VIRY.CZ

dobrý den,
chtěl bych požádat o pomoc laikovi, co s vygenerovaným výpisem z programu RootkitRevealer , kde byl i odkaz na toto forum http://www.rootkit.cz/go.php?p=rootkit&t=aplikace&id=6.

Na jiném fóru řeším problém s nefunkčním internetem přes LAN připojení, wifi je funkční. Bylo mi řečeno, že samotnou síťovkou to být nemusí, že by bylo dobré najít zatím nenalezenou havěť v počítači, takže jsem zkusil stáhnout výše zmíněný program a níže bych si dovolil vykopírovat hlášení. Notebook byl v servisu kvůli grafické kartě, přitom prý byl i vyčištěn a od té doby nebyl používán, protože nebylo připojení k netu. Při opětovné návštěvě v servisu kvůli internetu problém s LAN připojením nebyl odstraněn.

Jinak popis mého problému je zde: http://forum.zive.cz/viewtopic.php?f=19 ... a&start=15

děkuji předem za radu a pomoc

HKU\S-1-5-21-925301019-4004234733-1058353493-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\URL 30.3.2009 22:11 73 bytes Data mismatch between Windows API and raw hive data.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\Heartbeat 13.1.2012 10:03 8 bytes Data mismatch between Windows API and raw hive data.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN 8.6.2011 16:55 0 bytes Security mismatch.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\CertMapping 8.6.2011 16:55 0 bytes Security mismatch.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Client 2.11.2006 13:54 0 bytes Security mismatch.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Listener 2.11.2006 13:54 0 bytes Security mismatch.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin 8.6.2011 16:55 0 bytes Security mismatch.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Service 2.11.2006 13:54 0 bytes Security mismatch.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\WinRS 30.11.2009 3:16 0 bytes Security mismatch.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\WinRS\CustomRemoteShell 30.11.2009 3:16 0 bytes Security mismatch.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009 2.11.2006 11:33 0 bytes Security mismatch.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C041448-C69A-4D8B-A774-4F3948997407}\DynamicInfo 13.1.2012 10:03 28 bytes Data mismatch between Windows API and raw hive data.
HKLM\SYSTEM\ControlSet001\Control\StillImage\Events\STIProxyEvent\{0D510756-F788-4C63-8925-C9126939E4B6}\Icon 30.3.2009 22:02 45 bytes Data mismatch between Windows API and raw hive data.
HKLM\SYSTEM\ControlSet003\Control\StillImage\Events\STIProxyEvent\{0D510756-F788-4C63-8925-C9126939E4B6}\Icon 30.3.2009 22:02 45 bytes Data mismatch between Windows API and raw hive data.

vitaj na fore,
na prvotne posudenie vloz ako kazdy iny uzivatel log RSIT

děkuji za přivítání,
jsem jen běžný uživatel smrtelník a chybující, tak prosím o schovívavost, možná tu nemám vůbec co dělat na tak odborné půdě, ale to bezradnost žene jedince k takovým činům
stáhnul jsem si ten prográmek, provedl úkon, ale jen chci uvést, že okno zůstalo dlouho otevřené a nakonec jsem je musel ukončit násilím. Nicméně soubor jsem na disku našel, takže jej přikládám zde. Jela mi na pozadí kontrola v MS Esentials, tak jestli to třebas nebylo tím....

smekám před každým, kdo se v tomhle umí vyznat

Logfile of random's system information tool 1.09 (written by random/random)
Run by Zdeněk at 2012-01-13 12:08:55
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 15 GB (10%) free of 145 GB
Total RAM: 2046 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:09:14, on 13.1.2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Canon\SolutionMenu\CNSLMAIN.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Windows\system32\conime.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe
C:\WINDOWS\System32\cmd.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\System32\cmd.exe
C:\Windows\system32\rundll32.exe
C:\WINDOWS\System32\cmd.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\Crawler\CToolbar.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Laptop\Downloads\RSIT.exe
C:\Program Files\trend micro\Zdeněk.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: DVDVideoSoftTB - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\listicka.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files\Seznam.cz\toolbar\toolbar.dll
O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Anti Trojan Elite] C:\Program Files\Anti Trojan Elite\TJEnder.exe :NO
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-925301019-4004234733-1058353493-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Laptop')
O4 - S-1-5-21-925301019-4004234733-1058353493-1000 Startup: DetectTray.lnk = C:\Program Files\Genius\TVGo DVB-T02PRO\DetectTray.exe (User 'Laptop')
O4 - S-1-5-21-925301019-4004234733-1058353493-1000 Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Laptop')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://oas.support.microsoft.com/ActiveX/MSDcode.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20614.www2.hp.com/ediags/gmn2/i ... ction2.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: CT - Sysinternals - www.sysinternals.com - C:\Users\ZDENK~1\AppData\Local\Temp\CT.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MSFICLCFKU - Sysinternals - www.sysinternals.com - C:\Users\ZDENK~1\AppData\Local\Temp\MSFICLCFKU.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 12606 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\ctbr.dll [2010-12-11 1245320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2010-07-28 1267024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-06-22 386264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2009-11-25 202080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
DVDVideoSoftTB Toolbar - C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2007-08-20 2217856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar BHO - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll [2010-09-22 612616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files\Seznam.cz\listicka.dll [2011-03-15 2201600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2007-08-20 2217856]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-11-21 1054520]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2009-11-25 1496408]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2010-07-28 1267024]
{872b5b88-9db5-4310-bdd0-ac189557e5f5} - DVDVideoSoftTB Toolbar - C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll [2011-01-17 175912]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\ctbr.dll [2010-12-11 1245320]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Program Files\Seznam.cz\toolbar\toolbar.dll [2011-03-10 183808]
{8dcb7100-df86-4384-8842-8fa844297b3f} - @C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll [2010-09-22 612616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2007-04-24 176128]
""= []
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-27 1983816]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-11-24 323640]
"WirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2009-07-23 498744]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-10-03 13826664]
"Anti Trojan Elite"=C:\Program Files\Anti Trojan Elite\TJEnder.exe :NO []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2007-04-19 484904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\(default)]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-09-07 37296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast5]
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NapsterShell]
C:\Program Files\Napster\napster.exe /systray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-05-27 1721640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
c:\program files\real\realplayer\Update\realsched.exe [2011-06-22 273544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avcapture.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\detecttray.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=iyvu9_32.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"msacm.l3codecp"=

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-01-13 12:08:56 ----D---- C:\Program Files\trend micro
2012-01-13 12:08:55 ----D---- C:\rsit
2012-01-13 09:54:12 ----D---- C:\Users\Zdeněk\AppData\Roaming\TuneUp Software
2012-01-13 03:11:00 ----D---- C:\Users\Zdeněk\AppData\Roaming\Identities
2012-01-13 03:10:26 ----SD---- C:\Users\Zdeněk\AppData\Roaming\Microsoft
2012-01-13 03:10:26 ----D---- C:\Users\Zdeněk\AppData\Roaming\Media Center Programs
2012-01-13 03:10:26 ----D---- C:\Users\Zdeněk\AppData\Roaming\hpqLog
2012-01-12 03:10:03 ----D---- C:\Program Files\Dr. Hardware 2009 english
2012-01-12 02:36:36 ----D---- C:\Program Files\Anti Trojan Elite
2012-01-12 02:02:03 ----D---- C:\Program Files\XP TCPIP Repair
2012-01-12 01:31:03 ----D---- C:\Program Files\CCleaner
2012-01-11 20:02:51 ----D---- C:\6a2af3c2b94283edd902f8
2012-01-11 18:24:51 ----D---- C:\Windows\cs
2012-01-11 18:06:32 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-01-11 18:06:32 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-01-11 18:06:31 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-01-11 18:04:25 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-01-11 14:36:46 ----A---- C:\Windows\system32\TURegOpt.exe
2012-01-11 14:36:45 ----A---- C:\Windows\system32\authuitu.dll
2012-01-11 14:35:24 ----D---- C:\Program Files\TuneUp Utilities 2012
2012-01-11 14:33:45 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2012-01-11 14:32:54 ----D---- C:\ProgramData\TuneUp Software
2012-01-11 10:43:09 ----SHD---- C:\Config.Msi
2012-01-11 00:35:23 ----A---- C:\Windows\system32\winmm.dll
2012-01-11 00:35:23 ----A---- C:\Windows\system32\mciseq.dll
2012-01-11 00:35:20 ----A---- C:\Windows\system32\ntdll.dll
2012-01-11 00:35:19 ----A---- C:\Windows\system32\winsrv.dll
2012-01-11 00:35:19 ----A---- C:\Windows\system32\packager.dll
2012-01-11 00:35:17 ----A---- C:\Windows\system32\quartz.dll
2012-01-11 00:35:17 ----A---- C:\Windows\system32\qdvd.dll
2012-01-11 00:35:05 ----A---- C:\Windows\system32\winhttp.dll
2012-01-11 00:35:05 ----A---- C:\Windows\system32\schannel.dll
2012-01-11 00:35:05 ----A---- C:\Windows\system32\lsasrv.dll
2012-01-11 00:35:05 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-01-11 00:35:04 ----A---- C:\Windows\system32\secur32.dll
2012-01-11 00:35:04 ----A---- C:\Windows\system32\lsass.exe
2012-01-10 23:29:00 ----A---- C:\CSP.DAT
2012-01-09 13:22:05 ----D---- C:\Program Files\Lavalys
2012-01-08 02:37:12 ----A---- C:\ProgramData\HPWALog.txt
2012-01-08 02:30:08 ----D---- C:\ProgramData\{E91883C8-8CDC-46A4-A45F-CB40EB82ED60}
2012-01-08 02:16:29 ----D---- C:\Windows\system32\nn-NO
2012-01-08 02:16:28 ----A---- C:\Windows\system32\S64CPA.exe
2012-01-08 02:16:28 ----A---- C:\Windows\system32\athihvui.dll
2012-01-08 02:16:28 ----A---- C:\Windows\system32\athihvs.dll
2012-01-08 02:15:15 ----D---- C:\Program Files\Atheros
2012-01-08 02:15:14 ----D---- C:\Program Files\Cisco
2012-01-08 02:14:55 ----D---- C:\ProgramData\Atheros
2012-01-08 00:09:39 ----A---- C:\ProgramData\nvModes.dat
2012-01-07 23:36:32 ----D---- C:\Windows\system32\no-NO
2012-01-07 23:36:26 ----A---- C:\Windows\system32\drivers\BCMWL6.SYS
2012-01-07 23:36:26 ----A---- C:\Windows\system32\bcmwlrc.dll
2012-01-07 23:36:26 ----A---- C:\Windows\system32\bcmwlcoi.dll
2012-01-07 23:36:26 ----A---- C:\Windows\system32\bcmihvui.dll
2012-01-07 23:36:26 ----A---- C:\Windows\system32\bcmihvsrv.dll
2012-01-07 23:36:25 ----D---- C:\Program Files\Broadcom
2012-01-07 23:28:58 ----A---- C:\Windows\system32\nvusmu.exe
2012-01-07 23:28:54 ----A---- C:\Windows\system32\nvusmb.exe
2012-01-04 18:11:51 ----ASH---- C:\hiberfil.sys
2011-12-16 20:14:38 ----A---- C:\Windows\system32\mshtmled.dll
2011-12-16 20:14:37 ----A---- C:\Windows\system32\iertutil.dll
2011-12-16 20:14:32 ----A---- C:\Windows\system32\wininet.dll
2011-12-16 20:14:32 ----A---- C:\Windows\system32\url.dll
2011-12-16 20:14:31 ----A---- C:\Windows\system32\jscript.dll
2011-12-16 20:14:31 ----A---- C:\Windows\system32\ieui.dll
2011-12-16 20:14:30 ----A---- C:\Windows\system32\jscript9.dll
2011-12-16 20:14:28 ----A---- C:\Windows\system32\jsproxy.dll
2011-12-16 20:14:26 ----A---- C:\Windows\system32\urlmon.dll
2011-12-16 20:14:25 ----A---- C:\Windows\system32\mshtml.dll
2011-12-16 20:14:24 ----A---- C:\Windows\system32\ieframe.dll
2011-12-16 20:06:07 ----A---- C:\Windows\system32\win32k.sys
2011-12-16 20:06:04 ----A---- C:\Windows\system32\tzres.dll
2011-12-16 20:05:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-12-16 20:05:58 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-12-16 20:05:42 ----A---- C:\Windows\system32\EncDec.dll
2011-12-16 20:05:42 ----A---- C:\Windows\system32\csrsrv.dll

======List of files/folders modified in the last 1 month======

2012-01-13 12:08:56 ----RD---- C:\Program Files
2012-01-13 12:08:23 ----D---- C:\Windows\Temp
2012-01-13 10:13:08 ----D---- C:\Neuer Ordner
2012-01-13 10:12:35 ----D---- C:\Windows\System32
2012-01-13 10:10:31 ----D---- C:\Windows\system32\drivers
2012-01-13 10:02:33 ----D---- C:\Windows\Prefetch
2012-01-13 09:44:04 ----D---- C:\Program Files\Crawler
2012-01-13 09:42:10 ----D---- C:\Windows\system32\Tasks
2012-01-13 03:26:28 ----D---- C:\WINDOWS
2012-01-13 03:26:25 ----HD---- C:\ProgramData
2012-01-13 03:11:18 ----SHD---- C:\$RECYCLE.BIN
2012-01-13 03:10:25 ----RD---- C:\Users
2012-01-13 01:50:57 ----D---- C:\Windows\inf
2012-01-13 01:50:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-01-12 23:42:45 ----SHD---- C:\System Volume Information
2012-01-12 22:51:45 ----D---- C:\Windows\system32\catroot2
2012-01-12 19:31:07 ----HD---- C:\Windows\system32\GroupPolicy
2012-01-12 16:44:54 ----D---- C:\Program Files\SpeedFan
2012-01-12 11:25:02 ----D---- C:\Program Files\MyDefrag v4.3.1
2012-01-12 00:05:31 ----D---- C:\Windows\system32\drivers\etc
2012-01-11 23:53:04 ----D---- C:\Windows\system32\catroot
2012-01-11 22:19:06 ----ASH---- C:\Program Files\desktop.ini
2012-01-11 18:25:47 ----SHD---- C:\Windows\Installer
2012-01-11 14:45:57 ----D---- C:\Windows\Tasks
2012-01-11 10:44:07 ----D---- C:\ProgramData\NVIDIA
2012-01-11 00:55:58 ----D---- C:\Windows\winsxs
2012-01-11 00:43:01 ----D---- C:\Windows\ehome
2012-01-11 00:43:01 ----D---- C:\Program Files\Windows Mail
2012-01-11 00:36:47 ----A---- C:\Windows\system32\mrt.exe
2012-01-10 22:49:18 ----D---- C:\Windows\system32\Msdtc
2012-01-10 22:48:12 ----D---- C:\Windows\system32\wbem
2012-01-10 22:47:17 ----D---- C:\Windows\system32\config
2012-01-10 22:46:54 ----D---- C:\Windows\system32\spool
2012-01-10 22:46:54 ----D---- C:\Windows\system32\CodeIntegrity
2012-01-10 22:46:52 ----D---- C:\ProgramData\Spybot - Search & Destroy
2012-01-10 22:46:51 ----D---- C:\Windows\registration
2012-01-09 16:34:56 ----D---- C:\Windows\SMINST
2012-01-09 13:39:15 ----D---- C:\SwSetup
2012-01-08 02:33:12 ----D---- C:\ProgramData\Hewlett-Packard
2012-01-08 02:32:44 ----HD---- C:\Program Files\InstallShield Installation Information
2012-01-08 02:32:24 ----RSD---- C:\Windows\assembly
2012-01-08 02:32:04 ----D---- C:\Windows\Help
2012-01-08 02:31:06 ----D---- C:\Program Files\Hewlett-Packard
2012-01-08 02:16:29 ----D---- C:\Windows\system32\zh-TW
2012-01-08 02:16:29 ----D---- C:\Windows\system32\zh-CN
2012-01-08 02:16:29 ----D---- C:\Windows\system32\tr-TR
2012-01-08 02:16:29 ----D---- C:\Windows\system32\sv-SE
2012-01-08 02:16:29 ----D---- C:\Windows\system32\ru-RU
2012-01-08 02:16:29 ----D---- C:\Windows\system32\pt-PT
2012-01-08 02:16:29 ----D---- C:\Windows\system32\pl-PL
2012-01-08 02:16:29 ----D---- C:\Windows\system32\nl-NL
2012-01-08 02:16:29 ----D---- C:\Windows\system32\ko-KR
2012-01-08 02:16:29 ----D---- C:\Windows\system32\ja-JP
2012-01-08 02:16:29 ----D---- C:\Windows\system32\it-IT
2012-01-08 02:16:29 ----D---- C:\Windows\system32\hu-HU
2012-01-08 02:16:28 ----D---- C:\Windows\system32\fr-FR
2012-01-08 02:16:28 ----D---- C:\Windows\system32\fi-FI
2012-01-08 02:16:28 ----D---- C:\Windows\system32\es-ES
2012-01-08 02:16:28 ----D---- C:\Windows\system32\en-US
2012-01-08 02:16:28 ----D---- C:\Windows\system32\el-GR
2012-01-08 02:16:28 ----D---- C:\Windows\system32\de-DE
2012-01-08 02:16:28 ----D---- C:\Windows\system32\da-DK
2012-01-08 02:16:28 ----D---- C:\Windows\system32\cs-CZ
2012-01-07 23:36:34 ----D---- C:\Windows\system32\th-TH
2012-01-07 23:36:33 ----D---- C:\Windows\system32\sl-SI
2012-01-07 23:36:33 ----D---- C:\Windows\system32\sk-SK
2012-01-07 23:36:32 ----D---- C:\Windows\system32\ro-RO
2012-01-07 23:36:31 ----D---- C:\Windows\system32\lv-LV
2012-01-07 23:36:31 ----D---- C:\Windows\system32\lt-LT
2012-01-07 23:36:30 ----D---- C:\Windows\system32\hr-HR
2012-01-07 23:36:29 ----D---- C:\Windows\system32\et-EE
2012-01-07 23:36:27 ----D---- C:\Windows\system32\bg-BG
2012-01-07 16:10:13 ----SD---- C:\Windows\Downloaded Program Files
2012-01-07 15:38:37 ----D---- C:\Windows\Downloaded Installations
2012-01-06 22:16:34 ----D---- C:\ProgramData\Alwil Software
2012-01-04 18:38:28 ----D---- C:\Program Files\OpenOffice.org 3
2012-01-04 18:10:16 ----A---- C:\Windows\ntbtlog.txt
2011-12-31 23:33:38 ----D---- C:\ProgramData\DivX
2011-12-31 23:33:37 ----D---- C:\Program Files\DivX
2011-12-31 23:32:12 ----D---- C:\Program Files\Common Files\DivX Shared
2011-12-31 23:11:08 ----D---- C:\Windows\Microsoft.NET
2011-12-23 20:36:13 ----D---- C:\Windows\Minidump
2011-12-16 20:29:27 ----D---- C:\Windows\system32\migration
2011-12-16 20:29:27 ----D---- C:\Program Files\Internet Explorer
2011-12-16 20:20:10 ----D---- C:\ProgramData\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2008-11-20 43872]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 MpKsld147deac;MpKsld147deac; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4DCB492B-CAF0-4A1C-9424-61DB0CA43433}\MpKsld147deac.sys [2012-01-13 29904]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-01-23 37376]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2012-01-07 1331192]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-03-03 188416]
R3 HBtnKey;HP Hotkey Device; C:\Windows\system32\DRIVERS\cpqbttn.sys [2010-02-25 14904]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2007-06-20 984064]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2007-06-20 208896]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 65024]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-03-07 1059112]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-10-03 9905096]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2007-02-17 12032]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-10 89088]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-05-27 245936]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys [2011-12-12 10064]
R3 usbvideo;USB-Videogerät (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-18 134016]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2007-06-20 660480]
S1 MpKsl03a4c867;MpKsl03a4c867; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{0301A70C-3C0D-4C85-ACEE-85B0F441A855}\MpKsl03a4c867.sys []
S1 MpKsl0690875f;MpKsl0690875f; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F48159B5-9F49-47F1-A24C-9EDCA34C9AEA}\MpKsl0690875f.sys []
S1 MpKsl08b0ada6;MpKsl08b0ada6; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1135952E-4DBD-4BCD-8CC6-A726406F4F27}\MpKsl08b0ada6.sys []
S1 MpKsl0ca0bb7a;MpKsl0ca0bb7a; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{13E91FDB-C351-4948-9FB3-85F13DCBE996}\MpKsl0ca0bb7a.sys []
S1 MpKsl1c8149ac;MpKsl1c8149ac; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{925A668C-2303-4FD7-AEFC-CF48C9964EE2}\MpKsl1c8149ac.sys []
S1 MpKsl2531e0d5;MpKsl2531e0d5; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{925A668C-2303-4FD7-AEFC-CF48C9964EE2}\MpKsl2531e0d5.sys []
S1 MpKsl25c2cfca;MpKsl25c2cfca; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F321798D-2098-4D7F-8F32-A89941A6951E}\MpKsl25c2cfca.sys []
S1 MpKsl3010c754;MpKsl3010c754; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{310FD72D-F184-4311-8376-D2AF77B53159}\MpKsl3010c754.sys []
S1 MpKsl308845fe;MpKsl308845fe; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{EF9FB6FB-77C7-4112-B1AF-A0BD80B3D768}\MpKsl308845fe.sys []
S1 MpKsl3508e3bf;MpKsl3508e3bf; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AC1B7028-F5F5-4737-98C3-7191C1E7C0BD}\MpKsl3508e3bf.sys []
S1 MpKsl39f432b3;MpKsl39f432b3; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1135952E-4DBD-4BCD-8CC6-A726406F4F27}\MpKsl39f432b3.sys []
S1 MpKsl3bf8817d;MpKsl3bf8817d; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{925A668C-2303-4FD7-AEFC-CF48C9964EE2}\MpKsl3bf8817d.sys []
S1 MpKsl3e9dcf3b;MpKsl3e9dcf3b; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FA365E9D-ECBC-4FD5-B9DC-7AD4138F7CAB}\MpKsl3e9dcf3b.sys []
S1 MpKsl41024933;MpKsl41024933; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AC1B7028-F5F5-4737-98C3-7191C1E7C0BD}\MpKsl41024933.sys []
S1 MpKsl42860838;MpKsl42860838; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E6652FC2-1124-44E5-A552-F89C064E8180}\MpKsl42860838.sys []
S1 MpKsl4b2cbf2f;MpKsl4b2cbf2f; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{592C888F-DB24-483A-A608-32712E0A5085}\MpKsl4b2cbf2f.sys []
S1 MpKsl4e7863e5;MpKsl4e7863e5; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1135952E-4DBD-4BCD-8CC6-A726406F4F27}\MpKsl4e7863e5.sys []
S1 MpKsl4ee0c27d;MpKsl4ee0c27d; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6CA35D20-FACE-45C7-9792-97A908D81053}\MpKsl4ee0c27d.sys []
S1 MpKsl4f75c9a1;MpKsl4f75c9a1; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{400B7B5F-644A-40A9-BA3E-CB84CD9C8320}\MpKsl4f75c9a1.sys []
S1 MpKsl5965bf76;MpKsl5965bf76; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BA2EC729-6BE8-4D24-8E00-535DDC111528}\MpKsl5965bf76.sys []
S1 MpKsl5d09bf8a;MpKsl5d09bf8a; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A8CB30C1-A36D-449A-B592-05062E05BAC6}\MpKsl5d09bf8a.sys []
S1 MpKsl5d3fc07f;MpKsl5d3fc07f; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F321798D-2098-4D7F-8F32-A89941A6951E}\MpKsl5d3fc07f.sys []
S1 MpKsl62529ec7;MpKsl62529ec7; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{13E91FDB-C351-4948-9FB3-85F13DCBE996}\MpKsl62529ec7.sys []
S1 MpKsl7130658b;MpKsl7130658b; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DA6E00E9-021A-4FCA-96EB-692D3503811F}\MpKsl7130658b.sys []
S1 MpKsl7923b701;MpKsl7923b701; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{44426196-F470-4595-A764-3F4759ECE76F}\MpKsl7923b701.sys []
S1 MpKsl7f174312;MpKsl7f174312; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{400B7B5F-644A-40A9-BA3E-CB84CD9C8320}\MpKsl7f174312.sys []
S1 MpKsl852aa6e2;MpKsl852aa6e2; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F321798D-2098-4D7F-8F32-A89941A6951E}\MpKsl852aa6e2.sys []
S1 MpKsl86565b59;MpKsl86565b59; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6CA35D20-FACE-45C7-9792-97A908D81053}\MpKsl86565b59.sys []
S1 MpKsl883cf361;MpKsl883cf361; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5139838D-D3B1-4F6F-841C-B2B5F117F560}\MpKsl883cf361.sys []
S1 MpKsl8ae432db;MpKsl8ae432db; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{44426196-F470-4595-A764-3F4759ECE76F}\MpKsl8ae432db.sys []
S1 MpKsl93623f7a;MpKsl93623f7a; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9D79B83C-069E-4F10-9A23-D10A46DCAE8F}\MpKsl93623f7a.sys []
S1 MpKsl951433c8;MpKsl951433c8; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9AC745F2-4EDA-44EC-BD75-90B9FC5E711B}\MpKsl951433c8.sys []
S1 MpKsl9741e28c;MpKsl9741e28c; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5139838D-D3B1-4F6F-841C-B2B5F117F560}\MpKsl9741e28c.sys []
S1 MpKsl9d3e6e7e;MpKsl9d3e6e7e; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{592C888F-DB24-483A-A608-32712E0A5085}\MpKsl9d3e6e7e.sys []
S1 MpKsla72288d0;MpKsla72288d0; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1135952E-4DBD-4BCD-8CC6-A726406F4F27}\MpKsla72288d0.sys []
S1 MpKslad7bba1e;MpKslad7bba1e; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{13E91FDB-C351-4948-9FB3-85F13DCBE996}\MpKslad7bba1e.sys []
S1 MpKslae490a5c;MpKslae490a5c; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BA67925C-4FA8-4316-906A-7DE8133FC89D}\MpKslae490a5c.sys []
S1 MpKslaebbfe01;MpKslaebbfe01; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D5B929A3-B15E-499C-A8B4-BE1B037A5EF6}\MpKslaebbfe01.sys []
S1 MpKslaf118296;MpKslaf118296; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F321798D-2098-4D7F-8F32-A89941A6951E}\MpKslaf118296.sys []
S1 MpKslbdae1998;MpKslbdae1998; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{912CD555-D59E-4658-9942-ABDA1D3E0C76}\MpKslbdae1998.sys []
S1 MpKslbe09ee37;MpKslbe09ee37; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A8CB30C1-A36D-449A-B592-05062E05BAC6}\MpKslbe09ee37.sys []
S1 MpKslbe35c2a6;MpKslbe35c2a6; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{912CD555-D59E-4658-9942-ABDA1D3E0C76}\MpKslbe35c2a6.sys []
S1 MpKslc1251d53;MpKslc1251d53; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7D363CD4-4435-42CB-9F8A-81617EFC4301}\MpKslc1251d53.sys []
S1 MpKslc493e6c2;MpKslc493e6c2; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{25923101-75CA-4BF7-9482-71E938551B26}\MpKslc493e6c2.sys []
S1 MpKsld41f0fef;MpKsld41f0fef; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9D79B83C-069E-4F10-9A23-D10A46DCAE8F}\MpKsld41f0fef.sys []
S1 MpKsld55cbdab;MpKsld55cbdab; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1135952E-4DBD-4BCD-8CC6-A726406F4F27}\MpKsld55cbdab.sys []
S1 MpKsldb7f150a;MpKsldb7f150a; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{25923101-75CA-4BF7-9482-71E938551B26}\MpKsldb7f150a.sys []
S1 MpKsldf27c6f2;MpKsldf27c6f2; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5835FDFC-C4D6-45AD-8406-30743A8E438D}\MpKsldf27c6f2.sys []
S1 MpKsle2d1d549;MpKsle2d1d549; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{44426196-F470-4595-A764-3F4759ECE76F}\MpKsle2d1d549.sys []
S1 MpKsle9d141f5;MpKsle9d141f5; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{25923101-75CA-4BF7-9482-71E938551B26}\MpKsle9d141f5.sys []
S1 MpKslef27a28e;MpKslef27a28e; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{310FD72D-F184-4311-8376-D2AF77B53159}\MpKslef27a28e.sys []
S1 MpKslf3cea196;MpKslf3cea196; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FA365E9D-ECBC-4FD5-B9DC-7AD4138F7CAB}\MpKslf3cea196.sys []
S1 MpKslf80e1de5;MpKslf80e1de5; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BA2EC729-6BE8-4D24-8E00-535DDC111528}\MpKslf80e1de5.sys []
S3 ATE_PROCMON;ATE_PROCMON; \??\C:\Program Files\Anti Trojan Elite\ATEPMon.sys []
S3 BCM43XV;Broadcom Extensible 802.11-Netzwerkadaptertreiber; C:\Windows\system32\DRIVERS\bcmwl6.sys [2012-01-07 1331192]
S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 E100B;Intel(R) PRO-Adaptertreiber; C:\Windows\system32\DRIVERS\e100b325.sys [2006-11-02 163328]
S3 EC168BDA;TVGo DVB-T02PRO; C:\Windows\system32\DRIVERS\EC168BDA.sys [2007-05-18 67968]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [2005-08-18 7168]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 39272]
S3 GPU-Z;GPU-Z; \??\C:\Users\Laptop\AppData\Local\Temp\GPU-Z.sys []
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-04-12 160768]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 43392]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 usbscan;USB-Scannertreiber; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 wanatw;WAN Miniport (ATW); C:\Windows\system32\DRIVERS\wanatw4.sys [2006-11-01 33588]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R2 CISVC;@%systemroot%\system32\CISVC.EXE,-1; C:\Windows\system32\CISVC.EXE [2008-01-18 11264]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2011-02-23 125496]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-25 92216]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-04-19 75304]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-10-03 219752]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
R2 SNMP;@%SystemRoot%\system32\snmp.exe,-3; C:\Windows\System32\snmp.exe [2009-04-10 47616]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe [2011-12-14 1514304]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-01-12 227896]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-01-25 791608]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 208944]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-16 135664]
S3 CT;CT; C:\Users\ZDENK~1\AppData\Local\Temp\CT.exe [2012-01-13 371584]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-16 135664]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-20 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 MatSvc;@%ProgramFiles%\Microsoft Fix it Center\MatsRes.dll,-9000; C:\Program Files\Microsoft Fix it Center\Matsvc.exe [2011-06-13 267568]
S3 MSFICLCFKU;MSFICLCFKU; C:\Users\ZDENK~1\AppData\Local\Temp\MSFICLCFKU.exe [2012-01-13 568192]
S3 NtmsSvc;@%SystemRoot%\system32\ntmssvc.dll,-2; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-02-12 880640]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-02-17 74656]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S4 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [2007-04-24 262243]
S4 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [2007-04-24 106593]

-----------------EOF-----------------

odinstaluj SpyBot je to zastaraly SW - v podstate k nicomu
1. sietovka je pripojena k routeru ?
2. mas pevnu IP, alebo dynamicky pridelovanu ?
3. mas v spravcovi zariadeni HW nejake otazniky, vykricniky ?

JaRon píše:odinstaluj SpyBot je to zastaraly SW - v podstate k nicomu
1. sietovka je pripojena k routeru ?
2. mas pevnu IP, alebo dynamicky pridelovanu ?
3. mas v spravcovi zariadeni HW nejake otazniky, vykricniky ?

No momentálně není p řipojena, router je ADSL Zyxel P-660HW-T3. dnes jsem se zkusil připojit i u souseda naproti, který má také nějaký wifimodem na bezdrátové připojení, ale výsledek stejný.

adresa je dynamicky přidělovaná, pokud to dobře chápu, nastavena je automatika. ovladač karty hlásí, že je vpořádku. přikládám např. takový výpis z configu

- k routeru se připojit krom wifi nedá, nedoplní se brána 10.0.0.138 ani do administrace, zkoušel jsem pomocí O2 podpory nastavení ip natvrdo...
a nic

C:\Users\Laptop>ipconfig -all

Konfigurace protokolu IP systému Windows

Název hostitele . . . . . . . . . : Laptop-PC
Primární přípona DNS. . . . . . . :
Typ uzlu . . . . . . . . . . . . : hybridní
Povoleno směrování IP . . . . . . : Ne
WINS Proxy povoleno . . . . . . . : Ne

Adaptér bezdrátové sítě LAN Drahtlosnetzwerkverbindung:

Přípona DNS podle připojení . . . :
Popis . . . . . . . . . . . . . . : Vícepásmový síťový adaptér Broadcom 802.1
1
Fyzická Adresa. . . . . . . . . . : 00-1A-73-A3-93-69
Protokol DHCP povolen . . . . . . : Ano
Automatická konfigurace povolena : Ano
Spojení - místní adresa IPv6 . . . : fe80::90a1:b1c3f96%9(Preferované)

Adresa IPv4 . . . . . . . . . . . : 10.0.0.2(Preferované)
Maska podsítě . . . . . . . . . . : 255.255.255.0
Zapůjčeno . . . . . . . . . . . . : Montag, 9. Januar 2012 10:43:32
Zápůjčka vyprší . . . . . . . . . : Donnerstag, 12. Januar 2012 10:43:32
Výchozí brána . . . . . . . . . . : 10.0.0.138
Server DHCP . . . . . . . . . . . : 10.0.0.138
IAID DHCPv6 . . . . . . . . . . . : 184556147
DUID klienta DHCPv6. . . . . . . . : 00-01-00-01-0E-84-2E-69-00-1B-24-A0-02-6
B
Servery DNS . . . . . . . . . . . : 10.0.0.138
Rozhraní NetBios nad protokolem TCP/IP. . . . . . . . : Povoleno

Adaptér sítě Ethernet LAN-Verbindung:

Přípona DNS podle připojení . . . :
Popis . . . . . . . . . . . . . . : NVIDIA nForce Networking Controller
Fyzická Adresa. . . . . . . . . . : 00-1B-24-A0-02-6B
Protokol DHCP povolen . . . . . . : Ano
Automatická konfigurace povolena : Ano
Spojení - místní adresa IPv6 . . . : fe80::dc61:b65d1b55%8(Preferované)

Adresa IP automatické konfigurace : 169.254.27.85(Preferované)
Maska podsítě . . . . . . . . . . : 255.255.0.0
Výchozí brána . . . . . . . . . . :
IAID DHCPv6 . . . . . . . . . . . : 201333540
DUID klienta DHCPv6. . . . . . . . : 00-01-00-01-0E-84-2E-69-00-1B-24-A0-02-6
B
Rozhraní NetBios nad protokolem TCP/IP. . . . . . . . : Povoleno

Adaptér pro tunelové připojení Připojení k místní síti* 3:

Stav média . . . . . . . . . . . : odpojeno
Přípona DNS podle připojení . . . :
Popis . . . . . . . . . . . . . . : isatap.{B4112C41-CF64-4448-9D55-0558E91C0
862}
Fyzická Adresa. . . . . . . . . . : 00-00-00-00-00-00-00-E0
Protokol DHCP povolen . . . . . . : Ne
Automatická konfigurace povolena : Ano

Adaptér pro tunelové připojení LAN-Verbindung* 9:

Stav média . . . . . . . . . . . : odpojeno
Přípona DNS podle připojení . . . :
Popis . . . . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Fyzická Adresa. . . . . . . . . . : 02-00-54-55-4E-01
Protokol DHCP povolen . . . . . . : Ne
Automatická konfigurace povolena : Ano

Adaptér pro tunelové připojení Připojení k místní síti*:

Stav média . . . . . . . . . . . : odpojeno
Přípona DNS podle připojení . . . :
Popis . . . . . . . . . . . . . . : isatap.{7CF141E4-0D24-464B-A005-573590131
AFB}
Fyzická Adresa. . . . . . . . . . : 00-00-00-00-00-00-00-E0
Protokol DHCP povolen . . . . . . : Ne
Automatická konfigurace povolena : Ano

C:\Users\Laptop>

další výpisy vč. toho, že se mi to krátce včera dopoledne po nějakém "pokusu" s programem TCPOptimizer zprovoznit......
jsou na tom mém odkazu na PC forum, viz můj dotaz....

vloz mi sem obrazok nastavenia sietovej karty Nvidia
+
podarilo sa pripojit nejaky iny pocitac na siet k tomuto routru ?

P.S. mozno to aj bolo niekde pisane, je to tam chaoticke ,,,

JaRon píše:vloz mi sem obrazok nastavenia sietovej karty Nvidia
+
podarilo sa pripojit nejaky iny pocitac na siet k tomuto routru ?

P.S. mozno to aj bolo niekde pisane, je to tam chaoticke ,,,

doma nám na tom routeru, vlastně jsem už zkoušel druhý stejného typu, jedou dva pc, nevím os toho prvního, řekl bych xp, můj starej pc co mám u sebe a kde ta LANka jede také v OS XP.

nynější ipconfig: Jen pozn.,tento modem momentálně není připojen kabelem DSL, připojil jsem to jen pro potřeby tohoto hlášení, musel bych totiž odpojit ten druhý PC, kde teď posílám nějaký soubor.

C:\Users\Laptop>ipconfig -all

Konfigurace protokolu IP systému Windows

Název hostitele . . . . . . . . . : Laptop-PC
Primární přípona DNS. . . . . . . :
Typ uzlu . . . . . . . . . . . . : hybridní
Povoleno směrování IP . . . . . . : Ne
WINS Proxy povoleno . . . . . . . : Ne

Adaptér sítě Ethernet LAN-Verbindung:

Přípona DNS podle připojení . . . :
Popis . . . . . . . . . . . . . . : NVIDIA nForce Networking Controller
Fyzická Adresa. . . . . . . . . . : 00-1B-24-A0-02-6B
Protokol DHCP povolen . . . . . . : Ano
Automatická konfigurace povolena : Ano
Adresa IP automatické konfigurace : 169.254.221.230(Preferované)
Maska podsítě . . . . . . . . . . : 255.255.0.0
Výchozí brána . . . . . . . . . . :
Rozhraní NetBios nad protokolem TCP/IP. . . . . . . . : Povoleno

Adaptér bezdrátové sítě LAN Drahtlosnetzwerkverbindung:

Přípona DNS podle připojení . . . :
Popis . . . . . . . . . . . . . . : Vícepásmový síťový adaptér Broadcom 802.1
1
Fyzická Adresa. . . . . . . . . . : 00-1A-73-A3-93-69
Protokol DHCP povolen . . . . . . : Ano
Automatická konfigurace povolena : Ano
Spojení - místní adresa IPv6 . . . : fe80::90a1:b1c3f96%8(Preferované)

Adresa IPv4 . . . . . . . . . . . : 10.0.0.2(Preferované)
Maska podsítě . . . . . . . . . . : 255.255.255.0
Zapůjčeno . . . . . . . . . . . . : Freitag, 13. Januar 2012 09:44
Zápůjčka vyprší . . . . . . . . . : Montag, 16. Januar 2012 02:52
Výchozí brána . . . . . . . . . . : 10.0.0.138
Server DHCP . . . . . . . . . . . : 10.0.0.138
IAID DHCPv6 . . . . . . . . . . . : 184556147
DUID klienta DHCPv6. . . . . . . . : 00-01-00-01-0E-84-2E-69-00-1B-24-A0-02-6
B
Servery DNS . . . . . . . . . . . : 10.0.0.138
Rozhraní NetBios nad protokolem TCP/IP. . . . . . . . : Povoleno

Adaptér pro tunelové připojení Připojení k místní síti* 3:

Stav média . . . . . . . . . . . : odpojeno
Přípona DNS podle připojení . . . :
Popis . . . . . . . . . . . . . . : isatap.{B4112C41-CF64-4448-9D55-0558E91C0
862}
Fyzická Adresa. . . . . . . . . . : 00-00-00-00-00-00-00-E0
Protokol DHCP povolen . . . . . . : Ne
Automatická konfigurace povolena : Ano

Adaptér pro tunelové připojení LAN-Verbindung* 9:

Přípona DNS podle připojení . . . :
Popis . . . . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Fyzická Adresa. . . . . . . . . . : 02-00-54-55-4E-01
Protokol DHCP povolen . . . . . . : Ne
Automatická konfigurace povolena : Ano
Adresa IPv6. . . . . . . . . . . : 2001:0:5ef5:79fdbb9f:a798:6c67(Prefe
rované)
Spojení - místní adresa IPv6 . . . : fe80:bb9f:a798:6c67%9(Preferované)

Výchozí brána . . . . . . . . . . : ::
NetBIOS nad TCP/IP. . . . . . . . : zakázáno

Adaptér pro tunelové připojení Připojení k místní síti*:

Stav média . . . . . . . . . . . : odpojeno
Přípona DNS podle připojení . . . :
Popis . . . . . . . . . . . . . . : isatap.{D6049F42-BEB9-4E50-BD10-0616F5EE9
F30}
Fyzická Adresa. . . . . . . . . . : 00-00-00-00-00-00-00-E0
Protokol DHCP povolen . . . . . . : Ne
Automatická konfigurace povolena : Ano

C:\Users\Laptop>

ještě další náhledy z administrace, možná to jde i nějakým výpisem, ale to já neumím

2

4

nuz ja tu cez vikend nebudem, dufam sa Ta ujme niekto z kolegov
skus nasledovne:
1. v casti speed&duplex settings skus zadat 10MB half duplex
2. v casti TCP/IP v4 nastav DNS namiesto automaticky zadaj 10.0.0.138

JaRon píše:nuz ja tu cez vikend nebudem, dufam sa Ta ujme niekto z kolegov
skus nasledovne:
1. v casti speed&duplex settings skus zadat 10MB half duplex
2. v casti TCP/IP v4 nastav DNS namiesto automaticky zadaj 10.0.0.138

bohužel obé bylo zkoušeno, a nepomohlo, vč. koplet pevné ip adresy .

výpis ping na router napojený na dsl linku je následující (bylo mi porazeno známým, který dělá lehce něco kolem správce sítí.


C:\Users\Laptop>ping 10.0.0.138

Příkaz PING na 10.0.0.138 - 32 bajtů dat:
Obecná chyba
Obecná chyba
Obecná chyba
Obecná chyba

Statistika ping pro 10.0.0.138:
Pakety: Odeslané = 4, Přijaté = 0, Ztracené = 4 (ztráta 100%), takže spojení nenavázáno.


jinak jsem po pročítání fór a rad na netu zavedl pro ochranu, protože jsem to neměl, profil uživatele a správce, byť NTB používám jen já. Od té doby mi ale při startu uživatele vyskakuje okno, o kterém mám nějaké pochyby. viz obr..... Nejedná se o nějakou nedetekovanou nákazu?
Děkuji

PS: našel jsem si pomocí google a překladače k tomu akorát toto, ale sahat na to sám raději nechci http://www.pcsafedoctor.com/exe-errors/ ... r.exe.html

stiahni a uloz na plochu ComboFix

potom spust pod uctom s administratorskym opravnenim


akcia trva cca. 5-10 minut, niekedy i dlhsie -, Pocas scanu nespustaj ziadne ine aplikacie

Nie je dovod na paniku ak stroj bude restartovany
upozornenie: ak pouzivas antispyware s rezidentnim stitem, ten pred scanom vypni.

po restarte aplikacie vytvori log, ulozeny na C:\Combofix.txt (jeho obsah vloz sem)

díky, teď přijedou za chvíli z O2 měnit linku do baráku, tak jak to provedou, vrhnu se na to. resetuji pc a pustím jen administrátora
mám zapnutý co vím jen windowsowský firevall a k němu MS Esentials. wifi mohu pro tu operaci taky zakázat.

OKay, prip. skus preinstalovat toto http://www.mediafire.com/?dozgnmmwlzn