arts
    2011-10-08 13:47:59 ----D---- C:\ProgramData\Origin
    2011-10-08 13:47:00 ----A---- C:\Windows\system32\PnkBstrA.exe
    2011-10-08 12:57:10 ----D---- C:\Program Files\Electronic Arts
    2011-10-05 10:09:48 ----A---- C:\Windows\system32\MRT.exe
    2011-10-03 09:01:53 ----SD---- C:\ProgramData\Microsoft
    2011-10-02 20:52:48 ----D---- C:\Windows\cs
    2011-10-02 20:52:48 ----D---- C:\Windows\AppCompat
    2011-10-02 20:52:48 ----D---- C:\Users\Dušan Juřička\AppData\Roaming\vlc
    2011-10-02 20:52:48 ----D---- C:\Program Files\Windows Live
    2011-10-01 19:32:27 ----D---- C:\Program Files\Common Files\microsoft shared
    2011-09-30 22:08:52 ----D---- C:\Program Files\Mozilla Firefox

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2009-10-29 99440]
    R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
    R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
    R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2011-04-06 166976]
    R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
    R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-09-06 34392]
    R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-09-06 442200]
    R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-09-06 320856]
    R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-09-06 52568]
    R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
    R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-03-20 218688]
    R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2009-09-23 55040]
    R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2009-12-31 295936]
    R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
    R1 wfcxacap;WinFast TV PCI Audio Capture Driver; C:\Windows\system32\DRIVERS\wfcxacap.sys [2007-09-19 9856]
    R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-09-06 20568]
    R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-09-06 54616]
    R2 cpuz135;cpuz135; \??\C:\Windows\system32\drivers\cpuz135_x32.sys [2011-01-19 22504]
    R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
    R2 wfcxatun;WinFast TV Analog Tuner Driver; C:\Windows\system32\drivers\wfcxatun.sys [2007-09-19 31744]
    R2 WFCXVCAP;WinFast TV Video Capture Driver; C:\Windows\system32\drivers\wfcxvcap.sys [2007-09-19 167040]
    R3 Afc;PPdus ASPI Shell; C:\Windows\system32\drivers\Afc.sys [2006-11-10 18688]
    R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-09-08 8606208]
    R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-09-08 248832]
    R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
    R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
    R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
    R3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [2009-12-22 18136]
    R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-12-22 36640]
    R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-11-02 3228712]
    R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\Windows\system32\DRIVERS\L8042Kbd.sys [2011-04-30 22040]
    R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
    R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2010-05-25 204448]
    R3 tap0901;TAP-Win32 Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2010-02-25 25216]
    R3 ULCDRHlp;ULCDRHlp; C:\Windows\System32\Drivers\ULCDRHlp.sys [2004-12-23 27392]
    R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2009-09-23 165376]
    R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2009-09-23 78336]
    R3 VX1000;VX-1000; C:\Windows\system32\DRIVERS\VX1000.sys [2010-05-20 1961072]
    R3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver; C:\Windows\system32\drivers\wfcxdtun.sys [2007-09-19 21248]
    R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver; C:\Windows\system32\drivers\wfcxtcap.sys [2007-09-19 15872]
    R3 wfcxxbar;WinFast TV Crossbar Driver; C:\Windows\system32\drivers\wfcxxbar.sys [2007-09-19 10496]
    S1 CXAVSAUD;Prolink 2388x Audio Capture; C:\Windows\system32\DRIVERS\pvavsaud.sys [2005-10-25 11008]
    S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
    S3 ALSysIO;ALSysIO; \??\C:\Users\DUANJU~1\AppData\Local\Temp\ALSysIO.sys []
    S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
    S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-01-28 100352]
    S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
    S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 393728]
    S3 cpudrv;cpudrv; \??\C:\Program Files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
    S3 cpuz130;cpuz130; \??\C:\Users\DUANJU~1\AppData\Local\Temp\cpuz130\cpuz_x32.sys []
    S3 cpuz134;cpuz134; \??\C:\Users\DUANJU~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys []
    S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
    S3 netr73;RT73 USB - ovladač karty pro bezdrátovou síť LAN pro systém Windows Vista; C:\Windows\system32\DRIVERS\netr73.sys [2009-07-14 545792]
    S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
    S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
    S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]
    S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
    S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
    S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
    S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
    S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
    S3 ss_bserd;SAMSUNG USB Mobile Logging Driver; C:\Windows\system32\DRIVERS\ss_bserd.sys [2009-09-19 100224]
    S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
    S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
    S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
    S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
    S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
    S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
    S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
    S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
    S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-02-06 109056]
    R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
    R2 Aladdin SQL Server;Aladdin SQL Server; C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe [2011-10-18 136192]
    R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-09-08 176128]
    R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
    R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
    R2 dgdersvc;Device Error Recovery Service; C:\Windows\system32\dgdersvc.exe [2009-12-22 95568]
    R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2009-12-22 217088]
    R2 GS In-Game Service;GS In-Game Service; C:\Program Files\GameTracker\GSInGameService.exe [2011-04-29 1677096]
    R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288]
    R2 JMB36X;JMB36X; C:\Windows\System32\XSrvSetup.exe [2009-08-06 65536]
    R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2010-05-20 139632]
    R2 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2010-03-25 490280]
    R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-24 935208]
    R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-10-08 75136]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
    R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2010-10-28 2156952]
    R2 TeamViewer6;TeamViewer 6; C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe [2011-06-01 2337144]
    R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
    R3 HideMyIpSRV;HideMyIpSRV; C:\Program Files\Hide My IP\HideMyIpSrv.exe [2011-06-04 3249512]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-03-23 136176]
    S2 KMService;KMService; C:\Windows\system32\srvany.exe [2011-03-23 8192]
    S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
    S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
    S3 CGVPNCliSrvc;CyberGhost VPN Client; C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2011-03-22 2421384]
    S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
    S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [2011-03-01 130976]
    S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-03-23 136176]
    S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-06-17 295192]
    S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
    S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
    S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
    S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
    S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
    S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-08-13 411432]
    S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
    S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
    S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-03-18 1343400]
    S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
    S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
    S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

    -----------------EOF-----------------

Re: BSOD 0x0000008E

Napsal: 28 říj 2011 19:06
od Rudy
Zdravím!
Log vypadá OK (až na pár zbytečností). Nejprve upravte v biosu hodnoty taktu a napětí na default a chvíli PC testujte. Pokud se BSOD opakovat nebude, některá komponenta patrně nesnese přetaktování. V opačném případě se jedná o jinou chybu. V tomhle ale musíme mít jistotu.

Re: BSOD 0x0000008E

Napsal: 28 říj 2011 19:20
od dusanjuricka
OK nastavím takty a napětí na základní, ještě chci dodat že PC fungovalo takto bez problému zhruba rok.
A Bios je nejnovější a asi v době kdy se začal tento problém vyskytovat tak se mi stalo to, že se bios najednou zablokoval na základních hodnotách, FSB v biosu bylo nastaveno dle požadovaného na 295x10, ale v OS a na úvodní straně biosu bylo napsáno základních 200x10. problém odezněl, až po odpojení baterky z MB.
Tímto mě napadla možnost reinstalace BIOSU, co na to říkáte ? :?:
Děkuji :-)

Re: BSOD 0x0000008E

Napsal: 28 říj 2011 19:50
od Rudy
Spíše, než bios (i když i ten by mohl chybu způsobovat) bych řekl, že problém způsobuje nějaká komponenta (vada, nebo stáří). Reflash bioisu zkusit též můžete. Mějte na paměti, že komponenty jsou stavěny na určitý takt a jeho překročení se děje pouze na vaše vlastní nebezpečí.

Re: BSOD 0x0000008E

Napsal: 28 říj 2011 20:18
od dusanjuricka
Problém stále přetrvává, :arrow: podařilo se mi ho vyvolat režimem spánku a opětovným obnovením, ale není to pravidlem !

Re: BSOD 0x0000008E

Napsal: 28 říj 2011 20:51
od Rudy
OK. Pro jistotu proveďte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php á dejte log. Předem nic nemažte.

Re: BSOD 0x0000008E

Napsal: 28 říj 2011 21:34
od dusanjuricka
zde je log :

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Verze databáze: 8036

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

28.10.2011 22:33:43
mbam-log-2011-10-28 (22-33-36).txt

Typ: Rychlá kontrola
Kontrolované objekty: 191657
Uplynulý čas: 5 minut, 33 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Windows\17blackopsmp.exe (Backdoor.XTRat) -> No action taken.

Re: BSOD 0x0000008E

Napsal: 28 říj 2011 21:53
od Rudy
Položku, kterou našel MBAM smažte. Problém mohou způsobovat i viry. Uděláme hloubkovou kontrolu. Dejte log ComboFix.
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

Re: BSOD 0x0000008E

Napsal: 28 říj 2011 22:19
od dusanjuricka
ComboFix 11-10-28.04 - Dušan Juřička 28.10.2011 23:07:35.5.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3070.2008 [GMT 2:00]
Spuštěný z: c:\users\DuÜan Ju°iŔka\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\Dvbpws.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-09-28 do 2011-10-28 )))))))))))))))))))))))))))))))
.
.
2011-10-28 21:04 . 2011-10-28 21:04 54016 ----a-w- c:\windows\system32\drivers\ehxuystp.sys
2011-10-28 20:23 . 2011-10-28 20:23 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BB276239-D31E-41EE-989C-CE8AFE3394AB}\offreg.dll
2011-10-28 20:23 . 2011-10-28 20:23 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-10-28 20:23 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-10-28 17:52 . 2011-10-28 17:53 -------- d-----w- C:\rsit
2011-10-28 17:37 . 2011-10-28 17:37 -------- d-----w- c:\program files\Marvell
2011-10-28 17:32 . 2011-10-28 17:32 -------- d-----w- c:\programdata\Uniblue
2011-10-27 18:30 . 2011-10-27 18:30 -------- d-----w- c:\programdata\ATI
2011-10-27 18:17 . 2011-10-18 00:28 6668624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BB276239-D31E-41EE-989C-CE8AFE3394AB}\mpengine.dll
2011-10-27 17:59 . 2011-08-27 04:26 571904 ----a-w- c:\windows\system32\oleaut32.dll
2011-10-27 17:59 . 2011-08-27 04:26 233472 ----a-w- c:\windows\system32\oleacc.dll
2011-10-27 17:59 . 2011-07-09 04:29 2048 ----a-w- c:\windows\system32\tzres.dll
2011-10-27 17:59 . 2011-08-17 04:24 465408 ----a-w- c:\windows\system32\psisdecd.dll
2011-10-27 17:59 . 2011-08-17 04:19 75776 ----a-w- c:\windows\system32\psisrndr.ax
2011-10-27 17:59 . 2011-09-06 02:28 2334720 ----a-w- c:\windows\system32\win32k.sys
2011-10-27 17:53 . 2011-10-27 17:53 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-10-27 17:52 . 2011-10-27 17:53 -------- d-----w- c:\program files\ATI Technologies
2011-10-27 17:52 . 2011-10-27 17:52 -------- d-----w- c:\program files\ATI
2011-10-27 17:52 . 2011-10-27 17:52 -------- d-----w- C:\ATI
2011-10-27 16:39 . 2011-10-27 17:04 -------- dc----w- c:\programdata\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}
2011-10-27 16:09 . 2011-10-27 16:19 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\ApplicationHistory
2011-10-27 16:07 . 2011-10-27 16:07 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\ODUI
2011-10-27 16:07 . 2011-10-27 17:03 -------- d-----w- c:\users\Dušan Juřička\AppData\Roaming\Stardock
2011-10-27 16:07 . 2011-10-27 17:04 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\Stardock
2011-10-27 16:07 . 2011-10-27 16:07 -------- dc-h--w- c:\programdata\{5486EA6B-AF91-4B4B-868E-F80AB4BCD83A}
2011-10-27 16:06 . 2011-10-27 17:03 -------- d-----w- c:\program files\Stardock
2011-10-27 16:06 . 2011-10-27 16:06 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\PackageAware
2011-10-27 14:33 . 2011-10-28 09:19 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\SKIDROW
2011-10-27 14:32 . 2011-10-27 14:32 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\THQ
2011-10-26 09:15 . 2011-10-26 09:15 -------- d-----w- c:\program files\LogMeIn Hamachi
2011-10-25 18:59 . 2011-10-25 18:59 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\Facebook
2011-10-19 16:48 . 2008-08-13 07:35 20480 ----a-w- c:\program files\Windows Sidebar\Gadgets\PVR2Remote.Gadget\ClassLibrary1.dll
2011-10-18 15:53 . 2007-09-19 11:37 31744 ----a-w- c:\windows\system32\drivers\wfcxatun.sys
2011-10-18 15:53 . 2007-09-19 09:12 21248 ----a-w- c:\windows\system32\drivers\wfcxdtun.sys
2011-10-18 15:53 . 2007-09-19 09:09 10496 ----a-w- c:\windows\system32\drivers\wfcxxbar.sys
2011-10-18 15:53 . 2007-09-19 09:09 15872 ----a-w- c:\windows\system32\drivers\wfcxtcap.sys
2011-10-18 15:53 . 2007-09-19 09:09 9856 ----a-w- c:\windows\system32\drivers\wfcxacap.sys
2011-10-18 11:17 . 2011-10-18 11:17 -------- d-----w- c:\users\Dušan Juřička\AppData\Roaming\InstallShield
2011-10-18 11:01 . 2007-09-19 09:10 167040 ----a-w- c:\windows\system32\drivers\wfcxvcap.sys
2011-10-16 16:43 . 2011-10-16 16:43 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\Logishrd
2011-10-12 20:14 . 2011-10-12 20:14 -------- d-----w- c:\program files\Defraggler
2011-10-12 19:36 . 2011-09-06 20:36 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-10-12 19:36 . 2011-09-06 20:37 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-10-12 19:36 . 2011-09-06 20:36 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-10-12 19:36 . 2011-09-06 20:36 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-10-12 19:36 . 2011-09-06 20:38 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-10-12 19:36 . 2011-09-06 20:36 54616 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-10-12 19:35 . 2011-09-06 20:45 41184 ----a-w- c:\windows\avastSS.scr
2011-10-12 19:35 . 2011-09-06 20:45 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-10-12 19:35 . 2011-10-12 19:35 -------- d-----w- c:\programdata\AVAST Software
2011-10-12 19:35 . 2011-10-12 19:35 -------- d-----w- c:\program files\AVAST Software
2011-10-12 12:00 . 2011-10-28 17:54 -------- d-----w- c:\program files\trend micro
2011-10-11 20:10 . 2006-11-10 13:05 18688 ----a-w- c:\windows\system32\drivers\afc.sys
2011-10-11 20:10 . 2011-10-11 20:10 -------- d-----w- c:\program files\MSI
2011-10-11 18:21 . 2005-07-16 00:35 245408 ----a-w- c:\windows\system32\unicows.dll
2011-10-11 13:37 . 2004-12-23 15:27 27392 ----a-w- c:\windows\system32\drivers\ULCDRHlp.sys
2011-10-11 13:36 . 2009-03-11 08:53 350 ----a-w- c:\windows\system32\AF15IRTBL.bin
2011-10-08 11:55 . 2011-10-08 11:55 -------- d-----w- c:\program files\Battlelog Web Plugins
2011-10-08 11:47 . 2011-10-11 13:26 -------- d--h--w- c:\program files\Common Files\EAInstaller
2011-10-08 10:32 . 2011-10-08 10:32 -------- d-----w- c:\users\Dušan Juřička\AppData\Roaming\Origin
2011-10-08 10:32 . 2011-10-08 10:32 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\Origin
2011-10-08 10:31 . 2011-10-08 10:31 -------- d-----w- c:\program files\Origin Games
2011-10-08 10:30 . 2011-10-08 10:31 -------- d-----w- c:\program files\Origin
2011-10-01 17:32 . 2011-10-01 17:32 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-10-01 17:29 . 2011-10-01 17:29 15712 ----a-w- c:\program files\Common Files\Windows Live\.cache\a7d8de0a1cc805f06\MeshBetaRemover.exe
2011-10-01 17:19 . 2011-10-01 17:19 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\{0188D36A-DC56-4754-9263-266CA5FA4BC2}
2011-10-01 16:14 . 2011-10-01 16:14 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\{47F3E5D8-79E4-4791-944A-3DF32025F372}
2011-10-01 16:14 . 2011-10-01 16:14 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\{14161C5B-D5EF-4161-90D3-EEC7501ACC3F}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-10 19:19 . 2011-03-19 13:23 139128 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-10-10 19:18 . 2011-03-19 13:23 215128 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-10-10 19:18 . 2011-03-19 13:23 215128 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-10-08 11:47 . 2011-05-13 11:38 138056 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\PnkBstrK.sys
2011-10-08 11:47 . 2011-05-13 11:38 138056 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\PnkBstrK.sys
2011-10-08 11:47 . 2011-03-19 13:23 189248 ----a-w- c:\windows\system32\PnkBstrB.ex0
2011-10-08 11:47 . 2011-03-19 13:23 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-09-25 10:38 . 2011-06-25 15:51 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-09-14 09:47 . 2011-09-14 09:47 53760 ----a-w- c:\windows\system32\OVDecode.dll
2011-09-14 09:46 . 2011-09-14 09:46 13625856 ----a-w- c:\windows\system32\amdocl.dll
2011-09-14 09:38 . 2011-09-14 09:38 37376 ----a-w- c:\windows\system32\amdoclcl.dll
2011-09-08 18:26 . 2011-09-08 18:26 8606208 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-09-08 17:39 . 2011-09-08 17:39 18534912 ----a-w- c:\windows\system32\atioglxx.dll
2011-09-08 17:34 . 2011-09-08 17:34 151552 ----a-w- c:\windows\system32\atiapfxx.exe
2011-09-08 17:34 . 2011-09-08 17:34 732672 ----a-w- c:\windows\system32\aticfx32.dll
2011-09-08 17:30 . 2011-09-08 17:30 466944 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-09-08 17:30 . 2011-09-08 17:30 401408 ----a-w- c:\windows\system32\atieclxx.exe
2011-09-08 17:29 . 2011-09-08 17:29 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2011-09-08 17:28 . 2011-09-08 17:28 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2011-09-08 17:28 . 2011-09-08 17:28 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2011-09-08 17:28 . 2011-09-08 17:28 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2011-09-08 17:28 . 2011-09-08 17:28 20992 ----a-w- c:\windows\system32\atimuixx.dll
2011-09-08 17:28 . 2011-09-08 17:28 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-09-08 17:24 . 2011-09-08 17:24 4204032 ----a-w- c:\windows\system32\atidxx32.dll
2011-09-08 17:18 . 2011-09-08 17:18 1828864 ----a-w- c:\windows\system32\atiumdmv.dll
2011-09-08 17:09 . 2011-09-08 17:09 46080 ----a-w- c:\windows\system32\aticalrt.dll
2011-09-08 17:09 . 2011-09-08 17:09 44032 ----a-w- c:\windows\system32\aticalcl.dll
2011-09-08 17:08 . 2011-09-08 17:08 4064768 ----a-w- c:\windows\system32\atiumdva.dll
2011-09-08 17:05 . 2011-09-08 17:05 7331840 ----a-w- c:\windows\system32\aticaldd.dll
2011-09-08 17:05 . 2011-09-08 17:05 4289024 ----a-w- c:\windows\system32\atiumdag.dll
2011-09-08 16:59 . 2011-07-08 02:54 52736 ----a-w- c:\windows\system32\coinst.dll
2011-09-08 16:53 . 2011-09-08 16:53 270336 ----a-w- c:\windows\system32\atiadlxx.dll
2011-09-08 16:52 . 2011-09-08 16:52 13312 ----a-w- c:\windows\system32\atiglpxx.dll
2011-09-08 16:52 . 2011-09-08 16:52 32768 ----a-w- c:\windows\system32\atigktxx.dll
2011-09-08 16:52 . 2011-09-08 16:52 248832 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-09-08 16:51 . 2011-09-08 16:51 31744 ----a-w- c:\windows\system32\atiuxpag.dll
2011-09-08 16:51 . 2011-09-08 16:51 29184 ----a-w- c:\windows\system32\atiu9pag.dll
2011-09-08 16:51 . 2011-09-08 16:51 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-09-08 16:50 . 2011-09-08 16:50 53760 ----a-w- c:\windows\system32\atimpc32.dll
2011-09-08 16:50 . 2011-09-08 16:50 53760 ----a-w- c:\windows\system32\amdpcom32.dll
2011-08-17 11:52 . 2011-08-17 11:52 837192 ----a-w- c:\windows\system32\pbsvc.exe
2011-08-12 11:06 . 2011-08-12 11:06 101720 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-08-04 18:34 . 2011-08-04 18:34 796672 ----a-w- c:\windows\GPInstall.exe
2011-07-31 07:35 . 2011-07-31 07:35 65536 ----a-w- c:\windows\system32\frapsvid.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
2011-09-30 20:08 . 2011-06-08 09:50 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{1392b8d2-5c05-419f-a8f6-b9f15a596612}"= "c:\program files\Freecorder\prxtbFree.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
2011-01-17 14:54 175912 ----a-w- c:\program files\Freecorder\prxtbFree.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-01-17 14:54 175912 ----a-w- c:\program files\ConduitEngine\prxConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{1392b8d2-5c05-419f-a8f6-b9f15a596612}"= "c:\program files\Freecorder\prxtbFree.dll" [2011-01-17 175912]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2010-08-11 2920448]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"Facebook Update"="c:\users\Dušan Juřička\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2011-10-25 137536]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-11-02 9808488]
"VX1000"="c:\windows\vVX1000.exe" [2010-05-20 762736]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"Freecorder FLV Service"="c:\program files\Freecorder\FLVSrvc.exe" [2011-03-24 167936]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2009-02-06 170496]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-06-23 1386776]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2011-06-08 101888]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2011-08-15 1955208]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-09-08 343168]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2011-08-31 1047208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"="start http://www.avg.cz/cz.special-uninstalla ... =10.0.1410" [?]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
.
c:\users\Dušan Juřička\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\Dropbox.exe [2011-5-25 24176560]
VersionCheck.lnk - c:\users\Dušan Juřička\AppData\Roaming\FAH\VersionCheck.exe [2011-5-1 45010]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files\Stardock\ObjectDockFree\ODMenu.dll" [2010-10-04 511344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2011-06-17 07:33 66328 ----a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamePark klient 2.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\GamePark klient 2.lnk
backup=c:\windows\pss\GamePark klient 2.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GameParkKlient.lnk]
backup=c:\windows\pss\GameParkKlient.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk
backup=c:\windows\pss\TMMonitor.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Core Temp.lnk]
backup=c:\windows\pss\Core Temp.lnkStartup
.
[HKLM\~\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
backup=c:\windows\pss\Logitech . Registrace produktu.lnkStartup
.
[HKLM\~\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^StartupCPU.lnk]
path=c:\users\Dušan Juřička\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StartupCPU.lnk
backup=c:\windows\pss\StartupCPU.lnkStartup
.
[HKLM\~\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^StartupGPU.lnk]
path=c:\users\Dušan Juřička\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StartupGPU.lnk
backup=c:\windows\pss\StartupGPU.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
2009-02-06 15:02 170496 ----a-w- c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
2010-03-13 13:54 91520 ----a-w- c:\program files\Microsoft Office\Office14\BCSSync.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clownfish]
2010-03-26 08:52 1234216 ----a-w- c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2010-01-28 13:19 3404600 ----a-w- c:\program files\Samsung\Kies\KiesTrayAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
2010-05-20 14:27 119152 ----a-w- c:\program files\Microsoft LifeCam\LifeExp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
2010-03-26 08:52 1234216 ----a-w- c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
2011-06-29 16:47 3077528 ----a-w- c:\program files\Pando Networks\Media Booster\PMB.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Registry Repair Wizard Scheduler]
2009-01-23 23:49 1052928 ----a-w- c:\program files\SmartPCTools\Registry Repair Wizard\RCHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2010-11-20 12:17 1174016 ----a-w- c:\program files\Windows Sidebar\sidebar.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler]
2010-06-14 14:10 153672 ----a-w- c:\program files\Logitech\Gaming Software\LWEMon.exe
.
R1 CXAVSAUD;Prolink 2388x Audio Capture;c:\windows\system32\DRIVERS\pvavsaud.sys [2005-10-25 11008]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-23 136176]
R2 JMB36X;JMB36X;c:\windows\System32\XSrvSetup.exe [2009-08-06 65536]
R2 KMService;KMService;c:\windows\system32\srvany.exe [2011-03-23 8192]
R3 ALSysIO;ALSysIO;c:\users\DUANJU~1\AppData\Local\Temp\ALSysIO.sys [x]
R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2011-03-22 2421384]
R3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
R3 cpuz130;cpuz130;c:\users\DUANJU~1\AppData\Local\Temp\cpuz130\cpuz_x32.sys [x]
R3 cpuz134;cpuz134;c:\users\DUANJU~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [2011-03-01 130976]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-23 136176]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 netr73;RT73 USB - ovladač karty pro bezdrátovou síť LAN pro systém Windows Vista;c:\windows\system32\DRIVERS\netr73.sys [2009-07-13 545792]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 ss_bserd;SAMSUNG USB Mobile Logging Driver;c:\windows\system32\DRIVERS\ss_bserd.sys [2009-09-19 100224]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-03-18 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-03-20 218688]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S1 wfcxacap;WinFast TV PCI Audio Capture Driver;c:\windows\system32\DRIVERS\wfcxacap.sys [2007-09-19 9856]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 Aladdin SQL Server;Aladdin SQL Server;c:\program files\Aladdin\Aladdin SQL Server\AladdinSQL.exe [2011-10-18 136192]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-09-08 176128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-09-06 54616]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [2011-01-19 22504]
S2 dgdersvc;Device Error Recovery Service;c:\windows\system32\dgdersvc.exe [2009-12-22 95568]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-12-22 217088]
S2 GS In-Game Service;GS In-Game Service;c:\program files\GameTracker\GSInGameService.exe [2011-04-29 1677096]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-03-25 490280]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-06-01 2337144]
S2 wfcxatun;WinFast TV Analog Tuner Driver;c:\windows\system32\drivers\wfcxatun.sys [2007-09-19 31744]
S2 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [2007-09-19 167040]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2011-09-08 8606208]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2011-09-08 248832]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2009-12-22 18136]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-12-22 36640]
S3 HideMyIpSRV;HideMyIpSRV;c:\program files\Hide My IP\HideMyIpSrv.exe [2011-06-03 3249512]
S3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys [2007-09-19 21248]
S3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [2007-09-19 15872]
S3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys [2007-09-19 10496]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2010-02-15 322336]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - FSUSBEXDISK
*NewlyCreated* - MBAMSWISSARMY
.
Obsah adresáře 'Naplánované úlohy'
.
2011-10-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-23 18:20]
.
2011-10-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-23 18:20]
.
.
------- Doplňkový sken -------
.
uStart Page = About:Blank
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
LSP: c:\windows\system32\HMIPCore.dll
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Dušan Juřička\AppData\Roaming\Mozilla\Firefox\Profiles\651kmyw3.default\
FF - prefs.js: browser.search.selectedEngine - Winamp Search
FF - prefs.js: browser.startup.homepage - www.seznam.cz
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{12F63641-3D0B-4293-84D2-11CC3430BCEB}_is1 - d:\hry\Counter-Strike Source222\unins000.exe
.
.
Binary file temp00 matches
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-10-28 23:19:13
ComboFix-quarantined-files.txt 2011-10-28 21:19
.
Před spuštěním: Volných bajtů: 10 327 662 592
Po spuštění: Volných bajtů: 10 338 873 344
.
- - End Of File - - 064634D98B82A2991956240FFFBEF930

Re: BSOD 0x0000008E

Napsal: 28 říj 2011 22:46
od Rudy
Ještě dočistíme. Přesuňte comboFix na plochu. otevřte poznámkový blok a zkopírujte do něj:
KillAll::

Collect::
c:\windows\system32\drivers\ehxuystp.sys
c:\users\Dušan Juřička\AppData\Local\Facebook\Update\FacebookUpdate.exe

Folder::
c:\program files\Pando Networks\Media Booster

Driver::
ehxuystp

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]

Reboot::
Uložte na plochu jako CFScript.txt. pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Obrázek

Re: BSOD 0x0000008E

Napsal: 29 říj 2011 09:31
od dusanjuricka
Edit: zdá se mi, že problém odezněl, ještě budu testovat ale možná je to OK
ComboFix 11-10-28.04 - Dušan Juřička 29.10.2011 9:49.6.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3070.2004 [GMT 2:00]
Spuštěný z: c:\users\Dušan Juřička\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Dušan Juřička\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
file zipped: c:\users\Dušan Juřička\AppData\Local\Facebook\Update\FacebookUpdate.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Pando Networks\Media Booster
c:\program files\Pando Networks\Media Booster\BsSndRpt.exe
c:\program files\Pando Networks\Media Booster\BugSplat.dll
c:\program files\Pando Networks\Media Booster\BugSplatRc.dll
c:\program files\Pando Networks\Media Booster\freebl3.dll
c:\program files\Pando Networks\Media Booster\Media Booster FAQs.url
c:\program files\Pando Networks\Media Booster\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest
c:\program files\Pando Networks\Media Booster\Microsoft.VC90.CRT\msvcp90.dll
c:\program files\Pando Networks\Media Booster\Microsoft.VC90.CRT\msvcr90.dll
c:\program files\Pando Networks\Media Booster\npPandoWebPlugin.dll
c:\program files\Pando Networks\Media Booster\npPandoWebPlugin.dll.2.config
c:\program files\Pando Networks\Media Booster\nspr4.dll
c:\program files\Pando Networks\Media Booster\nss3.dll
c:\program files\Pando Networks\Media Booster\nssckbi.dll
c:\program files\Pando Networks\Media Booster\plc4.dll
c:\program files\Pando Networks\Media Booster\plds4.dll
c:\program files\Pando Networks\Media Booster\PMB.cpl
c:\program files\Pando Networks\Media Booster\PMB.exe
c:\program files\Pando Networks\Media Booster\PMB.exe.config
c:\program files\Pando Networks\Media Booster\smime3.dll
c:\program files\Pando Networks\Media Booster\softokn3.dll
c:\program files\Pando Networks\Media Booster\ssl3.dll
c:\program files\Pando Networks\Media Booster\uninst.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-09-28 do 2011-10-29 )))))))))))))))))))))))))))))))
.
.
2011-10-29 08:01 . 2011-10-29 08:01 -------- d-----w- c:\users\Public\AppData\Local\temp
2011-10-29 08:01 . 2011-10-29 08:01 -------- d-----w- c:\users\Du\AppData\Local\temp
2011-10-29 08:01 . 2011-10-29 08:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-10-29 07:35 . 2011-10-29 08:08 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BB276239-D31E-41EE-989C-CE8AFE3394AB}\offreg.dll
2011-10-28 21:19 . 2011-10-29 08:05 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\temp
2011-10-28 20:23 . 2011-10-28 20:23 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-10-28 20:23 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-10-28 17:52 . 2011-10-28 17:53 -------- d-----w- C:\rsit
2011-10-28 17:37 . 2011-10-28 17:37 -------- d-----w- c:\program files\Marvell
2011-10-28 17:32 . 2011-10-28 17:32 -------- d-----w- c:\programdata\Uniblue
2011-10-27 18:30 . 2011-10-27 18:30 -------- d-----w- c:\programdata\ATI
2011-10-27 18:17 . 2011-10-18 00:28 6668624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BB276239-D31E-41EE-989C-CE8AFE3394AB}\mpengine.dll
2011-10-27 17:59 . 2011-08-27 04:26 571904 ----a-w- c:\windows\system32\oleaut32.dll
2011-10-27 17:59 . 2011-08-27 04:26 233472 ----a-w- c:\windows\system32\oleacc.dll
2011-10-27 17:59 . 2011-07-09 04:29 2048 ----a-w- c:\windows\system32\tzres.dll
2011-10-27 17:59 . 2011-08-17 04:24 465408 ----a-w- c:\windows\system32\psisdecd.dll
2011-10-27 17:59 . 2011-08-17 04:19 75776 ----a-w- c:\windows\system32\psisrndr.ax
2011-10-27 17:59 . 2011-09-06 02:28 2334720 ----a-w- c:\windows\system32\win32k.sys
2011-10-27 17:53 . 2011-10-27 17:53 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-10-27 17:52 . 2011-10-27 17:53 -------- d-----w- c:\program files\ATI Technologies
2011-10-27 17:52 . 2011-10-27 17:52 -------- d-----w- c:\program files\ATI
2011-10-27 17:52 . 2011-10-27 17:52 -------- d-----w- C:\ATI
2011-10-27 16:39 . 2011-10-27 17:04 -------- dc----w- c:\programdata\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}
2011-10-27 16:09 . 2011-10-27 16:19 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\ApplicationHistory
2011-10-27 16:07 . 2011-10-27 16:07 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\ODUI
2011-10-27 16:07 . 2011-10-27 17:03 -------- d-----w- c:\users\Dušan Juřička\AppData\Roaming\Stardock
2011-10-27 16:07 . 2011-10-27 17:04 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\Stardock
2011-10-27 16:07 . 2011-10-27 16:07 -------- dc-h--w- c:\programdata\{5486EA6B-AF91-4B4B-868E-F80AB4BCD83A}
2011-10-27 16:06 . 2011-10-27 17:03 -------- d-----w- c:\program files\Stardock
2011-10-27 16:06 . 2011-10-27 16:06 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\PackageAware
2011-10-27 14:33 . 2011-10-28 09:19 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\SKIDROW
2011-10-27 14:32 . 2011-10-27 14:32 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\THQ
2011-10-26 09:15 . 2011-10-26 09:15 -------- d-----w- c:\program files\LogMeIn Hamachi
2011-10-25 18:59 . 2011-10-25 18:59 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\Facebook
2011-10-19 16:48 . 2008-08-13 07:35 20480 ----a-w- c:\program files\Windows Sidebar\Gadgets\PVR2Remote.Gadget\ClassLibrary1.dll
2011-10-18 15:53 . 2007-09-19 11:37 31744 ----a-w- c:\windows\system32\drivers\wfcxatun.sys
2011-10-18 15:53 . 2007-09-19 09:12 21248 ----a-w- c:\windows\system32\drivers\wfcxdtun.sys
2011-10-18 15:53 . 2007-09-19 09:09 10496 ----a-w- c:\windows\system32\drivers\wfcxxbar.sys
2011-10-18 15:53 . 2007-09-19 09:09 15872 ----a-w- c:\windows\system32\drivers\wfcxtcap.sys
2011-10-18 15:53 . 2007-09-19 09:09 9856 ----a-w- c:\windows\system32\drivers\wfcxacap.sys
2011-10-18 11:17 . 2011-10-18 11:17 -------- d-----w- c:\users\Dušan Juřička\AppData\Roaming\InstallShield
2011-10-18 11:01 . 2007-09-19 09:10 167040 ----a-w- c:\windows\system32\drivers\wfcxvcap.sys
2011-10-16 16:43 . 2011-10-16 16:43 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\Logishrd
2011-10-12 20:14 . 2011-10-12 20:14 -------- d-----w- c:\program files\Defraggler
2011-10-12 19:36 . 2011-09-06 20:36 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-10-12 19:36 . 2011-09-06 20:37 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-10-12 19:36 . 2011-09-06 20:36 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-10-12 19:36 . 2011-09-06 20:36 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-10-12 19:36 . 2011-09-06 20:38 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-10-12 19:36 . 2011-09-06 20:36 54616 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-10-12 19:35 . 2011-09-06 20:45 41184 ----a-w- c:\windows\avastSS.scr
2011-10-12 19:35 . 2011-09-06 20:45 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-10-12 19:35 . 2011-10-12 19:35 -------- d-----w- c:\programdata\AVAST Software
2011-10-12 19:35 . 2011-10-12 19:35 -------- d-----w- c:\program files\AVAST Software
2011-10-12 12:00 . 2011-10-28 17:54 -------- d-----w- c:\program files\trend micro
2011-10-11 20:10 . 2006-11-10 13:05 18688 ----a-w- c:\windows\system32\drivers\afc.sys
2011-10-11 20:10 . 2011-10-11 20:10 -------- d-----w- c:\program files\MSI
2011-10-11 18:21 . 2005-07-16 00:35 245408 ----a-w- c:\windows\system32\unicows.dll
2011-10-11 13:37 . 2004-12-23 15:27 27392 ----a-w- c:\windows\system32\drivers\ULCDRHlp.sys
2011-10-11 13:36 . 2009-03-11 08:53 350 ----a-w- c:\windows\system32\AF15IRTBL.bin
2011-10-08 11:55 . 2011-10-08 11:55 -------- d-----w- c:\program files\Battlelog Web Plugins
2011-10-08 11:47 . 2011-10-11 13:26 -------- d--h--w- c:\program files\Common Files\EAInstaller
2011-10-08 10:32 . 2011-10-08 10:32 -------- d-----w- c:\users\Dušan Juřička\AppData\Roaming\Origin
2011-10-08 10:32 . 2011-10-08 10:32 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\Origin
2011-10-08 10:31 . 2011-10-08 10:31 -------- d-----w- c:\program files\Origin Games
2011-10-08 10:30 . 2011-10-08 10:31 -------- d-----w- c:\program files\Origin
2011-10-01 17:32 . 2011-10-01 17:32 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-10-01 17:29 . 2011-10-01 17:29 15712 ----a-w- c:\program files\Common Files\Windows Live\.cache\a7d8de0a1cc805f06\MeshBetaRemover.exe
2011-10-01 17:19 . 2011-10-01 17:19 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\{0188D36A-DC56-4754-9263-266CA5FA4BC2}
2011-10-01 16:14 . 2011-10-01 16:14 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\{47F3E5D8-79E4-4791-944A-3DF32025F372}
2011-10-01 16:14 . 2011-10-01 16:14 -------- d-----w- c:\users\Dušan Juřička\AppData\Local\{14161C5B-D5EF-4161-90D3-EEC7501ACC3F}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-10 19:19 . 2011-03-19 13:23 139128 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-10-10 19:18 . 2011-03-19 13:23 215128 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-10-10 19:18 . 2011-03-19 13:23 215128 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-10-08 11:47 . 2011-05-13 11:38 138056 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\PnkBstrK.sys
2011-10-08 11:47 . 2011-05-13 11:38 138056 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\PnkBstrK.sys
2011-10-08 11:47 . 2011-03-19 13:23 189248 ----a-w- c:\windows\system32\PnkBstrB.ex0
2011-10-08 11:47 . 2011-03-19 13:23 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-09-25 10:38 . 2011-06-25 15:51 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-09-14 09:47 . 2011-09-14 09:47 53760 ----a-w- c:\windows\system32\OVDecode.dll
2011-09-14 09:46 . 2011-09-14 09:46 13625856 ----a-w- c:\windows\system32\amdocl.dll
2011-09-14 09:38 . 2011-09-14 09:38 37376 ----a-w- c:\windows\system32\amdoclcl.dll
2011-09-08 18:26 . 2011-09-08 18:26 8606208 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-09-08 17:39 . 2011-09-08 17:39 18534912 ----a-w- c:\windows\system32\atioglxx.dll
2011-09-08 17:34 . 2011-09-08 17:34 151552 ----a-w- c:\windows\system32\atiapfxx.exe
2011-09-08 17:34 . 2011-09-08 17:34 732672 ----a-w- c:\windows\system32\aticfx32.dll
2011-09-08 17:30 . 2011-09-08 17:30 466944 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-09-08 17:30 . 2011-09-08 17:30 401408 ----a-w- c:\windows\system32\atieclxx.exe
2011-09-08 17:29 . 2011-09-08 17:29 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2011-09-08 17:28 . 2011-09-08 17:28 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2011-09-08 17:28 . 2011-09-08 17:28 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2011-09-08 17:28 . 2011-09-08 17:28 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2011-09-08 17:28 . 2011-09-08 17:28 20992 ----a-w- c:\windows\system32\atimuixx.dll
2011-09-08 17:28 . 2011-09-08 17:28 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-09-08 17:24 . 2011-09-08 17:24 4204032 ----a-w- c:\windows\system32\atidxx32.dll
2011-09-08 17:18 . 2011-09-08 17:18 1828864 ----a-w- c:\windows\system32\atiumdmv.dll
2011-09-08 17:09 . 2011-09-08 17:09 46080 ----a-w- c:\windows\system32\aticalrt.dll
2011-09-08 17:09 . 2011-09-08 17:09 44032 ----a-w- c:\windows\system32\aticalcl.dll
2011-09-08 17:08 . 2011-09-08 17:08 4064768 ----a-w- c:\windows\system32\atiumdva.dll
2011-09-08 17:05 . 2011-09-08 17:05 7331840 ----a-w- c:\windows\system32\aticaldd.dll
2011-09-08 17:05 . 2011-09-08 17:05 4289024 ----a-w- c:\windows\system32\atiumdag.dll
2011-09-08 16:59 . 2011-07-08 02:54 52736 ----a-w- c:\windows\system32\coinst.dll
2011-09-08 16:53 . 2011-09-08 16:53 270336 ----a-w- c:\windows\system32\atiadlxx.dll
2011-09-08 16:52 . 2011-09-08 16:52 13312 ----a-w- c:\windows\system32\atiglpxx.dll
2011-09-08 16:52 . 2011-09-08 16:52 32768 ----a-w- c:\windows\system32\atigktxx.dll
2011-09-08 16:52 . 2011-09-08 16:52 248832 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-09-08 16:51 . 2011-09-08 16:51 31744 ----a-w- c:\windows\system32\atiuxpag.dll
2011-09-08 16:51 . 2011-09-08 16:51 29184 ----a-w- c:\windows\system32\atiu9pag.dll
2011-09-08 16:51 . 2011-09-08 16:51 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-09-08 16:50 . 2011-09-08 16:50 53760 ----a-w- c:\windows\system32\atimpc32.dll
2011-09-08 16:50 . 2011-09-08 16:50 53760 ----a-w- c:\windows\system32\amdpcom32.dll
2011-08-17 11:52 . 2011-08-17 11:52 837192 ----a-w- c:\windows\system32\pbsvc.exe
2011-08-12 11:06 . 2011-08-12 11:06 101720 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-08-04 18:34 . 2011-08-04 18:34 796672 ----a-w- c:\windows\GPInstall.exe
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
2011-09-30 20:08 . 2011-06-08 09:50 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{1392b8d2-5c05-419f-a8f6-b9f15a596612}"= "c:\program files\Freecorder\prxtbFree.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
2011-01-17 14:54 175912 ----a-w- c:\program files\Freecorder\prxtbFree.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-01-17 14:54 175912 ----a-w- c:\program files\ConduitEngine\prxConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{1392b8d2-5c05-419f-a8f6-b9f15a596612}"= "c:\program files\Freecorder\prxtbFree.dll" [2011-01-17 175912]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2010-08-11 2920448]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-11-02 9808488]
"VX1000"="c:\windows\vVX1000.exe" [2010-05-20 762736]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"Freecorder FLV Service"="c:\program files\Freecorder\FLVSrvc.exe" [2011-03-24 167936]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2009-02-06 170496]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-06-23 1386776]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2011-06-08 101888]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2011-08-15 1955208]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-09-08 343168]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"="start http://www.avg.cz/cz.special-uninstalla ... =10.0.1410" [?]
.
c:\users\Dušan Juřička\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\Dropbox.exe [2011-5-25 24176560]
VersionCheck.lnk - c:\users\Dušan Juřička\AppData\Roaming\FAH\VersionCheck.exe [2011-5-1 45010]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files\Stardock\ObjectDockFree\ODMenu.dll" [2010-10-04 511344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2011-06-17 07:33 66328 ----a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamePark klient 2.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\GamePark klient 2.lnk
backup=c:\windows\pss\GamePark klient 2.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GameParkKlient.lnk]
backup=c:\windows\pss\GameParkKlient.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk
backup=c:\windows\pss\TMMonitor.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Core Temp.lnk]
backup=c:\windows\pss\Core Temp.lnkStartup
.
[HKLM\~\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
backup=c:\windows\pss\Logitech . Registrace produktu.lnkStartup
.
[HKLM\~\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^StartupCPU.lnk]
path=c:\users\Dušan Juřička\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StartupCPU.lnk
backup=c:\windows\pss\StartupCPU.lnkStartup
.
[HKLM\~\startupfolder\C:^Users^Dušan Juřička^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^StartupGPU.lnk]
path=c:\users\Dušan Juřička\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StartupGPU.lnk
backup=c:\windows\pss\StartupGPU.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
2009-02-06 15:02 170496 ----a-w- c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
2010-03-13 13:54 91520 ----a-w- c:\program files\Microsoft Office\Office14\BCSSync.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clownfish]
2010-03-26 08:52 1234216 ----a-w- c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2010-01-28 13:19 3404600 ----a-w- c:\program files\Samsung\Kies\KiesTrayAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
2010-05-20 14:27 119152 ----a-w- c:\program files\Microsoft LifeCam\LifeExp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
2010-03-26 08:52 1234216 ----a-w- c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Registry Repair Wizard Scheduler]
2009-01-23 23:49 1052928 ----a-w- c:\program files\SmartPCTools\Registry Repair Wizard\RCHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2010-11-20 12:17 1174016 ----a-w- c:\program files\Windows Sidebar\sidebar.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler]
2010-06-14 14:10 153672 ----a-w- c:\program files\Logitech\Gaming Software\LWEMon.exe
.
R1 CXAVSAUD;Prolink 2388x Audio Capture;c:\windows\system32\DRIVERS\pvavsaud.sys [2005-10-25 11008]
R2 Aladdin SQL Server;Aladdin SQL Server;c:\program files\Aladdin\Aladdin SQL Server\AladdinSQL.exe [2011-10-18 136192]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-23 136176]
R2 JMB36X;JMB36X;c:\windows\System32\XSrvSetup.exe [2009-08-06 65536]
R2 KMService;KMService;c:\windows\system32\srvany.exe [2011-03-23 8192]
R3 ALSysIO;ALSysIO;c:\users\DUANJU~1\AppData\Local\Temp\ALSysIO.sys [x]
R3 CFcatchme;CFcatchme;c:\users\DUANJU~1\AppData\Local\Temp\CFcatchme.sys [x]
R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2011-03-22 2421384]
R3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
R3 cpuz130;cpuz130;c:\users\DUANJU~1\AppData\Local\Temp\cpuz130\cpuz_x32.sys [x]
R3 cpuz134;cpuz134;c:\users\DUANJU~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [2011-03-01 130976]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-23 136176]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 netr73;RT73 USB - ovladač karty pro bezdrátovou síť LAN pro systém Windows Vista;c:\windows\system32\DRIVERS\netr73.sys [2009-07-13 545792]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 ss_bserd;SAMSUNG USB Mobile Logging Driver;c:\windows\system32\DRIVERS\ss_bserd.sys [2009-09-19 100224]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-03-18 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-03-20 218688]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S1 wfcxacap;WinFast TV PCI Audio Capture Driver;c:\windows\system32\DRIVERS\wfcxacap.sys [2007-09-19 9856]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-09-08 176128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-09-06 54616]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [2011-01-19 22504]
S2 dgdersvc;Device Error Recovery Service;c:\windows\system32\dgdersvc.exe [2009-12-22 95568]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-12-22 217088]
S2 GS In-Game Service;GS In-Game Service;c:\program files\GameTracker\GSInGameService.exe [2011-04-29 1677096]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-03-25 490280]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-06-01 2337144]
S2 wfcxatun;WinFast TV Analog Tuner Driver;c:\windows\system32\drivers\wfcxatun.sys [2007-09-19 31744]
S2 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [2007-09-19 167040]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2011-09-08 8606208]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2011-09-08 248832]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2009-12-22 18136]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-12-22 36640]
S3 HideMyIpSRV;HideMyIpSRV;c:\program files\Hide My IP\HideMyIpSrv.exe [2011-06-03 3249512]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-08-31 22216]
S3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys [2007-09-19 21248]
S3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [2007-09-19 15872]
S3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys [2007-09-19 10496]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2010-02-15 322336]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - FSUSBEXDISK
.
Obsah adresáře 'Naplánované úlohy'
.
2011-10-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-23 18:20]
.
2011-10-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-23 18:20]
.
.
------- Doplňkový sken -------
.
uStart Page = About:Blank
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
LSP: c:\windows\system32\HMIPCore.dll
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Dušan Juřička\AppData\Roaming\Mozilla\Firefox\Profiles\651kmyw3.default\
FF - prefs.js: browser.search.selectedEngine - Winamp Search
FF - prefs.js: browser.startup.homepage - http://www.seznam.cz
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{980A182F-E0A2-4A40-94C1-AE0C1235902E} - c:\program files\Pando Networks\Media Booster\uninst.exe
.
.
Binary file temp00 matches
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(5864)
c:\users\Dušan Juřička\AppData\Local\FLVService\lib\FLVSrvLib.dll
c:\users\Dušan Juřička\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
c:\program files\Stardock\ObjectDockFree\ODMenu.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Microsoft LifeCam\MSCamS32.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Acronis\DiskDirector\OSS\reinstall_svc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\users\Duc:\windows\system32\SearchIndexer.exe
c:\windows\system32\WUDFHost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
c:\windows\system32\DllHost.exe
.
**************************************************************************
.
Celkový čas: 2011-10-29 10:23:24 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-10-29 08:23
ComboFix2.txt 2011-10-28 21:19
.
Před spuštěním: Volných bajtů: 11 764 670 464
Po spuštění: Volných bajtů: 11 424 833 536
.
- - End Of File - - 16B838C0B638AF3773674BEC4460309B
Nahr nˇ probŘhlo ŁspŘçnŘ

Re: BSOD 0x0000008E

Napsal: 29 říj 2011 10:46
od Rudy
Log již vypadá čistý.

Re: BSOD 0x0000008E

Napsal: 29 říj 2011 10:51
od dusanjuricka
Tak jsem to ještě testoval a problém je stále stejný :-(

Re: BSOD 0x0000008E

Napsal: 29 říj 2011 10:55
od Rudy
Ještě zkusíme test MBR: http://www2.gmer.net/mbr/mbr.exe . Utilitu stáhněte a spusťte. Vytvoří krátký log, který sem vložte.

Re: BSOD 0x0000008E

Napsal: 29 říj 2011 11:16
od dusanjuricka
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.1.7601 Disk: SAMSUNG_HD321KJ rev.CP100-10 -> Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T0L0-0

device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user & kernel MBR OK
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz