Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Windows chvíli funguje, potom se absolutně sekne

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Daemonic14
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 08 črc 2012 09:37

Windows chvíli funguje, potom se absolutně sekne

#1 Příspěvek od Daemonic14 »

Dobrý den, prosím o pomoc, mám Windows XP Professional SP3 a když zapnu počítač, normálně naběhne a všechno, ale po třeba třech minutách nebo klidně hodině se kousne.Nejde hýbat myší, nejde CTRL-ALT-DEL ani ALT-F4, prostě nic, můžu jedině restartovat. Prosím nevíte co s tím??už jsem bezradný :cry: :(
Hijackthis:
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marie\Dokumenty\Downloads\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: uTorrentControl2 - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O3 - Toolbar: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [EADM] "C:\Program Files\Origin\Origin.exe" -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BDARemote.lnk = ?
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 5770 bytes

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Windows chvíli funguje, potom se absolutně sekne

#2 Příspěvek od Rudy »

Zdravím!
Porosím o log RSIT: http://forum.viry.cz/viewtopic.php?f=13&t=105895 . Je podrobnější, než HijackThis.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Daemonic14
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 08 črc 2012 09:37

Re: Windows chvíli funguje, potom se absolutně sekne

#3 Příspěvek od Daemonic14 »

Tady je log

Logfile of random's system information tool 1.09 (written by random/random)
Run by Marie at 2012-07-08 11:41:29
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 59 GB (58%) free of 101 GB
Total RAM: 3071 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:41:36, on 8.7.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\USB TV\EM28XX\BDARemote.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Marie\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Marie.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: uTorrentControl2 - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O3 - Toolbar: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [EADM] "C:\Program Files\Origin\Origin.exe" -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BDARemote.lnk = ?
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 5935 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-746137067-1801674531-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-746137067-1801674531-1003UA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Marie\Data aplikací\Mozilla\Firefox\Profiles\f1b35nze.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "keyword.URL" - "http://search.conduit.com/ResultsExt.as ... ource=2&q="

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.262 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.5.1]
"Description"=
"Path"=C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Marie\Data aplikací\Mozilla\Firefox\Profiles\f1b35nze.default\extensions\
{687578b9-7132-4a7a-80e4-30ee31099e03}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578b9-7132-4a7a-80e4-30ee31099e03}]
uTorrentControl2 Toolbar - C:\Program Files\uTorrentControl2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-05-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-05-04 157576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{687578b9-7132-4a7a-80e4-30ee31099e03} - uTorrentControl2 Toolbar - C:\Program Files\uTorrentControl2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-11-17 577536]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2012-07-03 1022352]
"Steam"=C:\Program Files\Steam\Steam.exe [2012-07-03 1242448]
"Google Update"=C:\Documents and Settings\Marie\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2012-07-04 116648]
"EADM"=C:\Program Files\Origin\Origin.exe [2012-07-04 3407496]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
BDARemote.lnk - C:\Program Files\USB TV\EM28XX\BDARemote.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Steam\steamapps\daemonic14\team fortress 2\hl2.exe"="C:\Program Files\Steam\steamapps\daemonic14\team fortress 2\hl2.exe:*:Enabled:hl2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======List of files/folders created in the last 1 month======

2012-07-08 11:41:30 ----D---- C:\Program Files\trend micro
2012-07-08 11:41:29 ----D---- C:\rsit
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\vxblock.dll
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\pxwave.dll
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\pxsfs.dll
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\pxmas.dll
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\pxdrv.dll
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\pxafs.dll
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\px.dll
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2012-07-08 10:10:54 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2012-07-08 09:48:06 ----D---- C:\Program Files\Common Files\DivX Shared
2012-07-08 09:46:53 ----D---- C:\Program Files\DivX
2012-07-08 09:45:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2012-07-08 09:41:31 ----D---- C:\Documents and Settings\Marie\Data aplikací\BSplayer Pro
2012-07-08 09:41:31 ----D---- C:\Documents and Settings\Marie\Data aplikací\BSplayer
2012-07-08 09:41:30 ----D---- C:\Program Files\Webteh
2012-07-07 09:01:03 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2012-07-07 09:01:03 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-07-07 09:01:02 ----A---- C:\WINDOWS\system32\drivers\aswFW.sys
2012-07-07 09:00:52 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2012-07-07 09:00:52 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2012-07-07 09:00:52 ----A---- C:\WINDOWS\system32\drivers\aswNdis2.sys
2012-07-07 09:00:51 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2012-07-07 09:00:51 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2012-07-07 09:00:51 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2012-07-07 09:00:51 ----A---- C:\WINDOWS\system32\drivers\aswKbd.sys
2012-07-07 09:00:51 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2012-07-07 09:00:13 ----A---- C:\WINDOWS\system32\drivers\aswNdis.sys
2012-07-07 09:00:11 ----A---- C:\WINDOWS\avastSS.scr
2012-07-07 09:00:10 ----A---- C:\WINDOWS\system32\aswBoot.exe
2012-07-07 08:59:42 ----D---- C:\Program Files\AVAST Software
2012-07-07 08:59:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2012-07-07 08:54:32 ----D---- C:\Program Files\CCleaner
2012-07-05 12:56:52 ----D---- C:\WINDOWS\system32\LogFiles
2012-07-05 12:56:52 ----D---- C:\WINDOWS\system32\drivers\UMDF
2012-07-05 12:56:49 ----N---- C:\WINDOWS\system32\spmsg.dll
2012-07-05 12:56:46 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2012-07-05 12:27:25 ----D---- C:\WINDOWS\Minidump
2012-07-05 09:23:53 ----D---- C:\Program Files\ACR
2012-07-04 22:10:58 ----D---- C:\Program Files\Origin Games
2012-07-04 22:08:41 ----D---- C:\Documents and Settings\Marie\Data aplikací\Origin
2012-07-04 22:08:19 ----D---- C:\Program Files\Origin
2012-07-04 22:06:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Origin
2012-07-04 22:06:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
2012-07-04 22:06:49 ----D---- C:\Program Files\Electronic Arts
2012-07-04 12:55:19 ----RHD---- C:\Documents and Settings\Marie\Data aplikací\SecuROM
2012-07-04 12:51:52 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2012-07-04 10:26:53 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2012-07-04 10:26:53 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2012-07-04 10:26:53 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2012-07-04 10:26:53 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2012-07-04 10:26:53 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2012-07-04 10:26:53 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2012-07-04 10:26:53 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2012-07-04 10:26:53 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2012-07-04 10:26:52 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2012-07-04 10:26:52 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2012-07-04 10:26:52 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2012-07-04 10:26:52 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2012-07-04 10:26:52 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2012-07-04 10:26:52 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2012-07-04 10:26:51 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2012-07-04 10:26:51 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2012-07-04 10:26:51 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2012-07-04 10:26:51 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2012-07-04 10:26:51 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2012-07-04 10:26:51 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2012-07-04 10:26:51 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2012-07-04 10:26:51 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2012-07-04 10:26:50 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2012-07-04 10:26:50 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2012-07-04 10:26:50 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2012-07-04 10:26:50 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2012-07-04 10:26:50 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2012-07-04 10:26:50 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2012-07-04 10:26:50 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2012-07-04 10:26:50 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2012-07-04 10:26:50 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2012-07-04 10:26:49 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2012-07-04 10:26:48 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2012-07-04 10:26:48 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2012-07-04 10:26:48 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2012-07-04 10:26:48 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2012-07-04 10:26:48 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2012-07-04 10:26:48 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2012-07-04 10:26:48 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2012-07-04 10:26:48 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2012-07-04 10:26:48 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2012-07-04 10:26:47 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2012-07-04 10:26:47 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2012-07-04 10:26:47 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2012-07-04 10:26:47 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2012-07-04 10:26:47 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2012-07-04 10:26:47 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2012-07-04 10:26:46 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2012-07-04 10:26:45 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2012-07-04 10:26:45 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2012-07-04 10:26:45 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2012-07-04 10:26:45 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2012-07-04 10:26:45 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2012-07-04 10:26:45 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2012-07-04 10:26:44 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2012-07-04 10:26:44 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2012-07-04 10:26:44 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2012-07-04 10:26:44 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2012-07-04 10:26:44 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2012-07-04 10:26:44 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2012-07-04 10:26:42 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2012-07-04 10:26:42 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2012-07-04 10:26:42 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2012-07-04 10:26:42 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2012-07-04 10:26:42 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2012-07-04 10:26:42 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2012-07-04 10:26:41 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2012-07-04 10:26:41 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2012-07-04 10:26:41 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2012-07-04 10:26:40 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2012-07-04 10:20:50 ----D---- C:\WINDOWS\Logs
2012-07-03 20:18:58 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2012-07-03 20:17:32 ----D---- C:\Program Files\MSBuild
2012-07-03 20:17:28 ----D---- C:\WINDOWS\system32\XPSViewer
2012-07-03 20:17:23 ----D---- C:\WINDOWS\system32\en-us
2012-07-03 20:17:22 ----D---- C:\Program Files\Reference Assemblies
2012-07-03 20:17:03 ----N---- C:\WINDOWS\system32\spmsg2.dll
2012-07-03 20:17:01 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2012-07-03 20:16:15 ----RSD---- C:\WINDOWS\assembly
2012-07-03 20:15:49 ----D---- C:\WINDOWS\Microsoft.NET
2012-07-03 20:08:23 ----D---- C:\Program Files\GotClip
2012-07-03 14:47:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2012-07-03 14:47:03 ----D---- C:\Program Files\Common Files\Java
2012-07-03 14:46:49 ----D---- C:\Program Files\Oracle
2012-07-03 14:46:42 ----D---- C:\Documents and Settings\Marie\Data aplikací\Oracle
2012-07-03 14:46:39 ----A---- C:\WINDOWS\system32\npDeployJava1.dll
2012-07-03 14:46:39 ----A---- C:\WINDOWS\system32\javaws.exe
2012-07-03 14:46:39 ----A---- C:\WINDOWS\system32\deployJava1.dll
2012-07-03 14:46:29 ----A---- C:\WINDOWS\system32\javaw.exe
2012-07-03 14:46:29 ----A---- C:\WINDOWS\system32\java.exe
2012-07-03 14:46:16 ----D---- C:\Program Files\Java
2012-07-03 14:45:03 ----D---- C:\Documents and Settings\Marie\Data aplikací\Sun
2012-07-03 14:44:37 ----D---- C:\Documents and Settings\Marie\Data aplikací\.minecraft
2012-07-03 14:44:17 ----D---- C:\Documents and Settings\Marie\Data aplikací\WinRAR
2012-07-03 14:44:07 ----D---- C:\Program Files\WinRAR
2012-07-03 13:57:55 ----D---- C:\Documents and Settings\Marie\Data aplikací\Macromedia
2012-07-03 13:57:55 ----D---- C:\Documents and Settings\Marie\Data aplikací\Adobe
2012-07-03 13:57:47 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-07-03 12:18:04 ----D---- C:\Program Files\Common Files\Steam
2012-07-03 12:18:03 ----D---- C:\Program Files\Steam
2012-07-03 12:17:02 ----A---- C:\WINDOWS\system32\wpa.bak
2012-07-03 12:16:37 ----D---- C:\Program Files\Conduit
2012-07-03 12:16:33 ----D---- C:\Program Files\uTorrentControl2
2012-07-03 12:16:28 ----D---- C:\Program Files\uTorrent
2012-07-03 12:15:33 ----D---- C:\Documents and Settings\Marie\Data aplikací\uTorrent
2012-07-03 12:09:55 ----A---- C:\WINDOWS\system32\hidserv.dll
2012-07-03 12:09:53 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2012-07-03 12:09:43 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2012-07-03 05:14:23 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2012-07-03 05:10:43 ----DC---- C:\WINDOWS\system32\DRVSTORE
2012-07-03 05:10:43 ----D---- C:\Program Files\DIFX
2012-07-03 05:10:42 ----D---- C:\Program Files\USB TV
2012-07-03 05:10:41 ----D---- C:\Documents and Settings\Marie\Data aplikací\InstallShield
2012-07-03 05:10:22 ----D---- C:\Program Files\ATI Technologies
2012-07-03 05:09:50 ----D---- C:\ATI
2012-07-03 05:02:35 ----D---- C:\Program Files\Lavalys
2012-07-03 05:02:14 ----D---- C:\Documents and Settings\Marie\Data aplikací\Mozilla
2012-07-03 05:02:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2012-07-03 05:02:05 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-07-03 05:02:00 ----D---- C:\Program Files\Mozilla Firefox
2012-07-03 05:02:00 ----D---- C:\Program Files\Common Files\Adobe
2012-07-03 05:02:00 ----D---- C:\Program Files\Adobe
2012-07-03 05:01:52 ----A---- C:\WINDOWS\UC.PIF
2012-07-03 05:01:52 ----A---- C:\WINDOWS\RAR.PIF
2012-07-03 05:01:52 ----A---- C:\WINDOWS\PKZIP.PIF
2012-07-03 05:01:52 ----A---- C:\WINDOWS\PKUNZIP.PIF
2012-07-03 05:01:52 ----A---- C:\WINDOWS\NOCLOSE.PIF
2012-07-03 05:01:52 ----A---- C:\WINDOWS\LHA.PIF
2012-07-03 05:01:52 ----A---- C:\WINDOWS\ARJ.PIF
2012-07-03 05:01:51 ----D---- C:\totalcmd
2012-07-03 05:01:51 ----D---- C:\Documents and Settings\Marie\Data aplikací\GHISLER
2012-07-03 05:01:27 ----SHD---- C:\RECYCLER
2012-07-03 05:01:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2012-07-02 18:27:00 ----A---- C:\WINDOWS\system32\h323log.txt
2012-07-02 18:25:21 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2012-07-02 18:24:50 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2012-07-02 18:24:13 ----A---- C:\WINDOWS\system32\usbui.dll
2012-07-02 18:23:25 ----A---- C:\WINDOWS\imsins.BAK
2012-07-02 18:23:23 ----SHD---- C:\WINDOWS\Installer
2012-07-02 18:23:23 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-07-02 18:23:22 ----D---- C:\Program Files\Common Files\ODBC
2012-07-02 18:23:22 ----A---- C:\WINDOWS\ODBCINST.INI
2012-07-02 18:23:19 ----D---- C:\Program Files\Common Files\SpeechEngines
2012-07-02 18:23:18 ----RD---- C:\Program Files
2012-07-02 18:23:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-07-02 18:23:18 ----D---- C:\Program Files\Common Files
2012-07-02 18:23:15 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2012-07-02 18:23:15 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2012-07-02 18:23:15 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2012-07-02 18:23:13 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2012-07-02 18:23:13 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2012-07-02 18:23:13 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2012-07-02 18:23:13 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2012-07-02 18:23:13 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2012-07-02 18:23:13 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2012-07-02 18:23:12 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2012-07-02 18:23:12 ----RA---- C:\WINDOWS\system32\kbdur.dll
2012-07-02 18:23:12 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2012-07-02 18:23:12 ----RA---- C:\WINDOWS\system32\kbdru.dll
2012-07-02 18:23:12 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2012-07-02 18:23:12 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2012-07-02 18:23:10 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2012-07-02 18:23:10 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2012-07-02 18:23:10 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2012-07-02 18:23:10 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2012-07-02 18:23:10 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2012-07-02 18:23:10 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2012-07-02 18:23:10 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2012-07-02 18:23:08 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2012-07-02 18:23:08 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2012-07-02 18:23:08 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2012-07-02 18:23:08 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2012-07-02 18:23:08 ----RA---- C:\WINDOWS\system32\kbdest.dll
2012-07-02 18:23:04 ----A---- C:\WINDOWS\system32\kbdycl.dll
2012-07-02 18:23:04 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2012-07-02 18:23:04 ----A---- C:\WINDOWS\system32\kbdsl.dll
2012-07-02 18:23:04 ----A---- C:\WINDOWS\system32\kbdro.dll
2012-07-02 18:23:04 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2012-07-02 18:23:04 ----A---- C:\WINDOWS\system32\kbdpl.dll
2012-07-02 18:23:04 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2012-07-02 18:23:04 ----A---- C:\WINDOWS\system32\kbdhu.dll
2012-07-02 18:23:04 ----A---- C:\WINDOWS\system32\kbdcr.dll
2012-07-02 18:23:04 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2012-07-02 18:23:02 ----A---- C:\WINDOWS\system32\spxcoins.dll
2012-07-02 18:23:02 ----A---- C:\WINDOWS\system32\irclass.dll
2012-07-02 18:23:02 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2012-07-02 18:23:02 ----A---- C:\WINDOWS\system32\dgsetup.dll
2012-07-02 18:23:02 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2012-07-02 18:22:59 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2012-07-02 18:22:59 ----A---- C:\WINDOWS\TASKMAN.EXE
2012-07-02 18:22:59 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2012-07-02 18:22:59 ----A---- C:\WINDOWS\system32\batt.dll
2012-07-02 18:22:58 ----A---- C:\WINDOWS\system32\storprop.dll
2012-07-02 18:22:58 ----A---- C:\WINDOWS\NOTEPAD.EXE
2012-07-02 18:22:51 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2012-07-02 18:22:47 ----RA---- C:\WINDOWS\SET8.tmp
2012-07-02 18:22:44 ----RA---- C:\WINDOWS\SET4.tmp
2012-07-02 18:22:43 ----RA---- C:\WINDOWS\SET3.tmp
2012-07-02 18:22:38 ----D---- C:\WINDOWS\system32\CatRoot2
2012-07-02 18:22:38 ----D---- C:\WINDOWS\system32\CatRoot
2012-07-02 18:22:32 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-07-02 18:22:13 ----A---- C:\WINDOWS\setuplog.txt
2012-07-02 18:22:10 ----D---- C:\Documents and Settings
2012-07-02 18:22:09 ----SHD---- C:\System Volume Information
2012-07-02 18:22:09 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2012-07-02 18:21:15 ----SH---- C:\boot.ini
2012-07-02 18:15:20 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-07-02 18:15:20 ----RSD---- C:\WINDOWS\Fonts
2012-07-02 18:15:20 ----RD---- C:\WINDOWS\Web
2012-07-02 18:15:20 ----HD---- C:\WINDOWS\inf
2012-07-02 18:15:20 ----D---- C:\WINDOWS\WinSxS
2012-07-02 18:15:20 ----D---- C:\WINDOWS\twain_32
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Temp
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\wins
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\wbem
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\usmt
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\spool
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\ShellExt
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\Setup
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\ras
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\oobe
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\npp
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\mui
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\inetsrv
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\IME
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\icsxml
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\ias
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\export
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\drivers\etc
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\drivers\disdn
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\drivers
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\dhcp
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\cs-cz
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\cs
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\config
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\3com_dmi
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\3076
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\2052
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\1054
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\1042
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\1041
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\1037
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\1033
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\1031
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\1029
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\1028
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32\1025
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system32
2012-07-02 18:15:20 ----D---- C:\WINDOWS\system
2012-07-02 18:15:20 ----D---- C:\WINDOWS\security
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Resources
2012-07-02 18:15:20 ----D---- C:\WINDOWS\repair
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Provisioning
2012-07-02 18:15:20 ----D---- C:\WINDOWS\pchealth
2012-07-02 18:15:20 ----D---- C:\WINDOWS\PeerNet
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Network Diagnostic
2012-07-02 18:15:20 ----D---- C:\WINDOWS\mui
2012-07-02 18:15:20 ----D---- C:\WINDOWS\msapps
2012-07-02 18:15:20 ----D---- C:\WINDOWS\msagent
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Media
2012-07-02 18:15:20 ----D---- C:\WINDOWS\L2Schemas
2012-07-02 18:15:20 ----D---- C:\WINDOWS\java
2012-07-02 18:15:20 ----D---- C:\WINDOWS\ime
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Help
2012-07-02 18:15:20 ----D---- C:\WINDOWS\ehome
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Driver Cache
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Debug
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Cursors
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Connection Wizard
2012-07-02 18:15:20 ----D---- C:\WINDOWS\Config
2012-07-02 18:15:20 ----D---- C:\WINDOWS\AppPatch
2012-07-02 18:15:20 ----D---- C:\WINDOWS\addins
2012-07-02 18:15:20 ----D---- C:\WINDOWS
2012-07-02 18:15:20 ----ASH---- C:\pagefile.sys
2012-07-02 16:56:08 ----D---- C:\Program Files\AMD
2012-07-02 16:56:08 ----A---- C:\WINDOWS\system32\drivers\AmdK8.sys
2012-07-02 16:55:53 ----RA---- C:\WINDOWS\system32\ChCfg.exe
2012-07-02 16:55:47 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2012-07-02 16:55:46 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2012-07-02 16:55:45 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2012-07-02 16:55:44 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2012-07-02 16:55:09 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2012-07-02 16:51:20 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2012-07-02 16:51:19 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2012-07-02 16:51:18 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2012-07-02 16:51:16 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2012-07-02 16:51:15 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2012-07-02 16:51:13 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2012-07-02 16:51:11 ----RA---- C:\WINDOWS\system32\RtlCPAPI.dll
2012-07-02 16:51:10 ----RA---- C:\WINDOWS\system32\RTLCPL.exe
2012-07-02 16:51:10 ----RA---- C:\WINDOWS\system32\drivers\alcxwdm.sys
2012-07-02 16:51:10 ----RA---- C:\WINDOWS\soundman.exe
2012-07-02 16:51:09 ----A---- C:\WINDOWS\system32\ksuser.dll
2012-07-02 16:51:09 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2012-07-02 16:51:08 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2012-07-02 16:51:06 ----RA---- C:\WINDOWS\avrack.ini
2012-07-02 16:51:06 ----D---- C:\Program Files\Realtek Sound Manager
2012-07-02 16:51:06 ----D---- C:\Program Files\AvRack
2012-07-02 16:50:57 ----D---- C:\Program Files\Realtek AC97
2012-07-02 16:50:54 ----RA---- C:\WINDOWS\alcupd.exe
2012-07-02 16:50:54 ----RA---- C:\WINDOWS\Alcrmv.exe
2012-07-02 16:50:53 ----HD---- C:\Program Files\InstallShield Installation Information
2012-07-02 16:50:22 ----N---- C:\WINDOWS\system32\nvuide.exe
2012-07-02 16:50:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-07-02 16:50:03 ----A---- C:\WINDOWS\system32\nvunrm.exe
2012-07-02 16:50:01 ----A---- C:\WINDOWS\system32\nvusmb.exe
2012-07-02 16:49:54 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2012-07-02 16:49:47 ----D---- C:\Program Files\Common Files\InstallShield
2012-07-02 16:36:45 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2012-07-02 16:35:43 ----D---- C:\Documents and Settings\Marie\Data aplikací\Identities
2012-07-02 16:35:42 ----HD---- C:\Program Files\Uninstall Information
2012-07-02 16:35:36 ----SD---- C:\Documents and Settings\Marie\Data aplikací\Microsoft
2012-07-02 16:35:36 ----ASH---- C:\Documents and Settings\Marie\Data aplikací\desktop.ini
2012-07-02 16:35:09 ----D---- C:\WINDOWS\SoftwareDistribution
2012-07-02 16:35:07 ----SD---- C:\WINDOWS\system32\Microsoft
2012-07-02 16:35:07 ----D---- C:\WINDOWS\Prefetch
2012-07-02 16:35:07 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-07-02 16:34:08 ----AS---- C:\WINDOWS\bootstat.dat
2012-07-02 16:32:14 ----D---- C:\WINDOWS\system32\xircom
2012-07-02 16:32:14 ----D---- C:\Program Files\xerox
2012-07-02 16:32:14 ----D---- C:\Program Files\microsoft frontpage
2012-07-02 16:32:00 ----RASH---- C:\MSDOS.SYS
2012-07-02 16:32:00 ----RASH---- C:\IO.SYS
2012-07-02 16:32:00 ----A---- C:\WINDOWS\control.ini
2012-07-02 16:32:00 ----A---- C:\CONFIG.SYS
2012-07-02 16:32:00 ----A---- C:\AUTOEXEC.BAT
2012-07-02 16:31:47 ----A---- C:\WINDOWS\OEWABLog.txt
2012-07-02 16:31:44 ----A---- C:\WINDOWS\system32\mapi32.dll
2012-07-02 16:31:05 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-07-02 16:31:05 ----RD---- C:\WINDOWS\Offline Web Pages
2012-07-02 16:30:55 ----HD---- C:\Program Files\WindowsUpdate
2012-07-02 16:30:53 ----D---- C:\Program Files\Online Services
2012-07-02 16:30:37 ----D---- C:\WINDOWS\system32\DirectX
2012-07-02 16:30:31 ----A---- C:\WINDOWS\system32\atrace.dll
2012-07-02 16:30:28 ----A---- C:\WINDOWS\system32\desktop.ini
2012-07-02 16:30:28 ----A---- C:\WINDOWS\desktop.ini
2012-07-02 16:30:20 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2012-07-02 16:30:19 ----A---- C:\WINDOWS\system32\acctres.dll
2012-07-02 16:30:18 ----D---- C:\Program Files\Common Files\Services
2012-07-02 16:30:15 ----SD---- C:\WINDOWS\Tasks
2012-07-02 16:30:15 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2012-07-02 16:30:13 ----D---- C:\Program Files\Common Files\MSSoap
2012-07-02 16:30:09 ----D---- C:\WINDOWS\srchasst
2012-07-02 16:30:08 ----D---- C:\WINDOWS\system32\Macromed
2012-07-02 16:30:05 ----A---- C:\WINDOWS\system32\wuweb.dll
2012-07-02 16:30:05 ----A---- C:\WINDOWS\system32\wucltui.dll
2012-07-02 16:30:05 ----A---- C:\WINDOWS\system32\wuauserv.dll
2012-07-02 16:30:05 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2012-07-02 16:30:04 ----A---- C:\WINDOWS\system32\wups.dll
2012-07-02 16:30:04 ----A---- C:\WINDOWS\system32\wuaueng.dll
2012-07-02 16:30:04 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2012-07-02 16:30:04 ----A---- C:\WINDOWS\system32\wuauclt.exe
2012-07-02 16:30:04 ----A---- C:\WINDOWS\system32\wuapi.dll
2012-07-02 16:30:04 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2012-07-02 16:30:04 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2012-07-02 16:30:04 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2012-07-02 16:30:03 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2012-07-02 16:30:03 ----A---- C:\WINDOWS\system32\qmgr.dll
2012-07-02 16:29:59 ----D---- C:\Program Files\Movie Maker
2012-07-02 16:29:37 ----A---- C:\WINDOWS\system32\safrslv.dll
2012-07-02 16:29:37 ----A---- C:\WINDOWS\system32\safrdm.dll
2012-07-02 16:29:37 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2012-07-02 16:29:37 ----A---- C:\WINDOWS\system32\racpldlg.dll
2012-07-02 16:29:34 ----A---- C:\WINDOWS\system32\fltlib.dll
2012-07-02 16:29:33 ----D---- C:\WINDOWS\system32\Restore
2012-07-02 16:29:33 ----A---- C:\WINDOWS\system32\srsvc.dll
2012-07-02 16:29:33 ----A---- C:\WINDOWS\system32\srrstr.dll
2012-07-02 16:29:33 ----A---- C:\WINDOWS\system32\srclient.dll
2012-07-02 16:29:33 ----A---- C:\WINDOWS\system32\fltMc.exe
2012-07-02 16:29:33 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2012-07-02 16:29:32 ----A---- C:\WINDOWS\system32\mnmdd.dll
2012-07-02 16:29:32 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2012-07-02 16:29:32 ----A---- C:\WINDOWS\system32\ils.dll
2012-07-02 16:29:32 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2012-07-02 16:29:31 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2012-07-02 16:29:31 ----A---- C:\WINDOWS\system32\msconf.dll
2012-07-02 16:29:31 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2012-07-02 16:29:28 ----D---- C:\Program Files\NetMeeting
2012-07-02 16:29:28 ----A---- C:\WINDOWS\system32\msoert2.dll
2012-07-02 16:29:28 ----A---- C:\WINDOWS\system32\msoeacct.dll
2012-07-02 16:29:26 ----A---- C:\WINDOWS\system32\inetres.dll
2012-07-02 16:29:26 ----A---- C:\WINDOWS\system32\inetcomm.dll
2012-07-02 16:29:24 ----D---- C:\Program Files\Outlook Express
2012-07-02 16:29:24 ----A---- C:\WINDOWS\system32\schedsvc.dll
2012-07-02 16:29:24 ----A---- C:\WINDOWS\system32\mstinit.exe
2012-07-02 16:29:23 ----A---- C:\WINDOWS\system32\mstask.dll
2012-07-02 16:29:23 ----A---- C:\WINDOWS\system32\isign32.dll
2012-07-02 16:29:23 ----A---- C:\WINDOWS\system32\icwphbk.dll
2012-07-02 16:29:23 ----A---- C:\WINDOWS\system32\icwdial.dll
2012-07-02 16:29:22 ----A---- C:\WINDOWS\system32\inetcfg.dll
2012-07-02 16:29:16 ----D---- C:\Program Files\Common Files\System
2012-07-02 16:29:15 ----D---- C:\Program Files\Internet Explorer
2012-07-02 16:28:52 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2012-07-02 16:28:46 ----D---- C:\Program Files\ComPlus Applications
2012-07-02 16:28:45 ----A---- C:\WINDOWS\vbaddin.ini
2012-07-02 16:28:45 ----A---- C:\WINDOWS\vb.ini
2012-07-02 16:28:41 ----D---- C:\WINDOWS\Registration
2012-07-02 16:28:35 ----D---- C:\Program Files\Windows Media Player
2012-07-02 16:28:30 ----D---- C:\Program Files\Messenger
2012-07-02 16:28:26 ----D---- C:\Program Files\MSN Gaming Zone
2012-07-02 16:28:26 ----A---- C:\WINDOWS\system32\write.exe
2012-07-02 16:28:15 ----A---- C:\WINDOWS\system32\sndvol32.exe
2012-07-02 16:28:15 ----A---- C:\WINDOWS\system32\hticons.dll
2012-07-02 16:28:15 ----A---- C:\WINDOWS\system32\avwav.dll
2012-07-02 16:28:15 ----A---- C:\WINDOWS\system32\avtapi.dll
2012-07-02 16:28:15 ----A---- C:\WINDOWS\system32\avmeter.dll
2012-07-02 16:28:14 ----A---- C:\WINDOWS\system32\winchat.exe
2012-07-02 16:28:06 ----A---- C:\WINDOWS\system32\getuname.dll
2012-07-02 16:28:05 ----A---- C:\WINDOWS\system32\sol.exe
2012-07-02 16:28:05 ----A---- C:\WINDOWS\system32\charmap.exe
2012-07-02 16:28:05 ----A---- C:\WINDOWS\system32\calc.exe
2012-07-02 16:28:04 ----A---- C:\WINDOWS\system32\winmine.exe
2012-07-02 16:28:04 ----A---- C:\WINDOWS\system32\reset.exe
2012-07-02 16:28:04 ----A---- C:\WINDOWS\system32\mshearts.exe
2012-07-02 16:28:04 ----A---- C:\WINDOWS\system32\freecell.exe
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\tslabels.ini
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\tskill.exe
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\tscon.exe
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\shadow.exe
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\rwinsta.exe
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\regini.exe
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\qwinsta.exe
2012-07-02 16:28:03 ----A---- C:\WINDOWS\system32\qappsrv.exe
2012-07-02 16:28:02 ----A---- C:\WINDOWS\system32\msg.exe
2012-07-02 16:28:02 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2012-07-02 16:28:02 ----A---- C:\WINDOWS\system32\logoff.exe
2012-07-02 16:28:02 ----A---- C:\WINDOWS\system32\cdmodem.dll
2012-07-02 16:27:56 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2012-07-02 16:27:54 ----A---- C:\WINDOWS\system32\sndrec32.exe
2012-07-02 16:27:54 ----A---- C:\WINDOWS\system32\mplay32.exe
2012-07-02 16:27:54 ----A---- C:\WINDOWS\system32\hypertrm.dll
2012-07-02 16:27:54 ----A---- C:\WINDOWS\system32\accwiz.exe
2012-07-02 16:27:53 ----D---- C:\Program Files\Windows NT
2012-07-02 16:27:53 ----A---- C:\WINDOWS\system32\mspaint.exe
2012-07-02 16:27:53 ----A---- C:\WINDOWS\system32\clipbrd.exe
2012-07-02 16:27:52 ----A---- C:\WINDOWS\system32\spider.exe
2012-07-02 16:27:52 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2012-07-02 16:27:52 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2012-07-02 16:27:51 ----A---- C:\WINDOWS\system32\tsgqec.dll
2012-07-02 16:27:51 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2012-07-02 16:27:51 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2012-07-02 16:27:51 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2012-07-02 16:27:51 ----A---- C:\WINDOWS\system32\aaclient.dll
2012-07-02 16:27:50 ----A---- C:\WINDOWS\system32\mstscax.dll
2012-07-02 16:27:50 ----A---- C:\WINDOWS\system32\mstsc.exe
2012-07-02 16:27:49 ----A---- C:\WINDOWS\system32\termsrv.dll
2012-07-02 16:27:49 ----A---- C:\WINDOWS\system32\sessmgr.exe
2012-07-02 16:27:49 ----A---- C:\WINDOWS\system32\remotepg.dll
2012-07-02 16:27:49 ----A---- C:\WINDOWS\system32\rdshost.exe
2012-07-02 16:27:49 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2012-07-02 16:27:49 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2012-07-02 16:27:49 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2012-07-02 16:27:49 ----A---- C:\WINDOWS\system32\rdchost.dll
2012-07-02 16:27:48 ----D---- C:\WINDOWS\system32\MsDtc
2012-07-02 16:27:48 ----A---- C:\WINDOWS\system32\rdpclip.exe
2012-07-02 16:27:48 ----A---- C:\WINDOWS\system32\qprocess.exe
2012-07-02 16:27:48 ----A---- C:\WINDOWS\system32\mtxoci.dll
2012-07-02 16:27:48 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2012-07-02 16:27:48 ----A---- C:\WINDOWS\system32\icaapi.dll
2012-07-02 16:27:48 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2012-07-02 16:27:47 ----A---- C:\WINDOWS\system32\xolehlp.dll
2012-07-02 16:27:47 ----A---- C:\WINDOWS\system32\msdtctm.dll
2012-07-02 16:27:47 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2012-07-02 16:27:47 ----A---- C:\WINDOWS\system32\msdtclog.dll
2012-07-02 16:27:47 ----A---- C:\WINDOWS\system32\msdtc.exe
2012-07-02 16:27:46 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2012-07-02 16:27:45 ----D---- C:\WINDOWS\system32\Com
2012-07-02 16:27:45 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2012-07-02 16:27:45 ----A---- C:\WINDOWS\system32\mtxex.dll
2012-07-02 16:27:45 ----A---- C:\WINDOWS\system32\mtxdm.dll
2012-07-02 16:27:45 ----A---- C:\WINDOWS\system32\comrepl.dll
2012-07-02 16:27:45 ----A---- C:\WINDOWS\system32\comaddin.dll
2012-07-02 16:27:45 ----A---- C:\WINDOWS\system32\colbact.dll
2012-07-02 16:27:44 ----A---- C:\WINDOWS\system32\stclient.dll
2012-07-02 16:27:44 ----A---- C:\WINDOWS\system32\clbcatex.dll
2012-07-02 16:27:44 ----A---- C:\WINDOWS\system32\catsrvut.dll
2012-07-02 16:27:44 ----A---- C:\WINDOWS\system32\catsrvps.dll
2012-07-02 16:27:44 ----A---- C:\WINDOWS\system32\catsrv.dll
2012-07-02 16:27:43 ----A---- C:\WINDOWS\system32\comuid.dll
2012-07-02 16:27:43 ----A---- C:\WINDOWS\system32\comsvcs.dll
2012-07-02 16:27:42 ----A---- C:\WINDOWS\system32\comsnap.dll
2012-07-02 16:27:42 ----A---- C:\WINDOWS\system32\clbcatq.dll
2012-07-02 16:27:35 ----A---- C:\WINDOWS\system32\servdeps.dll
2012-07-02 16:27:35 ----A---- C:\WINDOWS\system32\mmfutil.dll
2012-07-02 16:27:35 ----A---- C:\WINDOWS\system32\licwmi.dll
2012-07-02 16:27:35 ----A---- C:\WINDOWS\system32\cmprops.dll
2012-07-02 16:27:32 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2012-07-02 16:27:31 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

======List of files/folders modified in the last 1 month======

2012-07-02 18:23:17 ----A---- C:\WINDOWS\system.ini
2012-07-02 16:32:00 ----A---- C:\WINDOWS\win.ini
2012-07-02 16:31:34 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdis;avast! Firewall NDIS Filter Service; C:\WINDOWS\system32\DRIVERS\aswNdis.sys [2012-03-07 12112]
R0 aswNdis2;avast! Firewall Core Firewall Service; C:\WINDOWS\system32\drivers\aswNdis2.sys [2012-03-07 196440]
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2005-08-18 93568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-03-07 24920]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 42496]
R1 aswFW;avast! TDI Firewall driver; C:\WINDOWS\system32\drivers\aswFW.sys [2012-03-07 112984]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2012-03-07 24408]
R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-03-07 95704]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-04-06 33536]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-04-06 12928]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2012-03-07 134920]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe [2012-05-04 161664]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-03 250056]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-03-16 407336]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Windows chvíli funguje, potom se absolutně sekne

#4 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files\uTorrentControl2\prxtbuTor.dll
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-746137067-1801674531-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-746137067-1801674531-1003UA.job
C:\Program Files\Conduit

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578b9-7132-4a7a-80e4-30ee31099e03}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"KernelFaultCheck"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Daemonic14
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 08 črc 2012 09:37

Re: Windows chvíli funguje, potom se absolutně sekne

#5 Příspěvek od Daemonic14 »

Tak po tom co OTM všechno vyřídil, se restartoval PC, spustil se, ukázalo se mi jako první jestli Otevřít OTM...dal jsem ne, načetla se plocha, o chvilku později se to zase kouslo :((

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Windows chvíli funguje, potom se absolutně sekne

#6 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Daemonic14
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 08 črc 2012 09:37

Re: Windows chvíli funguje, potom se absolutně sekne

#7 Příspěvek od Daemonic14 »

Tak vyřešeno, ukázalo sež e problém byl nakonec v navzájem nekompatibilních nových RAM :))

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Windows chvíli funguje, potom se absolutně sekne

#8 Příspěvek od Rudy »

OK a díky za info. :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět