VIRY.CZ

log z rssit - prosim o radu !

Logfile of random's system information tool 1.09 (written by random/random)
Run by Branislav at 2011-11-24 18:38:30
Microsoft Windows 7 Ultimate
System drive C: has 231 GB (82%) free of 280 GB
Total RAM: 3327 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:38:36, on 24. 11. 2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Branislav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Windows\system32\rundll32.exe
C:\Users\Branislav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Vuze\Azureus.exe
C:\Users\Branislav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Branislav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Branislav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Branislav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Branislav\Downloads\RSIT.exe
C:\Program Files\trend micro\Branislav.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Branislav\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

--
End of file - 5374 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4279207054-357169244-4077150064-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4279207054-357169244-4077150064-1001UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Branislav\AppData\Roaming\Mozilla\Firefox\Profiles\wai8t18q.default

prefs.js - "browser.startup.homepage" - "http://home.sweetim.com"

"smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Branislav\AppData\Roaming\Mozilla\Firefox\Profiles\wai8t18q.default\extensions\
{EEE6C361-6118-11DC-9C72-001320C79847}

C:\Users\Branislav\AppData\Roaming\Mozilla\Firefox\Profiles\wai8t18q.default\searchplugins\
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-09-08 343168]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2009-11-18 54576]
""= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Branislav\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-10 136176]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
"VIDC.FPS1"=frapsvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-11-24 18:38:30 ----D---- C:\rsit
2011-11-24 18:38:30 ----D---- C:\Program Files\trend micro
2011-11-14 08:08:31 ----D---- C:\Program Files\Google
2011-11-08 12:45:32 ----D---- C:\Users\Branislav\AppData\Roaming\Electronic Arts
2011-11-01 20:50:13 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-11-01 20:50:13 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-11-01 20:50:13 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-11-01 20:50:13 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-11-01 20:50:13 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-11-01 20:50:13 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-11-01 20:50:12 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-11-01 20:50:12 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-11-01 20:50:12 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-11-01 20:50:12 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-11-01 20:50:12 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-11-01 20:50:11 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-11-01 20:50:11 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-11-01 20:50:11 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-11-01 20:50:11 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-11-01 20:50:10 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-11-01 20:50:10 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-11-01 20:50:10 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-11-01 20:50:09 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-11-01 20:50:09 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-11-01 20:50:09 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-11-01 20:50:09 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-11-01 20:50:08 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-11-01 20:50:08 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-11-01 20:50:08 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-11-01 20:50:08 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-11-01 20:50:07 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-11-01 20:50:07 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-11-01 20:50:07 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-11-01 20:50:07 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-11-01 20:50:07 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-11-01 20:50:06 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-11-01 20:50:06 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-11-01 20:50:06 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-11-01 20:50:06 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-11-01 20:50:06 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-11-01 20:50:05 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-11-01 20:50:05 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-11-01 20:50:05 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-11-01 20:50:05 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-11-01 20:50:05 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-11-01 20:50:05 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-11-01 20:50:05 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-11-01 20:50:04 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-11-01 20:50:04 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-11-01 20:50:04 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-11-01 20:50:04 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-11-01 20:50:04 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-11-01 20:50:03 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-11-01 20:50:03 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-11-01 20:50:03 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-11-01 20:50:03 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-11-01 20:50:02 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-11-01 20:50:02 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-11-01 20:50:02 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-11-01 20:50:01 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-11-01 20:50:01 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-11-01 20:50:01 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-11-01 20:50:01 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-11-01 20:50:00 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-11-01 20:50:00 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-11-01 20:50:00 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-11-01 20:50:00 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-11-01 20:50:00 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-11-01 20:49:59 ----A---- C:\Windows\system32\xinput1_3.dll
2011-11-01 20:49:59 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-11-01 20:49:59 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-11-01 20:49:59 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-11-01 20:49:59 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-11-01 20:49:58 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-11-01 20:49:58 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-11-01 20:49:58 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-11-01 20:49:58 ----A---- C:\Windows\system32\d3dx10.dll
2011-11-01 20:49:57 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-11-01 20:49:57 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-11-01 20:49:57 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-11-01 20:49:57 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-11-01 20:49:56 ----A---- C:\Windows\system32\xinput1_2.dll
2011-11-01 20:49:56 ----A---- C:\Windows\system32\xinput1_1.dll
2011-11-01 20:49:56 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-11-01 20:49:56 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-11-01 20:49:56 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-11-01 20:49:52 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-11-01 20:49:51 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-11-01 20:49:51 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-11-01 20:49:51 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-11-01 20:49:51 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-11-01 20:49:50 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-11-01 20:49:50 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-11-01 20:49:50 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-11-01 20:49:49 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-10-25 12:01:23 ----D---- C:\ProgramData\EA Core
2011-10-25 11:53:33 ----HD---- C:\Program Files\Common Files\EAInstaller

======List of files/folders modified in the last 1 month======

2011-11-24 18:38:36 ----D---- C:\Windows\Prefetch
2011-11-24 18:38:32 ----D---- C:\Windows\Temp
2011-11-24 18:38:30 ----RD---- C:\Program Files
2011-11-24 18:35:32 ----D---- C:\Users\Branislav\AppData\Roaming\Azureus
2011-11-24 18:34:20 ----D---- C:\Windows\System32
2011-11-24 18:34:20 ----D---- C:\Windows\inf
2011-11-24 18:34:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-11-24 18:28:22 ----D---- C:\Windows\Minidump
2011-11-24 18:28:15 ----HD---- C:\ProgramData
2011-11-24 18:28:15 ----D---- C:\Windows
2011-11-24 18:26:39 ----D---- C:\Windows\system32\drivers
2011-11-24 18:25:11 ----SHD---- C:\System Volume Information
2011-11-22 14:58:44 ----D---- C:\Windows\system32\LogFiles
2011-11-20 19:42:12 ----D---- C:\Windows\system32\catroot2
2011-11-20 15:06:25 ----D---- C:\Windows\system32\config
2011-11-18 23:17:04 ----D---- C:\Users\Branislav\AppData\Roaming\Skype
2011-11-18 20:04:27 ----SHD---- C:\Windows\Installer
2011-11-18 20:04:26 ----HD---- C:\Config.Msi
2011-11-18 20:04:26 ----D---- C:\Windows\system32\Tasks
2011-11-18 20:04:25 ----RD---- C:\Program Files\Skype
2011-11-14 08:08:34 ----D---- C:\Windows\Tasks
2011-11-11 14:16:28 ----D---- C:\Users\Branislav\AppData\Roaming\Ahead
2011-11-10 10:22:31 ----D---- C:\Program Files\Origin
2011-11-09 21:38:19 ----D---- C:\Windows\system32\catroot
2011-11-09 21:38:18 ----D---- C:\Windows\winsxs
2011-11-09 10:27:40 ----SD---- C:\ProgramData\Microsoft
2011-11-09 10:27:39 ----D---- C:\Windows\system32\drivers\UMDF
2011-11-03 17:57:32 ----RSD---- C:\Windows\assembly
2011-11-02 08:56:01 ----D---- C:\Program Files\Origin Games
2011-10-31 12:26:16 ----D---- C:\Users\Branislav\AppData\Roaming\HpUpdate
2011-10-25 12:01:25 ----D---- C:\ProgramData\Electronic Arts
2011-10-25 12:00:17 ----D---- C:\ProgramData\Origin
2011-10-25 11:53:33 ----D---- C:\Program Files\Common Files
2011-10-25 11:52:51 ----D---- C:\Windows\Logs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-09-08 8606208]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-09-08 248832]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2011-06-06 211984]
R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-14 16384]
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-09-08 176128]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 TeamViewer6;TeamViewer 6; C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-30 2358656]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-11-14 136176]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-11-14 136176]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

Dobrý večer
zavirované to nebude, ale pro jistotu udělejte sken

Malwarebytes' Anti-Malware

• Stáhneme,nainstalujeme a spustíme(pokud si nevíte rady jak,klikněte ZDE)
• Vybereme Úplná kontrola a klikneme na tlačítko Prohledat
• Program provede kontrolu počítače a na konci se vám objeví hláska,že bylo skenování dokončeno,tak potvrdíme tlačítkem OK
• Objeví se vám log,který mi sem vložte
• NIC NEMAZAT!!Program mívá občas falešné detekce,takže mazat budeme až po konzultaci

Problém bude způsobovat dle mého názoru něco jiného než havěť. Pojďme to zjistit..Předpokládám, že se vám před restartem objevuje modrá obrazovka smrti


Jděte do složky C:\Windows\Minidump, pokud zde najdete soubory,tak je zabalte( třeba programem winrar) a nahrajte na http://www.leteckaposta.cz , sem mi vložte odkaz na stažení

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Verzia databázy: 8234

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

24. 11. 2011 21:25:57
mbam-log-2011-11-24 (21-25-57).txt

Typ kontroly: Úplná kontrola (C:\|D:\|)
Objektov kontrolovaných: 237227
Uplynutý čas: 15 min, 41 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)
no mne sa to nejak nezda , zeby bol cisty, velmi caste restartovanie systemu a spomalenie celkove


Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
(Škodlivé položky neboli zistené)

Infikované súbory:
(Škodlivé položky neboli zistené)

no mne sa to nejak nezda, velmi caste restartovanie je tu stale a popritom spomalenie systemu

Restartování bude způsobovat něco jiného než havěť, jak jsem si myslel hned na začátku.. proto chci obsah složky Minidump

sorry , ale netusim, kde by ta zlozka mala byt

uz som ho nasiel, su tam nejake dva DMP subory . co s tym ?

Psal jsem vám to přesně

Jděte do složky C:\Windows\Minidump, pokud zde najdete soubory,tak je zabalte( třeba programem winrar) a nahrajte na http://www.leteckaposta.cz , sem mi vložte odkaz na stažení

problem je v tom, ze sa to neda zabalit - okamzite mi ukazuje chybu a neda sa to ani len ako samostatne dva subory ulozit na server, takze posielam screenshoty po otvoreni tychto dvoch programov
http://leteckaposta.cz/673329231

*zloziek

Potřeboval bych ty soubory, nestihnete je vložit třeba na flash disk a nahrát z jiného pc?