VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Pomalé PC

https://forum.viry.cz:443/viewtopic.php?t=122506

Stránka 1 z 1

Pomalé PC

Napsal: 24 čer 2012 10:56
od 102mn
Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2012-06-24 11:52:34
Systém Microsoft Windows XP Professional Service Pack 3
System drive D: has 35 GB (69%) free of 50 GB
Total RAM: 1023 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:53:20, on 24.6.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Microsoft\BingBar\BBSvc.EXE
D:\Program Files\Microsoft\BingBar\SeaPort.EXE
D:\Program Files\ICQ6Toolbar\ICQ Service.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\Explorer.EXE
D:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\AVAST Software\Avast\avastUI.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\RSIT\RSIT.exe
D:\Program Files\trend micro\Administrator.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - D:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - D:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "D:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "D:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - D:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - D:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] D:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [avast] "D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://D:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - D:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - D:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - D:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - D:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe

--
End of file - 7176 bytes

======Scheduled tasks folder======

D:\WINDOWS\tasks\Adobe Flash Player Updater.job
D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - D:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\1f6rqxva.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.centrum.cz/#utm_source=icq&u ... um=generic"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.4.7&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=D:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.235 Plugin
"Path"=D:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2027]
"Description"=RealMedia Plugin
"Path"=D:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1040]
"Description"=6.0.12.1040
"Path"=D:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=D:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=D:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=D:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

D:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

D:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
flashplayer.xpt
nppl3260.xpt
npwachk.xpt
nsIQTScriptablePlugin.xpt
nsJSRealPlayerPlugin.xpt

D:\Program Files\Mozilla Firefox\plugins\
npdnu.dll
npdnu.xpt
npdnupdater2.dll
npdnupdater2.xpt
npjp2.dll
NPOFFICE.DLL
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprpjplug.dll
npwachk.dll
QuickTimePlugin.class

D:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

D:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\1f6rqxva.default\extensions\
{0b38152b-1b20-484d-a11f-5e04a9b0661f}
{800b5000-a755-47e1-992b-48a1c1357f07}

D:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\1f6rqxva.default\searchplugins\
aol-web-search.xml
icqplugin.gif
icqplugin.src
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - D:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2012-06-24 192112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-06-19 4014280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - D:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll [2012-06-24 1003576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - D:\Program Files\Microsoft\BingBar\BingExt.dll [2011-11-09 1219352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - D:\Program Files\Microsoft\BingBar\BingExt.dll [2011-11-09 1219352]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - D:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2011-08-17 1055808]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - D:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2012-06-24 192112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=D:\WINDOWS\system32\NvCpl.dll [2011-10-08 16744256]
"nwiz"=D:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2011-10-08 1632360]
"avast"=D:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=D:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"swg"=D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2012-06-24 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
D:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - D:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - D:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"D:\Program Files\ICQ7.7\ICQ.exe"="D:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"
"D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Program Files\ICQ7.7\ICQ.exe"="D:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=D:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=D:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-06-24 11:52:34 ----D---- D:\rsit
2012-06-24 11:22:37 ----D---- D:\Documents and Settings\All Users\Data aplikací\Google
2012-06-24 11:21:52 ----D---- D:\Program Files\Google
2012-06-24 11:21:49 ----A---- D:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-06-24 11:21:48 ----A---- D:\WINDOWS\system32\drivers\aswSP.sys
2012-06-24 11:21:45 ----A---- D:\WINDOWS\system32\drivers\aswRdr.sys
2012-06-24 11:21:44 ----A---- D:\WINDOWS\system32\drivers\aswTdi.sys
2012-06-24 11:21:43 ----A---- D:\WINDOWS\system32\drivers\aswSnx.sys
2012-06-24 11:21:43 ----A---- D:\WINDOWS\system32\drivers\aswmon2.sys
2012-06-24 11:21:43 ----A---- D:\WINDOWS\system32\drivers\aswmon.sys
2012-06-24 11:21:42 ----A---- D:\WINDOWS\system32\drivers\aavmker4.sys
2012-06-24 11:20:46 ----A---- D:\WINDOWS\avastSS.scr
2012-06-24 11:20:45 ----A---- D:\WINDOWS\system32\aswBoot.exe
2012-06-16 12:11:45 ----HDC---- D:\WINDOWS\$NtUninstallKB2707511$
2012-06-16 11:57:32 ----HDC---- D:\WINDOWS\$NtUninstallKB2685939$
2012-06-16 11:50:15 ----HDC---- D:\WINDOWS\$NtUninstallKB2709162$
2012-06-10 16:27:51 ----HDC---- D:\WINDOWS\$NtUninstallKB2718704$

======List of files/folders modified in the last 1 month======

2012-06-24 11:52:59 ----D---- D:\Program Files\trend micro
2012-06-24 11:52:57 ----D---- D:\WINDOWS\Temp
2012-06-24 11:52:38 ----D---- D:\WINDOWS\Prefetch
2012-06-24 11:48:41 ----D---- D:\WINDOWS
2012-06-24 11:46:51 ----A---- D:\WINDOWS\SchedLgU.Txt
2012-06-24 11:33:28 ----D---- D:\WINDOWS\system32\CatRoot2
2012-06-24 11:27:35 ----D---- D:\Program Files
2012-06-24 11:27:30 ----SHD---- D:\WINDOWS\Installer
2012-06-24 11:22:04 ----SD---- D:\WINDOWS\Tasks
2012-06-24 11:21:49 ----D---- D:\WINDOWS\system32\drivers
2012-06-24 11:21:08 ----D---- D:\WINDOWS\WinSxS
2012-06-24 11:20:45 ----D---- D:\WINDOWS\system32
2012-06-24 11:19:35 ----D---- D:\Program Files\AVAST Software
2012-06-24 11:19:35 ----D---- D:\Documents and Settings\All Users\Data aplikací\AVAST Software
2012-06-24 11:12:57 ----RSHDC---- D:\WINDOWS\system32\dllcache
2012-06-24 11:09:28 ----HD---- D:\WINDOWS\inf
2012-06-24 11:07:10 ----D---- D:\WINDOWS\Help
2012-06-24 11:02:14 ----D---- D:\Documents and Settings\All Users\Data aplikací\Skype
2012-06-16 12:44:35 ----D---- D:\Documents and Settings\Administrator\Data aplikací\Winamp
2012-06-16 12:44:35 ----D---- D:\Documents and Settings\Administrator\Data aplikací\Skype
2012-06-16 12:44:25 ----D---- D:\WINDOWS\Minidump
2012-06-16 12:44:25 ----D---- D:\WINDOWS\Debug
2012-06-16 12:16:42 ----RSD---- D:\WINDOWS\assembly
2012-06-16 12:15:11 ----D---- D:\WINDOWS\Microsoft.NET
2012-06-16 12:10:54 ----A---- D:\WINDOWS\system32\PerfStringBackup.INI
2012-06-16 12:00:38 ----A---- D:\WINDOWS\system32\MRT.exe
2012-06-16 11:59:23 ----D---- D:\Program Files\Internet Explorer
2012-06-16 11:57:49 ----HD---- D:\WINDOWS\$hf_mig$
2012-06-02 15:19:44 ----A---- D:\WINDOWS\system32\wucltui.dll.mui
2012-06-02 15:19:38 ----A---- D:\WINDOWS\system32\wuweb.dll
2012-06-02 15:19:38 ----A---- D:\WINDOWS\system32\wucltui.dll
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\wups2.dll
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\wups.dll
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\wuaueng.dll.mui
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\wuauclt.exe
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\wuapi.dll.mui
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\cdm.dll
2012-06-02 15:19:24 ----A---- D:\WINDOWS\system32\wuapi.dll
2012-06-02 15:19:18 ----A---- D:\WINDOWS\system32\wuaueng.dll
2012-06-02 15:19:02 ----A---- D:\WINDOWS\system32\mucltui.dll.mui
2012-06-02 15:18:58 ----A---- D:\WINDOWS\system32\muweb.dll
2012-06-02 15:18:58 ----A---- D:\WINDOWS\system32\mucltui.dll
2012-05-31 15:22:06 ----A---- D:\WINDOWS\system32\crypt32.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; D:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; D:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; D:\WINDOWS\system32\drivers\Aavmker4.sys [2012-03-07 24920]
R1 AswRdr;aswRdr; D:\WINDOWS\system32\drivers\AswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; D:\WINDOWS\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; D:\WINDOWS\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; D:\WINDOWS\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 intelppm;Řadič procesoru Intel; D:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/11/06 08:18:12]; \??\D:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl []
R2 aswFsBlk;aswFsBlk; D:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMon2;aswMon2; D:\WINDOWS\system32\drivers\aswMon2.sys [2012-03-07 95704]
R2 irda;Protokol IrDA; D:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 LANPkt;Realtek LANPkt Protocol; D:\WINDOWS\system32\DRIVERS\LANPkt.sys [2003-09-17 8440]
R3 cmudax;C-Media High Definition Audio Interface; D:\WINDOWS\system32\drivers\cmudax.sys [2006-02-15 1301568]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; D:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 irsir;Microsoft Serial Infrared Driver; D:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 nv;nv; D:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-10-08 12791488]
R3 Rasirda;WAN Miniport (IrDA); D:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; D:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; D:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; D:\WINDOWS\system32\DRIVERS\yk51x86.sys [2007-10-12 255232]
S3 GMSIPCI;GMSIPCI; \??\G:\INSTALL\GMSIPCI.SYS []
S3 HidUsb;Ovladač třídy standardu HID; D:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; D:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 NTACCESS;NTACCESS; \??\G:\NTACCESS.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; D:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; D:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; D:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; D:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; D:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 BBSvc;Bing Bar Update Service; D:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-11-09 196376]
R2 BBUpdate;BBUpdate; D:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
R2 ICQ Service;ICQ Service; D:\Program Files\ICQ6Toolbar\ICQ Service.exe [2011-08-17 247872]
R2 Irmon;Sledování infračerveného přenosu; D:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 MDM;Machine Debug Manager; D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 NVSvc;NVIDIA Driver Helper Service; D:\WINDOWS\system32\nvsvc32.exe [2011-10-08 298304]
R2 nvUpdatusService;NVIDIA Update Service Daemon; D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-08 2253120]
R2 Skype C2C Service;Skype C2C Service; D:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-06-19 3048136]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; D:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 gupdate;Služba Google Update (gupdate); D:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-24 136176]
S2 SkypeUpdate;Skype Updater; D:\Program Files\Skype\Updater\Updater.exe [2012-01-31 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-07 257696]
S3 aspnet_state;ASP.NET State Service; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; D:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); D:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-24 136176]
S3 gusvc;Google Software Updater; D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-06-24 182768]
S3 idsvc;Windows CardSpace; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; D:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: Pomalé PC

Napsal: 24 čer 2012 11:11
od Caroprd111
Zdravím a vítám vás na našem bezpečnostním fóru viry.cz :welcome:

Můj nick je Caroprd111. Budu se vám v tomto topicu věnovat a snažit se odstranit všechny vaše problémy s počítačem. :)
Než začneme, přečtěte si prosím následující poznámky.
  • Pokud nemáte, zálohujte si všechna důležitá data. Infikovaný počítač je nevyzpytatelný.
  • Důsledně a pečlivě si přečtěte celý postup, poté pokračujte po jednotlivých krocích.
  • Prosím, nespouštějte žádné další programy na vlastní pěst, zejména ne ComboFix! Zbytečně tím můžete zkomplikovat odvirování, dokonce i znefunkčnit systém.
  • Absence příznaků nemusí vždy znamenat, že je počítač čistý! Proto vždy spolupracujte až do doby, než vám napíšu, že je počítač v pořádku.
  • V případě, že něčemu nerozumíte nebo si nejste jist, neváhejte se mě zeptat.
  • Pokud bude log dlouhý a nevejde se do jednoho příspěvku, rozdělte jej do více příspěvků.

:arrow: Používáte nějaké toolbary (lišty v prohlížečích) :???:
V počítači máte 3 a je možné, že právě tyto zbytečnosti systém brzdí. Konkrétně je to:
  • Bing Bar
  • ICQToolBar
  • Google Toolbar

Re: Pomalé PC

Napsal: 24 čer 2012 11:31
od 102mn
Dobrý den, děkuji že jste se mě ujal. Toolbar žádný nepoužívám, asi se vždycky nainstalují s nějakým programem.

Re: Pomalé PC

Napsal: 24 čer 2012 11:38
od Caroprd111
:arrow: V tom případě můžete všechny tyto toolbary s klidem odinstalovat v Přidat nebo odebrat programy. Kdyby tam nějaký nebyl nebo se vám nedařil odistalovat, napište.

Pro jistotu uděláme ještě kontrolu na rootkity, log z RSIT se zdá čistý. :)

:arrow: Stáhněte si TDSSKiller a uložte ho na Plochu.
  • Dvojklik na TDSSKiller.exe, potom klikněte na Spustit kontrolu - Start Scan.
  • Pokud je detekován infikovaný soubor(y), bude předvolená akce Cure, klikněte na tlačítko Continue.
  • Pokud je detekovaný podezřelý (suspicious) soubor, bude předvolená akce Skip, klikněte na Continue.
  • Program vás může požádat, abyste restartoval počítač pro dokončení procesu. Klikněte na Reboot Now.
  • Jestli se restart nevyžaduje, klikněte na tlačítko Report. Soubor s logem by se měl objevit. Zkopírujte ho a vložte jej sem.
  • Je-li vyžadován restart počítače, zpráva je k dispozici ve vašem kořenovém adresáři (například C:\ složka) ve formě "TDSSKiller. _log.txt".

Re: Pomalé PC

Napsal: 24 čer 2012 11:49
od 102mn
Všechny toolbary jsou odinstalovány a posílám report z TDSS


12:47:15.0296 1164 TDSS rootkit removing tool 2.7.41.0 Jun 20 2012 20:53:32
12:47:15.0421 1164 ============================================================
12:47:15.0421 1164 Current date / time: 2012/06/24 12:47:15.0421
12:47:15.0421 1164 SystemInfo:
12:47:15.0421 1164
12:47:15.0421 1164 OS Version: 5.1.2600 ServicePack: 3.0
12:47:15.0421 1164 Product type: Workstation
12:47:15.0421 1164 ComputerName: DOMA-9FCA21D8D1
12:47:15.0421 1164 UserName: Administrator
12:47:15.0421 1164 Windows directory: D:\WINDOWS
12:47:15.0421 1164 System windows directory: D:\WINDOWS
12:47:15.0421 1164 Processor architecture: Intel x86
12:47:15.0421 1164 Number of processors: 2
12:47:15.0421 1164 Page size: 0x1000
12:47:15.0421 1164 Boot type: Normal boot
12:47:15.0421 1164 ============================================================
12:47:17.0640 1164 Drive \Device\Harddisk0\DR0 - Size: 0x2F7B100000 (189.92 Gb), SectorSize: 0x200, Cylinders: 0x60D8, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
12:47:17.0640 1164 ============================================================
12:47:17.0640 1164 \Device\Harddisk0\DR0:
12:47:17.0640 1164 MBR partitions:
12:47:17.0640 1164 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A962B1
12:47:17.0640 1164 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3A962F0, BlocksNum 0x61A7966
12:47:17.0640 1164 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x9C3DC56, BlocksNum 0x61A7966
12:47:17.0640 1164 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xFDE55BC, BlocksNum 0x7DEFD1C
12:47:17.0640 1164 ============================================================
12:47:17.0703 1164 C: <-> \Device\Harddisk0\DR0\Partition0
12:47:17.0953 1164 D: <-> \Device\Harddisk0\DR0\Partition1
12:47:18.0000 1164 E: <-> \Device\Harddisk0\DR0\Partition2
12:47:18.0062 1164 F: <-> \Device\Harddisk0\DR0\Partition3
12:47:18.0062 1164 ============================================================
12:47:18.0062 1164 Initialize success
12:47:18.0062 1164 ============================================================
12:47:41.0234 2568 ============================================================
12:47:41.0234 2568 Scan started
12:47:41.0234 2568 Mode: Manual;
12:47:41.0234 2568 ============================================================
12:47:41.0734 2568 Aavmker4 (473f97edc5a5312f3665ab2921196c0c) D:\WINDOWS\system32\drivers\Aavmker4.sys
12:47:41.0734 2568 Aavmker4 - ok
12:47:41.0750 2568 Abiosdsk - ok
12:47:41.0750 2568 abp480n5 - ok
12:47:41.0828 2568 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) D:\WINDOWS\system32\DRIVERS\ACPI.sys
12:47:41.0890 2568 ACPI - ok
12:47:41.0921 2568 ACPIEC (afdff022a01f0b11c776f0860c3b282f) D:\WINDOWS\system32\drivers\ACPIEC.sys
12:47:41.0921 2568 ACPIEC - ok
12:47:42.0046 2568 AdobeFlashPlayerUpdateSvc (990dc6edc9f933194d7cd4e65146bc94) D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
12:47:42.0046 2568 AdobeFlashPlayerUpdateSvc - ok
12:47:42.0046 2568 adpu160m - ok
12:47:42.0125 2568 aec (8bed39e3c35d6a489438b8141717a557) D:\WINDOWS\system32\drivers\aec.sys
12:47:42.0187 2568 aec - ok
12:47:42.0250 2568 AFD (1e44bc1e83d8fd2305f8d452db109cf9) D:\WINDOWS\System32\drivers\afd.sys
12:47:42.0296 2568 AFD - ok
12:47:42.0296 2568 Aha154x - ok
12:47:42.0312 2568 aic78u2 - ok
12:47:42.0312 2568 aic78xx - ok
12:47:42.0359 2568 Alerter (e0a6fa244b8624d78fe5ff6f56a33bae) D:\WINDOWS\system32\alrsvc.dll
12:47:42.0359 2568 Alerter - ok
12:47:42.0390 2568 ALG (88842de939a827577bf24243699ac80a) D:\WINDOWS\System32\alg.exe
12:47:42.0406 2568 ALG - ok
12:47:42.0406 2568 AliIde - ok
12:47:42.0421 2568 amsint - ok
12:47:42.0515 2568 AppMgmt (6b8e7a90e576d4fe308f97c69060a171) D:\WINDOWS\System32\appmgmts.dll
12:47:42.0562 2568 AppMgmt - ok
12:47:42.0562 2568 asc - ok
12:47:42.0578 2568 asc3350p - ok
12:47:42.0578 2568 asc3550 - ok
12:47:42.0687 2568 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
12:47:42.0718 2568 aspnet_state - ok
12:47:42.0734 2568 aswFsBlk (0ae43c6c411254049279c2ee55630f95) D:\WINDOWS\system32\drivers\aswFsBlk.sys
12:47:42.0734 2568 aswFsBlk - ok
12:47:42.0781 2568 aswMon2 (8c30b7ddd2f1d8d138ebe40345af2b11) D:\WINDOWS\system32\drivers\aswMon2.sys
12:47:42.0796 2568 aswMon2 - ok
12:47:42.0828 2568 AswRdr (da12626fd9a67f4e917e2f2fbe1e1764) D:\WINDOWS\system32\drivers\AswRdr.sys
12:47:42.0828 2568 AswRdr - ok
12:47:43.0000 2568 aswSnx (dcb199b967375753b5019ec15f008f53) D:\WINDOWS\system32\drivers\aswSnx.sys
12:47:43.0156 2568 aswSnx - ok
12:47:43.0265 2568 aswSP (b32873e5a1443c0a1e322266e203bf10) D:\WINDOWS\system32\drivers\aswSP.sys
12:47:43.0343 2568 aswSP - ok
12:47:43.0375 2568 aswTdi (6ff544175a9180c5d88534d3d9c9a9f7) D:\WINDOWS\system32\drivers\aswTdi.sys
12:47:43.0375 2568 aswTdi - ok
12:47:43.0406 2568 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) D:\WINDOWS\system32\DRIVERS\asyncmac.sys
12:47:43.0406 2568 AsyncMac - ok
12:47:43.0453 2568 atapi (9f3a2f5aa6875c72bf062c712cfa2674) D:\WINDOWS\system32\DRIVERS\atapi.sys
12:47:43.0453 2568 atapi - ok
12:47:43.0453 2568 Atdisk - ok
12:47:43.0500 2568 Atmarpc (9916c1225104ba14794209cfa8012159) D:\WINDOWS\system32\DRIVERS\atmarpc.sys
12:47:43.0515 2568 Atmarpc - ok
12:47:43.0562 2568 AudioSrv (de31b88962a8645dba5a37b993e7b0f1) D:\WINDOWS\System32\audiosrv.dll
12:47:43.0578 2568 AudioSrv - ok
12:47:43.0609 2568 audstub (d9f724aa26c010a217c97606b160ed68) D:\WINDOWS\system32\DRIVERS\audstub.sys
12:47:43.0609 2568 audstub - ok
12:47:43.0718 2568 avast! Antivirus (4041d31508a2a084dfb42c595854090f) D:\Program Files\AVAST Software\Avast\AvastSvc.exe
12:47:43.0734 2568 avast! Antivirus - ok
12:47:43.0765 2568 Beep (da1f27d85e0d1525f6621372e7b685e9) D:\WINDOWS\system32\drivers\Beep.sys
12:47:43.0765 2568 Beep - ok
12:47:43.0921 2568 BITS (19395d092fd85ddc2d9c7729cf5a2ac8) D:\WINDOWS\system32\qmgr.dll
12:47:44.0078 2568 BITS - ok
12:47:44.0125 2568 Browser (249276d3ef1e74b992299cb96099e4d7) D:\WINDOWS\System32\browser.dll
12:47:44.0156 2568 Browser - ok
12:47:44.0187 2568 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) D:\WINDOWS\system32\drivers\cbidf2k.sys
12:47:44.0187 2568 cbidf2k - ok
12:47:44.0187 2568 cd20xrnt - ok
12:47:44.0218 2568 Cdaudio (c1b486a7658353d33a10cc15211a873b) D:\WINDOWS\system32\drivers\Cdaudio.sys
12:47:44.0218 2568 Cdaudio - ok
12:47:44.0250 2568 Cdfs (c885b02847f5d2fd45a24e219ed93b32) D:\WINDOWS\system32\drivers\Cdfs.sys
12:47:44.0250 2568 Cdfs - ok
12:47:44.0312 2568 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) D:\WINDOWS\system32\DRIVERS\cdrom.sys
12:47:44.0328 2568 Cdrom - ok
12:47:44.0343 2568 Changer - ok
12:47:44.0375 2568 CiSvc (e390dc1d7c461d7d56ec53402f329928) D:\WINDOWS\system32\cisvc.exe
12:47:44.0375 2568 CiSvc - ok
12:47:44.0390 2568 ClipSrv (064507a8dfa8c5c7e2ffddd3e6f424fa) D:\WINDOWS\system32\clipsrv.exe
12:47:44.0406 2568 ClipSrv - ok
12:47:44.0515 2568 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:47:44.0656 2568 clr_optimization_v2.0.50727_32 - ok
12:47:44.0656 2568 CmdIde - ok
12:47:45.0062 2568 cmudax (29bd38be08933ad21b7ac8693115cd4d) D:\WINDOWS\system32\drivers\cmudax.sys
12:47:45.0437 2568 cmudax - ok
12:47:45.0437 2568 COMSysApp - ok
12:47:45.0453 2568 Cpqarray - ok
12:47:45.0515 2568 CryptSvc (f3ab0933cbd166d271992f411c27ccaf) D:\WINDOWS\System32\cryptsvc.dll
12:47:45.0531 2568 CryptSvc - ok
12:47:45.0546 2568 dac2w2k - ok
12:47:45.0546 2568 dac960nt - ok
12:47:45.0687 2568 DcomLaunch (be27674d1cbc3214aec84b4336a38bbf) D:\WINDOWS\system32\rpcss.dll
12:47:45.0828 2568 DcomLaunch - ok
12:47:45.0890 2568 Dhcp (8c9a53e285ac5e6704844d0459ec85be) D:\WINDOWS\System32\dhcpcsvc.dll
12:47:45.0937 2568 Dhcp - ok
12:47:45.0953 2568 Disk (044452051f3e02e7963599fc8f4f3e25) D:\WINDOWS\system32\DRIVERS\disk.sys
12:47:45.0968 2568 Disk - ok
12:47:45.0984 2568 dmadmin - ok
12:47:46.0218 2568 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) D:\WINDOWS\system32\drivers\dmboot.sys
12:47:46.0453 2568 dmboot - ok
12:47:46.0500 2568 dmio (fff1720af51171f32f1ead5cf71f2810) D:\WINDOWS\system32\drivers\dmio.sys
12:47:46.0546 2568 dmio - ok
12:47:46.0562 2568 dmload (e9317282a63ca4d188c0df5e09c6ac5f) D:\WINDOWS\system32\drivers\dmload.sys
12:47:46.0562 2568 dmload - ok
12:47:46.0593 2568 dmserver (2bfefe9e865655a76982f050450b9591) D:\WINDOWS\System32\dmserver.dll
12:47:46.0609 2568 dmserver - ok
12:47:46.0656 2568 DMusic (8a208dfcf89792a484e76c40e5f50b45) D:\WINDOWS\system32\drivers\DMusic.sys
12:47:46.0671 2568 DMusic - ok
12:47:46.0718 2568 Dnscache (dfaa406bf19f4ee806a6f8d4342137f7) D:\WINDOWS\System32\dnsrslvr.dll
12:47:46.0734 2568 Dnscache - ok
12:47:46.0796 2568 Dot3svc (4a3e2bd20157a0946751229e92eb8621) D:\WINDOWS\System32\dot3svc.dll
12:47:46.0843 2568 Dot3svc - ok
12:47:46.0859 2568 dpti2o - ok
12:47:46.0875 2568 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) D:\WINDOWS\system32\drivers\drmkaud.sys
12:47:46.0875 2568 drmkaud - ok
12:47:46.0890 2568 EapHost (0887d9c2be8d940778cad1e3b85f2a41) D:\WINDOWS\System32\eapsvc.dll
12:47:46.0921 2568 EapHost - ok
12:47:46.0968 2568 ERSvc (a2a4912798f2be706abadd3d30800d16) D:\WINDOWS\System32\ersvc.dll
12:47:46.0984 2568 ERSvc - ok
12:47:47.0031 2568 Eventlog (9ef697af07bb8dd82c3b02ca953a95b7) D:\WINDOWS\system32\services.exe
12:47:47.0078 2568 Eventlog - ok
12:47:47.0171 2568 EventSystem (a371f11ef07653591c8de26afb13ce7f) D:\WINDOWS\system32\es.dll
12:47:47.0265 2568 EventSystem - ok
12:47:47.0328 2568 Fastfat (38d332a6d56af32635675f132548343e) D:\WINDOWS\system32\drivers\Fastfat.sys
12:47:47.0359 2568 Fastfat - ok
12:47:47.0421 2568 FastUserSwitchingCompatibility (ee9a2b9ea968a792a053c9d1a86bf870) D:\WINDOWS\System32\shsvcs.dll
12:47:47.0484 2568 FastUserSwitchingCompatibility - ok
12:47:47.0515 2568 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) D:\WINDOWS\system32\DRIVERS\fdc.sys
12:47:47.0531 2568 Fdc - ok
12:47:47.0546 2568 Fips (ac366695a0796560aa37215ad5762aaf) D:\WINDOWS\system32\drivers\Fips.sys
12:47:47.0546 2568 Fips - ok
12:47:47.0562 2568 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) D:\WINDOWS\system32\drivers\Flpydisk.sys
12:47:47.0562 2568 Flpydisk - ok
12:47:47.0625 2568 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) D:\WINDOWS\system32\drivers\fltmgr.sys
12:47:47.0671 2568 FltMgr - ok
12:47:47.0750 2568 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) D:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
12:47:47.0765 2568 FontCache3.0.0.0 - ok
12:47:47.0781 2568 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) D:\WINDOWS\system32\drivers\Fs_Rec.sys
12:47:47.0781 2568 Fs_Rec - ok
12:47:47.0828 2568 Ftdisk (4e664d8541db4a66b73a24257e322e1f) D:\WINDOWS\system32\DRIVERS\ftdisk.sys
12:47:47.0875 2568 Ftdisk - ok
12:47:47.0875 2568 GMSIPCI - ok
12:47:47.0921 2568 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) D:\WINDOWS\system32\DRIVERS\msgpc.sys
12:47:47.0937 2568 Gpc - ok
12:47:48.0046 2568 gupdate (f02a533f517eb38333cb12a9e8963773) D:\Program Files\Google\Update\GoogleUpdate.exe
12:47:48.0093 2568 gupdate - ok
12:47:48.0109 2568 gupdatem (f02a533f517eb38333cb12a9e8963773) D:\Program Files\Google\Update\GoogleUpdate.exe
12:47:48.0109 2568 gupdatem - ok
12:47:48.0156 2568 HDAudBus (573c7d0a32852b48f3058cfd8026f511) D:\WINDOWS\system32\DRIVERS\HDAudBus.sys
12:47:48.0203 2568 HDAudBus - ok
12:47:48.0281 2568 helpsvc (fcfe31fb75f8a6295b6b0af87a626282) D:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
12:47:48.0296 2568 helpsvc - ok
12:47:48.0312 2568 HidServ - ok
12:47:48.0343 2568 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) D:\WINDOWS\system32\DRIVERS\hidusb.sys
12:47:48.0343 2568 HidUsb - ok
12:47:48.0390 2568 hkmsvc (7a6b320928f86bc851530d63c82965d9) D:\WINDOWS\System32\kmsvc.dll
12:47:48.0421 2568 hkmsvc - ok
12:47:48.0421 2568 hpn - ok
12:47:48.0546 2568 HTTP (f80a415ef82cd06ffaf0d971528ead38) D:\WINDOWS\system32\Drivers\HTTP.sys
12:47:48.0625 2568 HTTP - ok
12:47:48.0640 2568 HTTPFilter (58fe2f2da3bc5573f4a35b3760d3125f) D:\WINDOWS\System32\w3ssl.dll
12:47:48.0656 2568 HTTPFilter - ok
12:47:48.0671 2568 i2omgmt - ok
12:47:48.0671 2568 i2omp - ok
12:47:48.0703 2568 i8042prt (c528e27945367191e7bae364930b6932) D:\WINDOWS\system32\DRIVERS\i8042prt.sys
12:47:48.0734 2568 i8042prt - ok
12:47:49.0015 2568 idsvc (c01ac32dc5c03076cfb852cb5da5229c) D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
12:47:49.0281 2568 idsvc - ok
12:47:49.0343 2568 Imapi (083a052659f5310dd8b6a6cb05edcf8e) D:\WINDOWS\system32\DRIVERS\imapi.sys
12:47:49.0343 2568 Imapi - ok
12:47:49.0421 2568 ImapiService (f7b93aafad33b2320954c17e26c8d361) D:\WINDOWS\system32\imapi.exe
12:47:49.0468 2568 ImapiService - ok
12:47:49.0468 2568 ini910u - ok
12:47:49.0500 2568 IntelIde (57d928e548b38502abba7a77a6eb7312) D:\WINDOWS\system32\DRIVERS\intelide.sys
12:47:49.0500 2568 IntelIde - ok
12:47:49.0531 2568 intelppm (27b290d632af2cf3cf40bfddb7370985) D:\WINDOWS\system32\DRIVERS\intelppm.sys
12:47:49.0546 2568 intelppm - ok
12:47:49.0562 2568 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) D:\WINDOWS\system32\drivers\ip6fw.sys
12:47:49.0578 2568 Ip6Fw - ok
12:47:49.0609 2568 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) D:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
12:47:49.0625 2568 IpFilterDriver - ok
12:47:49.0640 2568 IpInIp (b87ab476dcf76e72010632b5550955f5) D:\WINDOWS\system32\DRIVERS\ipinip.sys
12:47:49.0656 2568 IpInIp - ok
12:47:49.0718 2568 IpNat (cc748ea12c6effde940ee98098bf96bb) D:\WINDOWS\system32\DRIVERS\ipnat.sys
12:47:49.0765 2568 IpNat - ok
12:47:49.0812 2568 IPSec (23c74d75e36e7158768dd63d92789a91) D:\WINDOWS\system32\DRIVERS\ipsec.sys
12:47:49.0843 2568 IPSec - ok
12:47:49.0875 2568 irda (aca5e7b54409f9cb5eed97ed0c81120e) D:\WINDOWS\system32\DRIVERS\irda.sys
12:47:49.0906 2568 irda - ok
12:47:49.0921 2568 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) D:\WINDOWS\system32\DRIVERS\irenum.sys
12:47:49.0921 2568 IRENUM - ok
12:47:49.0953 2568 Irmon (8024ea8c5b2d2a4d201f418b0aadb804) D:\WINDOWS\System32\irmon.dll
12:47:49.0968 2568 Irmon - ok
12:47:50.0015 2568 irsir (0501f0b9ab08425f8c0eacbdcc04aa32) D:\WINDOWS\system32\DRIVERS\irsir.sys
12:47:50.0015 2568 irsir - ok
12:47:50.0046 2568 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) D:\WINDOWS\system32\DRIVERS\isapnp.sys
12:47:50.0062 2568 isapnp - ok
12:47:50.0093 2568 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) D:\WINDOWS\system32\DRIVERS\kbdclass.sys
12:47:50.0093 2568 Kbdclass - ok
12:47:50.0171 2568 kmixer (692bcf44383d056aed41b045a323d378) D:\WINDOWS\system32\drivers\kmixer.sys
12:47:50.0234 2568 kmixer - ok
12:47:50.0281 2568 KSecDD (b467646c54cc746128904e1654c750c1) D:\WINDOWS\system32\drivers\KSecDD.sys
12:47:50.0312 2568 KSecDD - ok
12:47:50.0375 2568 lanmanserver (3428e8f86f8add36b42fb23542c7b3e4) D:\WINDOWS\System32\srvsvc.dll
12:47:50.0421 2568 lanmanserver - ok
12:47:50.0484 2568 lanmanworkstation (936c1d110232d23b621cb0196e4f80f0) D:\WINDOWS\System32\wkssvc.dll
12:47:50.0546 2568 lanmanworkstation - ok
12:47:50.0578 2568 LANPkt (8bbfbf256493035ae6105b334fce99df) D:\WINDOWS\system32\DRIVERS\LANPkt.sys
12:47:50.0578 2568 LANPkt - ok
12:47:50.0593 2568 lbrtfdc - ok
12:47:50.0625 2568 LmHosts (0ab159f536e3e8f7f07113702a07cca5) D:\WINDOWS\System32\lmhsvc.dll
12:47:50.0640 2568 LmHosts - ok
12:47:50.0796 2568 MDM (11f714f85530a2bd134074dc30e99fca) D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
12:47:50.0890 2568 MDM - ok
12:47:50.0921 2568 Messenger (221cd1c815b8a6b79389c3f5d1018de8) D:\WINDOWS\System32\msgsvc.dll
12:47:50.0968 2568 Messenger - ok
12:47:51.0000 2568 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) D:\WINDOWS\system32\drivers\mnmdd.sys
12:47:51.0000 2568 mnmdd - ok
12:47:51.0031 2568 mnmsrvc (9a57d046f88f4b69751b11fd40088a61) D:\WINDOWS\system32\mnmsrvc.exe
12:47:51.0046 2568 mnmsrvc - ok
12:47:51.0078 2568 Modem (44032b0c6d9954d3fd26438330b99ee7) D:\WINDOWS\system32\drivers\Modem.sys
12:47:51.0078 2568 Modem - ok
12:47:51.0093 2568 Mouclass (4cb582831dbde63ce43b45d771218374) D:\WINDOWS\system32\DRIVERS\mouclass.sys
12:47:51.0109 2568 Mouclass - ok
12:47:51.0140 2568 mouhid (bb269eba740737ab749b214d568b6812) D:\WINDOWS\system32\DRIVERS\mouhid.sys
12:47:51.0140 2568 mouhid - ok
12:47:51.0171 2568 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) D:\WINDOWS\system32\drivers\MountMgr.sys
12:47:51.0171 2568 MountMgr - ok
12:47:51.0171 2568 mraid35x - ok
12:47:51.0234 2568 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) D:\WINDOWS\system32\DRIVERS\mrxdav.sys
12:47:51.0296 2568 MRxDAV - ok
12:47:51.0468 2568 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) D:\WINDOWS\system32\DRIVERS\mrxsmb.sys
12:47:51.0609 2568 MRxSmb - ok
12:47:51.0656 2568 MSDTC (6db4d1521caba9a5ffab54ade0ae867d) D:\WINDOWS\system32\msdtc.exe
12:47:51.0656 2568 MSDTC - ok
12:47:51.0687 2568 Msfs (c941ea2454ba8350021d774daf0f1027) D:\WINDOWS\system32\drivers\Msfs.sys
12:47:51.0687 2568 Msfs - ok
12:47:51.0687 2568 MSIServer - ok
12:47:51.0718 2568 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) D:\WINDOWS\system32\drivers\MSKSSRV.sys
12:47:51.0718 2568 MSKSSRV - ok
12:47:51.0734 2568 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) D:\WINDOWS\system32\drivers\MSPCLOCK.sys
12:47:51.0734 2568 MSPCLOCK - ok
12:47:51.0750 2568 MSPQM (bad59648ba099da4a17680b39730cb3d) D:\WINDOWS\system32\drivers\MSPQM.sys
12:47:51.0750 2568 MSPQM - ok
12:47:51.0765 2568 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) D:\WINDOWS\system32\DRIVERS\mssmbios.sys
12:47:51.0781 2568 mssmbios - ok
12:47:51.0828 2568 Mup (de6a75f5c270e756c5508d94b6cf68f5) D:\WINDOWS\system32\drivers\Mup.sys
12:47:51.0875 2568 Mup - ok
12:47:51.0984 2568 napagent (6ea362e9db03d44f6b996f4d8be237e9) D:\WINDOWS\System32\qagentrt.dll
12:47:52.0078 2568 napagent - ok
12:47:52.0156 2568 NDIS (1df7f42665c94b825322fae71721130d) D:\WINDOWS\system32\drivers\NDIS.sys
12:47:52.0203 2568 NDIS - ok
12:47:52.0234 2568 NdisTapi (0109c4f3850dfbab279542515386ae22) D:\WINDOWS\system32\DRIVERS\ndistapi.sys
12:47:52.0234 2568 NdisTapi - ok
12:47:52.0265 2568 Ndisuio (f927a4434c5028758a842943ef1a3849) D:\WINDOWS\system32\DRIVERS\ndisuio.sys
12:47:52.0281 2568 Ndisuio - ok
12:47:52.0312 2568 NdisWan (edc1531a49c80614b2cfda43ca8659ab) D:\WINDOWS\system32\DRIVERS\ndiswan.sys
12:47:52.0343 2568 NdisWan - ok
12:47:52.0375 2568 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) D:\WINDOWS\system32\drivers\NDProxy.sys
12:47:52.0406 2568 NDProxy - ok
12:47:52.0421 2568 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) D:\WINDOWS\system32\DRIVERS\netbios.sys
12:47:52.0437 2568 NetBIOS - ok
12:47:52.0531 2568 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) D:\WINDOWS\system32\DRIVERS\netbt.sys
12:47:52.0578 2568 NetBT - ok
12:47:52.0640 2568 NetDDE (933de774986ec85e48210c44ab431de6) D:\WINDOWS\system32\netdde.exe
12:47:52.0687 2568 NetDDE - ok
12:47:52.0703 2568 NetDDEdsdm (933de774986ec85e48210c44ab431de6) D:\WINDOWS\system32\netdde.exe
12:47:52.0703 2568 NetDDEdsdm - ok
12:47:52.0718 2568 Netlogon (ed0a176354487ceed65b80a7148ab739) D:\WINDOWS\system32\lsass.exe
12:47:52.0734 2568 Netlogon - ok
12:47:52.0812 2568 Netman (72e1e9e2977be08bdeedb6d8fd9d4d40) D:\WINDOWS\System32\netman.dll
12:47:52.0875 2568 Netman - ok
12:47:52.0968 2568 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
12:47:53.0031 2568 NetTcpPortSharing - ok
12:47:53.0125 2568 Nla (39ee7c3bfbc64ba87cc8cf67386e814c) D:\WINDOWS\System32\mswsock.dll
12:47:53.0203 2568 Nla - ok
12:47:53.0250 2568 Npfs (3182d64ae053d6fb034f44b6def8034a) D:\WINDOWS\system32\drivers\Npfs.sys
12:47:53.0250 2568 Npfs - ok
12:47:53.0250 2568 NTACCESS - ok
12:47:53.0437 2568 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) D:\WINDOWS\system32\drivers\Ntfs.sys
12:47:53.0593 2568 Ntfs - ok
12:47:53.0609 2568 NtLmSsp (ed0a176354487ceed65b80a7148ab739) D:\WINDOWS\system32\lsass.exe
12:47:53.0609 2568 NtLmSsp - ok
12:47:53.0765 2568 NtmsSvc (023dd70573d644f3d9c8b1258a7bfd08) D:\WINDOWS\system32\ntmssvc.dll
12:47:53.0906 2568 NtmsSvc - ok
12:47:53.0921 2568 Null (73c1e1f395918bc2c6dd67af7591a3ad) D:\WINDOWS\system32\drivers\Null.sys
12:47:53.0937 2568 Null - ok
12:47:57.0625 2568 nv (4b54dcd6adee535df80f07c59ddd8f14) D:\WINDOWS\system32\DRIVERS\nv4_mini.sys
12:48:01.0265 2568 nv - ok
12:48:01.0562 2568 NVSvc (0573c75a2895d973ea6ef2495620ba49) D:\WINDOWS\system32\nvsvc32.exe
12:48:01.0671 2568 NVSvc - ok
12:48:02.0390 2568 nvUpdatusService (9c84945feee40ea42d3bca5c22250d47) D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
12:48:03.0015 2568 nvUpdatusService - ok
12:48:03.0234 2568 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) D:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
12:48:03.0234 2568 NwlnkFlt - ok
12:48:03.0265 2568 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) D:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
12:48:03.0281 2568 NwlnkFwd - ok
12:48:03.0359 2568 ose (7a56cf3e3f12e8af599963b16f50fb6a) D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
12:48:03.0406 2568 ose - ok
12:48:03.0453 2568 Parport (46f8db73b4a53e543f8e371dc7c75bae) D:\WINDOWS\system32\DRIVERS\parport.sys
12:48:03.0500 2568 Parport - ok
12:48:03.0515 2568 PartMgr (beb3ba25197665d82ec7065b724171c6) D:\WINDOWS\system32\drivers\PartMgr.sys
12:48:03.0515 2568 PartMgr - ok
12:48:03.0546 2568 ParVdm (1fae19d0457176318bba4a8795656ebc) D:\WINDOWS\system32\drivers\ParVdm.sys
12:48:03.0546 2568 ParVdm - ok
12:48:03.0578 2568 PCI (6ce351d149cb4befc702951e471e1730) D:\WINDOWS\system32\DRIVERS\pci.sys
12:48:03.0609 2568 PCI - ok
12:48:03.0609 2568 PCIDump - ok
12:48:03.0640 2568 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) D:\WINDOWS\system32\DRIVERS\pciide.sys
12:48:03.0640 2568 PCIIde - ok
12:48:03.0687 2568 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) D:\WINDOWS\system32\drivers\Pcmcia.sys
12:48:03.0703 2568 Pcmcia - ok
12:48:03.0718 2568 PDCOMP - ok
12:48:03.0718 2568 PDFRAME - ok
12:48:03.0734 2568 PDRELI - ok
12:48:03.0734 2568 PDRFRAME - ok
12:48:03.0750 2568 perc2 - ok
12:48:03.0750 2568 perc2hib - ok
12:48:03.0828 2568 PlugPlay (9ef697af07bb8dd82c3b02ca953a95b7) D:\WINDOWS\system32\services.exe
12:48:03.0828 2568 PlugPlay - ok
12:48:03.0859 2568 PolicyAgent (ed0a176354487ceed65b80a7148ab739) D:\WINDOWS\system32\lsass.exe
12:48:03.0859 2568 PolicyAgent - ok
12:48:03.0890 2568 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) D:\WINDOWS\system32\DRIVERS\raspptp.sys
12:48:03.0921 2568 PptpMiniport - ok
12:48:03.0921 2568 ProtectedStorage (ed0a176354487ceed65b80a7148ab739) D:\WINDOWS\system32\lsass.exe
12:48:03.0921 2568 ProtectedStorage - ok
12:48:03.0953 2568 PSched (09298ec810b07e5d582cb3a3f9255424) D:\WINDOWS\system32\DRIVERS\psched.sys
12:48:03.0984 2568 PSched - ok
12:48:04.0000 2568 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) D:\WINDOWS\system32\DRIVERS\ptilink.sys
12:48:04.0031 2568 Ptilink - ok
12:48:04.0062 2568 PxHelp20 (153d02480a0a2f45785522e814c634b6) D:\WINDOWS\system32\Drivers\PxHelp20.sys
12:48:04.0078 2568 PxHelp20 - ok
12:48:04.0078 2568 ql1080 - ok
12:48:04.0093 2568 Ql10wnt - ok
12:48:04.0093 2568 ql12160 - ok
12:48:04.0109 2568 ql1240 - ok
12:48:04.0109 2568 ql1280 - ok
12:48:04.0125 2568 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) D:\WINDOWS\system32\DRIVERS\rasacd.sys
12:48:04.0140 2568 RasAcd - ok
12:48:04.0187 2568 RasAuto (2b5e44ea009f2f374b980e1e9a70635d) D:\WINDOWS\System32\rasauto.dll
12:48:04.0234 2568 RasAuto - ok
12:48:04.0265 2568 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) D:\WINDOWS\system32\DRIVERS\rasirda.sys
12:48:04.0265 2568 Rasirda - ok
12:48:04.0296 2568 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) D:\WINDOWS\system32\DRIVERS\rasl2tp.sys
12:48:04.0328 2568 Rasl2tp - ok
12:48:04.0406 2568 RasMan (d57554c664b64604bd1ee13ea2c07e77) D:\WINDOWS\System32\rasmans.dll
12:48:04.0468 2568 RasMan - ok
12:48:04.0500 2568 RasPppoe (5bc962f2654137c9909c3d4603587dee) D:\WINDOWS\system32\DRIVERS\raspppoe.sys
12:48:04.0531 2568 RasPppoe - ok
12:48:04.0546 2568 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) D:\WINDOWS\system32\DRIVERS\raspti.sys
12:48:04.0562 2568 Raspti - ok
12:48:04.0625 2568 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) D:\WINDOWS\system32\DRIVERS\rdbss.sys
12:48:04.0671 2568 Rdbss - ok
12:48:04.0687 2568 RDPCDD (4912d5b403614ce99c28420f75353332) D:\WINDOWS\system32\DRIVERS\RDPCDD.sys
12:48:04.0687 2568 RDPCDD - ok
12:48:04.0765 2568 rdpdr (15cabd0f7c00c47c70124907916af3f1) D:\WINDOWS\system32\DRIVERS\rdpdr.sys
12:48:04.0828 2568 rdpdr - ok
12:48:04.0906 2568 RDPWD (6589db6e5969f8eee594cf71171c5028) D:\WINDOWS\system32\drivers\RDPWD.sys
12:48:04.0953 2568 RDPWD - ok
12:48:05.0015 2568 RDSessMgr (c0d9d9711cb74ee9bc66353d8cbdab0e) D:\WINDOWS\system32\sessmgr.exe
12:48:05.0062 2568 RDSessMgr - ok
12:48:05.0093 2568 redbook (611bfd220305be3a85ae876ea47d4aa5) D:\WINDOWS\system32\DRIVERS\redbook.sys
12:48:05.0125 2568 redbook - ok
12:48:05.0140 2568 RemoteAccess (127c26b5371651043450e52542099aba) D:\WINDOWS\System32\mprdim.dll
12:48:05.0171 2568 RemoteAccess - ok
12:48:05.0203 2568 RemoteRegistry (8f31505484a190d5b22274708799f4ec) D:\WINDOWS\system32\regsvc.dll
12:48:05.0250 2568 RemoteRegistry - ok
12:48:05.0265 2568 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) D:\WINDOWS\system32\Drivers\RootMdm.sys
12:48:05.0265 2568 ROOTMODEM - ok
12:48:05.0312 2568 RpcLocator (718b3bdc0bc3c2f7d065a53d26202af9) D:\WINDOWS\system32\locator.exe
12:48:05.0343 2568 RpcLocator - ok
12:48:05.0500 2568 RpcSs (be27674d1cbc3214aec84b4336a38bbf) D:\WINDOWS\system32\rpcss.dll
12:48:05.0515 2568 RpcSs - ok
12:48:05.0578 2568 RSVP (09ab2e71e58b078038e3bfdba7ffc984) D:\WINDOWS\system32\rsvp.exe
12:48:05.0640 2568 RSVP - ok
12:48:05.0703 2568 SamSs (ed0a176354487ceed65b80a7148ab739) D:\WINDOWS\system32\lsass.exe
12:48:05.0703 2568 SamSs - ok
12:48:05.0734 2568 SCardSvr (410046e401eb11e1e6749e9deea41d4a) D:\WINDOWS\System32\SCardSvr.exe
12:48:05.0781 2568 SCardSvr - ok
12:48:05.0859 2568 Schedule (3ff232a7731621b8902d81d42418c93c) D:\WINDOWS\system32\schedsvc.dll
12:48:05.0921 2568 Schedule - ok
12:48:05.0953 2568 Secdrv (90a3935d05b494a5a39d37e71f09a677) D:\WINDOWS\system32\DRIVERS\secdrv.sys
12:48:05.0968 2568 Secdrv - ok
12:48:06.0000 2568 seclogon (477e2c3cc5e4a0d635bcb0ea8dcac3c6) D:\WINDOWS\System32\seclogon.dll
12:48:06.0015 2568 seclogon - ok
12:48:06.0046 2568 SENS (a530b75c10c23c9ab28fdb6ce719e21f) D:\WINDOWS\system32\sens.dll
12:48:06.0062 2568 SENS - ok
12:48:06.0078 2568 serenum (0f29512ccd6bead730039fb4bd2c85ce) D:\WINDOWS\system32\DRIVERS\serenum.sys
12:48:06.0093 2568 serenum - ok
12:48:06.0125 2568 Serial (b842729337c9b921615c40d3c1a1af96) D:\WINDOWS\system32\DRIVERS\serial.sys
12:48:06.0156 2568 Serial - ok
12:48:06.0187 2568 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) D:\WINDOWS\system32\drivers\Sfloppy.sys
12:48:06.0187 2568 Sfloppy - ok
12:48:06.0296 2568 SharedAccess (f58faca9621d2db01bd0927d9a0a208e) D:\WINDOWS\System32\ipnathlp.dll
12:48:06.0406 2568 SharedAccess - ok
12:48:06.0468 2568 ShellHWDetection (ee9a2b9ea968a792a053c9d1a86bf870) D:\WINDOWS\System32\shsvcs.dll
12:48:06.0484 2568 ShellHWDetection - ok
12:48:06.0484 2568 Simbad - ok
12:48:07.0468 2568 Skype C2C Service (2a99850c2a6edd6c6602e822c716edaf) D:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
12:48:08.0328 2568 Skype C2C Service - ok
12:48:08.0421 2568 SkypeUpdate (17eab7852ff9f15fbaab4e95efc0b812) D:\Program Files\Skype\Updater\Updater.exe
12:48:08.0515 2568 SkypeUpdate - ok
12:48:08.0718 2568 Sparrow - ok
12:48:08.0750 2568 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) D:\WINDOWS\system32\drivers\splitter.sys
12:48:08.0750 2568 splitter - ok
12:48:08.0781 2568 Spooler (60784f891563fb1b767f70117fc2428f) D:\WINDOWS\system32\spoolsv.exe
12:48:08.0828 2568 Spooler - ok
12:48:08.0875 2568 sr (94610c8653635e4459316a0050d55ce7) D:\WINDOWS\system32\DRIVERS\sr.sys
12:48:08.0890 2568 sr - ok
12:48:08.0968 2568 srservice (35b91147124f64ac8081a2edb9ea4dee) D:\WINDOWS\system32\srsvc.dll
12:48:09.0046 2568 srservice - ok
12:48:09.0156 2568 Srv (47ddfc2f003f7f9f0592c6874962a2e7) D:\WINDOWS\system32\DRIVERS\srv.sys
12:48:09.0250 2568 Srv - ok
12:48:09.0296 2568 SSDPSRV (becd5271dc4e3b7c3d035f790fcbc1e5) D:\WINDOWS\System32\ssdpsrv.dll
12:48:09.0343 2568 SSDPSRV - ok
12:48:09.0453 2568 stisvc (c1cdd9275f6a115bb0ae1d55d8d27ba6) D:\WINDOWS\system32\wiaservc.dll
12:48:09.0562 2568 stisvc - ok
12:48:09.0593 2568 swenum (3941d127aef12e93addf6fe6ee027e0f) D:\WINDOWS\system32\DRIVERS\swenum.sys
12:48:09.0609 2568 swenum - ok
12:48:09.0640 2568 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) D:\WINDOWS\system32\drivers\swmidi.sys
12:48:09.0671 2568 swmidi - ok
12:48:09.0671 2568 SwPrv - ok
12:48:09.0687 2568 symc810 - ok
12:48:09.0687 2568 symc8xx - ok
12:48:09.0703 2568 sym_hi - ok
12:48:09.0703 2568 sym_u3 - ok
12:48:09.0734 2568 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) D:\WINDOWS\system32\drivers\sysaudio.sys
12:48:09.0765 2568 sysaudio - ok
12:48:09.0796 2568 SysmonLog (ce06f01b88ace199a1bf460cac29c110) D:\WINDOWS\system32\smlogsvc.exe
12:48:09.0843 2568 SysmonLog - ok
12:48:09.0937 2568 TapiSrv (c2546cd7a398476f9df5614b2ae160e8) D:\WINDOWS\System32\tapisrv.dll
12:48:10.0031 2568 TapiSrv - ok
12:48:10.0156 2568 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) D:\WINDOWS\system32\DRIVERS\tcpip.sys
12:48:10.0265 2568 Tcpip - ok
12:48:10.0296 2568 TDPIPE (6471a66807f5e104e4885f5b67349397) D:\WINDOWS\system32\drivers\TDPIPE.sys
12:48:10.0312 2568 TDPIPE - ok
12:48:10.0328 2568 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) D:\WINDOWS\system32\drivers\TDTCP.sys
12:48:10.0343 2568 TDTCP - ok
12:48:10.0359 2568 TermDD (88155247177638048422893737429d9e) D:\WINDOWS\system32\DRIVERS\termdd.sys
12:48:10.0375 2568 TermDD - ok
12:48:10.0484 2568 TermService (a75dd6fc3dbee4fff5ebc9f2c28bb66e) D:\WINDOWS\System32\termsrv.dll
12:48:10.0609 2568 TermService - ok
12:48:10.0671 2568 Themes (ee9a2b9ea968a792a053c9d1a86bf870) D:\WINDOWS\System32\shsvcs.dll
12:48:10.0687 2568 Themes - ok
12:48:10.0734 2568 TlntSvr (cd0cc7b167d78043a41c98d4921efb54) D:\WINDOWS\system32\tlntsvr.exe
12:48:10.0765 2568 TlntSvr - ok
12:48:10.0781 2568 TosIde - ok
12:48:10.0828 2568 TrkWks (f45e10e594693bd686d30d9cd7f728ac) D:\WINDOWS\system32\trkwks.dll
12:48:10.0875 2568 TrkWks - ok
12:48:10.0906 2568 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) D:\WINDOWS\system32\drivers\Udfs.sys
12:48:10.0906 2568 Udfs - ok
12:48:10.0906 2568 ultra - ok
12:48:11.0125 2568 Update (402ddc88356b1bac0ee3dd1580c76a31) D:\WINDOWS\system32\DRIVERS\update.sys
12:48:11.0234 2568 Update - ok
12:48:11.0312 2568 upnphost (651bd90dcee5b7bdc74a2eb7c9266f9e) D:\WINDOWS\System32\upnphost.dll
12:48:11.0468 2568 upnphost - ok
12:48:11.0484 2568 UPS (20a0f6a11959e92908717d09e87d670d) D:\WINDOWS\System32\ups.exe
12:48:11.0515 2568 UPS - ok
12:48:11.0546 2568 usbccgp (173f317ce0db8e21322e71b7e60a27e8) D:\WINDOWS\system32\DRIVERS\usbccgp.sys
12:48:11.0562 2568 usbccgp - ok
12:48:11.0593 2568 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) D:\WINDOWS\system32\DRIVERS\usbehci.sys
12:48:11.0593 2568 usbehci - ok
12:48:11.0640 2568 usbhub (1ab3cdde553b6e064d2e754efe20285c) D:\WINDOWS\system32\DRIVERS\usbhub.sys
12:48:11.0656 2568 usbhub - ok
12:48:11.0671 2568 usbprint (a717c8721046828520c9edf31288fc00) D:\WINDOWS\system32\DRIVERS\usbprint.sys
12:48:11.0687 2568 usbprint - ok
12:48:11.0703 2568 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) D:\WINDOWS\system32\DRIVERS\usbscan.sys
12:48:11.0718 2568 usbscan - ok
12:48:11.0734 2568 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
12:48:11.0750 2568 USBSTOR - ok
12:48:11.0781 2568 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) D:\WINDOWS\system32\DRIVERS\usbuhci.sys
12:48:11.0796 2568 usbuhci - ok
12:48:11.0812 2568 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) D:\WINDOWS\System32\drivers\vga.sys
12:48:11.0812 2568 VgaSave - ok
12:48:11.0828 2568 ViaIde - ok
12:48:11.0843 2568 VolSnap (28a4b296b47782173c346e376cb374d1) D:\WINDOWS\system32\drivers\VolSnap.sys
12:48:11.0859 2568 VolSnap - ok
12:48:11.0953 2568 VSS (d6ba1a63d9e00933f1cd2a885573afb2) D:\WINDOWS\System32\vssvc.exe
12:48:12.0062 2568 VSS - ok
12:48:12.0125 2568 W32Time (fa4e1cdba256787f2149f4aad07bc91f) D:\WINDOWS\system32\w32time.dll
12:48:12.0187 2568 W32Time - ok
12:48:12.0234 2568 Wanarp (e20b95baedb550f32dd489265c1da1f6) D:\WINDOWS\system32\DRIVERS\wanarp.sys
12:48:12.0250 2568 Wanarp - ok
12:48:12.0250 2568 WDICA - ok
12:48:12.0312 2568 wdmaud (6768acf64b18196494413695f0c3a00f) D:\WINDOWS\system32\drivers\wdmaud.sys
12:48:12.0359 2568 wdmaud - ok
12:48:12.0421 2568 WebClient (47ae51048a82dfa1cd6b51d369f7e169) D:\WINDOWS\System32\webclnt.dll
12:48:12.0484 2568 WebClient - ok
12:48:12.0609 2568 winmgmt (e488332126e3b1182d2b8a0c35408ec6) D:\WINDOWS\system32\wbem\WMIsvc.dll
12:48:12.0656 2568 winmgmt - ok
12:48:12.0703 2568 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) D:\WINDOWS\system32\MsPMSNSv.dll
12:48:12.0718 2568 WmdmPmSN - ok
12:48:12.0953 2568 Wmi (0171cff34bba8c5977f18c48d8aef8c6) D:\WINDOWS\System32\advapi32.dll
12:48:13.0140 2568 Wmi - ok
12:48:13.0203 2568 WmiApSrv (23f6f03272f7e5679f1f050aed5acee6) D:\WINDOWS\system32\wbem\wmiapsrv.exe
12:48:13.0250 2568 WmiApSrv - ok
12:48:13.0593 2568 WMPNetworkSvc (3739866d20abd42f26a7b85f9e2560af) D:\Program Files\Windows Media Player\WMPNetwk.exe
12:48:13.0859 2568 WMPNetworkSvc - ok
12:48:13.0921 2568 WpdUsb (cf4def1bf66f06964dc0d91844239104) D:\WINDOWS\system32\DRIVERS\wpdusb.sys
12:48:13.0937 2568 WpdUsb - ok
12:48:14.0000 2568 wscsvc (4c86d5faf78194995af9cc1075f65dd3) D:\WINDOWS\system32\wscsvc.dll
12:48:14.0031 2568 wscsvc - ok
12:48:14.0046 2568 wuauserv (c1364564800ee9784192145324a23308) D:\WINDOWS\system32\wuauserv.dll
12:48:14.0062 2568 wuauserv - ok
12:48:14.0125 2568 WudfPf (f15feafffbb3644ccc80c5da584e6311) D:\WINDOWS\system32\DRIVERS\WudfPf.sys
12:48:14.0156 2568 WudfPf - ok
12:48:14.0187 2568 WudfRd (28b524262bce6de1f7ef9f510ba3985b) D:\WINDOWS\system32\DRIVERS\wudfrd.sys
12:48:14.0218 2568 WudfRd - ok
12:48:14.0250 2568 WudfSvc (05231c04253c5bc30b26cbaae680ed89) D:\WINDOWS\System32\WUDFSvc.dll
12:48:14.0281 2568 WudfSvc - ok
12:48:14.0453 2568 WZCSVC (a27d4ba7264c0bf52f32d10405bea1d4) D:\WINDOWS\System32\wzcsvc.dll
12:48:14.0609 2568 WZCSVC - ok
12:48:14.0687 2568 xmlprov (eaa4bb9edb3fb10cf8979fe65e63658f) D:\WINDOWS\System32\xmlprov.dll
12:48:14.0734 2568 xmlprov - ok
12:48:14.0843 2568 yukonwxp (886215e6f3bf5a9d1ba99afd6b478e74) D:\WINDOWS\system32\DRIVERS\yk51x86.sys
12:48:14.0921 2568 yukonwxp - ok
12:48:15.0015 2568 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC} (74ec37b9eaf9fca015b933a526825c7a) D:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl
12:48:15.0046 2568 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC} - ok
12:48:15.0078 2568 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
12:48:15.0531 2568 \Device\Harddisk0\DR0 - ok
12:48:15.0546 2568 Boot (0x1200) (54d56a60e80707c41b31300ca0a1ca0e) \Device\Harddisk0\DR0\Partition0
12:48:15.0546 2568 \Device\Harddisk0\DR0\Partition0 - ok
12:48:15.0562 2568 Boot (0x1200) (ff615b4eb149622256bc1bc04bc989f5) \Device\Harddisk0\DR0\Partition1
12:48:15.0562 2568 \Device\Harddisk0\DR0\Partition1 - ok
12:48:15.0578 2568 Boot (0x1200) (abc608e323dfa677f04d31752f38b370) \Device\Harddisk0\DR0\Partition2
12:48:15.0593 2568 \Device\Harddisk0\DR0\Partition2 - ok
12:48:15.0609 2568 Boot (0x1200) (dba09696a902de9617b5a26f97ad764d) \Device\Harddisk0\DR0\Partition3
12:48:15.0609 2568 \Device\Harddisk0\DR0\Partition3 - ok
12:48:15.0609 2568 ============================================================
12:48:15.0609 2568 Scan finished
12:48:15.0609 2568 ============================================================
12:48:15.0625 1116 Detected object count: 0
12:48:15.0625 1116 Actual detected object count: 0

Re: Pomalé PC

Napsal: 24 čer 2012 12:16
od Caroprd111
Log je v pořádku. :)

Nyní se vrhneme na dočištění a poslední kontrolu. :wink:

:arrow: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
  • Stáhněte a spusťte.
  • Pro potvrzení volby mačkejte A, Enter.
  • Po použití utilitu smažte.
  • Antiviry mohou tuto utilitu chybně označit jako vir - jedná se o falešný poplach - takže v pohodě stáhněte (případně vypněte při stahování antivir)!
:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stáhněte a spusťte.
  • Klikněte na Start a potvrďte OK.
  • Program uklidí a může (nemusí) restartovat PC.
  • Po použití utilitu smažte.
:arrow: Pokud nemáte, stáhněte CCleaner z tohoto odkazu.
  • Panel čistič
  • Vše nechte jak je, jen dejte Analyzovat a poté Spustit CCleaner.
  • Panel registry
  • Klikněte na Hledej problémy.
  • Následně na Opravit problémy - zálohu registrů doporučuji udělat, opravte všechny problémy.
  • Postup opakujte, dokud nebude bez problémů - většinou cca 3x.
Obrázek CCleaner doporučuji používat cca jednou za týden.


:arrow: Doporučuji také defragmentovat disk nejlépe pomocí Defraggler, který je zdarma.


:arrow: Po provedení těchto úkonů napište, jak se chová počítač, a přiložte nový log z RSIT.

Re: Pomalé PC

Napsal: 24 čer 2012 16:56
od 102mn
PC se trošku zrychlil, ale zase ne o tolik, trvá to tak 2,5 minuty, programy a internet jsou pomalé.
Posílám nový log.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2012-06-24 17:53:21
Systém Microsoft Windows XP Professional Service Pack 3
System drive D: has 37 GB (74%) free of 50 GB
Total RAM: 1023 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:53:44, on 24.6.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\WINDOWS\system32\nvsvc32.exe
D:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
D:\Program Files\AVAST Software\Avast\avastUI.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
D:\Program Files\RSIT\RSIT.exe
D:\Program Files\trend micro\Administrator.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] D:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [avast] "D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://D:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - D:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - D:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - D:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe

--
End of file - 6444 bytes

======Scheduled tasks folder======

D:\WINDOWS\tasks\Adobe Flash Player Updater.job
D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - D:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\1f6rqxva.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.centrum.cz/#utm_source=icq&u ... um=generic"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.4.7&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=D:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.262 Plugin
"Path"=D:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2027]
"Description"=RealMedia Plugin
"Path"=D:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1040]
"Description"=6.0.12.1040
"Path"=D:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=D:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=D:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=D:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

D:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

D:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
flashplayer.xpt
nppl3260.xpt
npwachk.xpt
nsIQTScriptablePlugin.xpt
nsJSRealPlayerPlugin.xpt

D:\Program Files\Mozilla Firefox\plugins\
npdnu.dll
npdnu.xpt
npdnupdater2.dll
npdnupdater2.xpt
npjp2.dll
NPOFFICE.DLL
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprpjplug.dll
npwachk.dll
QuickTimePlugin.class

D:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

D:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\1f6rqxva.default\extensions\
{0b38152b-1b20-484d-a11f-5e04a9b0661f}
{800b5000-a755-47e1-992b-48a1c1357f07}

D:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\1f6rqxva.default\searchplugins\
aol-web-search.xml
icqplugin.gif
icqplugin.src
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-06-19 4014280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=D:\WINDOWS\system32\NvCpl.dll [2011-10-08 16744256]
"nwiz"=D:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2011-10-08 1632360]
"avast"=D:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=D:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
D:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - D:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - D:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"D:\Program Files\ICQ7.7\ICQ.exe"="D:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"
"D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Program Files\ICQ7.7\ICQ.exe"="D:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=D:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=D:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-06-24 17:53:21 ----D---- D:\rsit
2012-06-24 11:21:52 ----D---- D:\Program Files\Google
2012-06-24 11:21:49 ----A---- D:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-06-24 11:21:48 ----A---- D:\WINDOWS\system32\drivers\aswSP.sys
2012-06-24 11:21:45 ----A---- D:\WINDOWS\system32\drivers\aswRdr.sys
2012-06-24 11:21:44 ----A---- D:\WINDOWS\system32\drivers\aswTdi.sys
2012-06-24 11:21:43 ----A---- D:\WINDOWS\system32\drivers\aswSnx.sys
2012-06-24 11:21:43 ----A---- D:\WINDOWS\system32\drivers\aswmon2.sys
2012-06-24 11:21:43 ----A---- D:\WINDOWS\system32\drivers\aswmon.sys
2012-06-24 11:21:42 ----A---- D:\WINDOWS\system32\drivers\aavmker4.sys
2012-06-24 11:20:46 ----A---- D:\WINDOWS\avastSS.scr
2012-06-24 11:20:45 ----A---- D:\WINDOWS\system32\aswBoot.exe
2012-06-16 12:11:45 ----HDC---- D:\WINDOWS\$NtUninstallKB2707511$
2012-06-16 11:57:32 ----HDC---- D:\WINDOWS\$NtUninstallKB2685939$
2012-06-16 11:50:15 ----HDC---- D:\WINDOWS\$NtUninstallKB2709162$
2012-06-10 16:27:51 ----HDC---- D:\WINDOWS\$NtUninstallKB2718704$

======List of files/folders modified in the last 1 month======

2012-06-24 17:53:44 ----D---- D:\Program Files\trend micro
2012-06-24 17:53:29 ----D---- D:\WINDOWS\Prefetch
2012-06-24 17:52:38 ----D---- D:\WINDOWS\Temp
2012-06-24 17:50:34 ----SHD---- D:\System Volume Information
2012-06-24 17:50:34 ----D---- D:\WINDOWS\system32\Restore
2012-06-24 17:49:58 ----D---- D:\WINDOWS
2012-06-24 17:48:24 ----A---- D:\WINDOWS\SchedLgU.Txt
2012-06-24 12:47:16 ----D---- D:\WINDOWS\system32\drivers
2012-06-24 12:45:10 ----SHD---- D:\WINDOWS\Installer
2012-06-24 12:44:10 ----SD---- D:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-06-24 12:03:27 ----D---- D:\WINDOWS\system32
2012-06-24 12:03:26 ----A---- D:\WINDOWS\system32\FlashPlayerApp.exe
2012-06-24 11:33:28 ----D---- D:\WINDOWS\system32\CatRoot2
2012-06-24 11:27:35 ----D---- D:\Program Files
2012-06-24 11:22:04 ----SD---- D:\WINDOWS\Tasks
2012-06-24 11:21:08 ----D---- D:\WINDOWS\WinSxS
2012-06-24 11:19:35 ----D---- D:\Program Files\AVAST Software
2012-06-24 11:19:35 ----D---- D:\Documents and Settings\All Users\Data aplikací\AVAST Software
2012-06-24 11:12:57 ----RSHDC---- D:\WINDOWS\system32\dllcache
2012-06-24 11:09:28 ----HD---- D:\WINDOWS\inf
2012-06-24 11:07:10 ----D---- D:\WINDOWS\Help
2012-06-24 11:02:14 ----D---- D:\Documents and Settings\All Users\Data aplikací\Skype
2012-06-16 12:44:35 ----D---- D:\Documents and Settings\Administrator\Data aplikací\Winamp
2012-06-16 12:44:35 ----D---- D:\Documents and Settings\Administrator\Data aplikací\Skype
2012-06-16 12:44:25 ----D---- D:\WINDOWS\Minidump
2012-06-16 12:44:25 ----D---- D:\WINDOWS\Debug
2012-06-16 12:16:42 ----RSD---- D:\WINDOWS\assembly
2012-06-16 12:15:11 ----D---- D:\WINDOWS\Microsoft.NET
2012-06-16 12:10:54 ----A---- D:\WINDOWS\system32\PerfStringBackup.INI
2012-06-16 12:00:38 ----A---- D:\WINDOWS\system32\MRT.exe
2012-06-16 11:59:23 ----D---- D:\Program Files\Internet Explorer
2012-06-16 11:57:49 ----HD---- D:\WINDOWS\$hf_mig$
2012-06-02 15:19:44 ----A---- D:\WINDOWS\system32\wucltui.dll.mui
2012-06-02 15:19:38 ----A---- D:\WINDOWS\system32\wuweb.dll
2012-06-02 15:19:38 ----A---- D:\WINDOWS\system32\wucltui.dll
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\wups2.dll
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\wups.dll
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\wuaueng.dll.mui
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\wuauclt.exe
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\wuapi.dll.mui
2012-06-02 15:19:34 ----A---- D:\WINDOWS\system32\cdm.dll
2012-06-02 15:19:24 ----A---- D:\WINDOWS\system32\wuapi.dll
2012-06-02 15:19:18 ----A---- D:\WINDOWS\system32\wuaueng.dll
2012-06-02 15:19:02 ----A---- D:\WINDOWS\system32\mucltui.dll.mui
2012-06-02 15:18:58 ----A---- D:\WINDOWS\system32\muweb.dll
2012-06-02 15:18:58 ----A---- D:\WINDOWS\system32\mucltui.dll
2012-05-31 15:22:06 ----A---- D:\WINDOWS\system32\crypt32.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; D:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; D:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; D:\WINDOWS\system32\drivers\Aavmker4.sys [2012-03-07 24920]
R1 AswRdr;aswRdr; D:\WINDOWS\system32\drivers\AswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; D:\WINDOWS\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; D:\WINDOWS\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; D:\WINDOWS\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 intelppm;Řadič procesoru Intel; D:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/11/06 08:18:12]; \??\D:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl []
R2 aswFsBlk;aswFsBlk; D:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMon2;aswMon2; D:\WINDOWS\system32\drivers\aswMon2.sys [2012-03-07 95704]
R2 irda;Protokol IrDA; D:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 LANPkt;Realtek LANPkt Protocol; D:\WINDOWS\system32\DRIVERS\LANPkt.sys [2003-09-17 8440]
R3 cmudax;C-Media High Definition Audio Interface; D:\WINDOWS\system32\drivers\cmudax.sys [2006-02-15 1301568]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; D:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 irsir;Microsoft Serial Infrared Driver; D:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 nv;nv; D:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-10-08 12791488]
R3 Rasirda;WAN Miniport (IrDA); D:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; D:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; D:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; D:\WINDOWS\system32\DRIVERS\yk51x86.sys [2007-10-12 255232]
S3 GMSIPCI;GMSIPCI; \??\G:\INSTALL\GMSIPCI.SYS []
S3 HidUsb;Ovladač třídy standardu HID; D:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; D:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 NTACCESS;NTACCESS; \??\G:\NTACCESS.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; D:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; D:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; D:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; D:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; D:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 Irmon;Sledování infračerveného přenosu; D:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 MDM;Machine Debug Manager; D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 NVSvc;NVIDIA Driver Helper Service; D:\WINDOWS\system32\nvsvc32.exe [2011-10-08 298304]
R2 nvUpdatusService;NVIDIA Update Service Daemon; D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-08 2253120]
R2 Skype C2C Service;Skype C2C Service; D:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-06-19 3048136]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; D:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 gupdate;Služba Google Update (gupdate); D:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-24 136176]
S2 SkypeUpdate;Skype Updater; D:\Program Files\Skype\Updater\Updater.exe [2012-01-31 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-24 250056]
S3 aspnet_state;ASP.NET State Service; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; D:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); D:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-24 136176]
S3 idsvc;Windows CardSpace; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; D:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: Pomalé PC

Napsal: 24 čer 2012 19:11
od Caroprd111
V tom případě to ještě prověříme, v logu z RSIT nic škodlivého nevidím. :)

:arrow: Stáhněte OTL z tohoto odkazu a uložte jej na Plochu.
  • Zaškrtněte okénko Pro všechny uživatele.
  • Zaškrtněte okénko Kontrola na havěť "LOP".
  • Zaškrtněte okénko Kontrola na havěť "Purity".
  • Stáři souborů změňte z 30 dnů na 7 dnů!!
  • Do spodního okénka Vlastní skenování/opravy vložte tento script (pouze zelená písmenka v bílém poli!):

Kód: Vybrat vše

CREATERESTOREPOINT

netsvc
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe
%userprofile%\Plocha\*.*
%userprofile%\Desktop\*.*
%ALLUSERSPROFILE%\Plocha\*.*
%ALLUSERSPROFILE%\Desktop\*.*
*crack* /s
*keygen* /s
*loader* /s
*RemoveWAT* /s
*minodlogin* /s
*tnod* /s
*TemDono* /s
*AutoKMS* /s
*KMSEmulator* /s
*activator* /s
*serial* /s
*w7lxe* /s
*AutoRearm* /s

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /s
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /s

%SystemDrive%\PhysicalMBR.bin /md5
  • Klikněte na tlačítko [Prohledat].
  • Po dokončení skenu se objeví logy OTL.txt a Extras.txt, oba mi sem vložte.
  • Logy se nevejdou do jednoho, rozdělte je tedy prosím do více příspěvků.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz