VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

nekolikadenní opakovaná modrá smrt

https://forum.viry.cz:443/viewtopic.php?t=128469

Stránka 1 z 2

nekolikadenní opakovaná modrá smrt

Napsal: 01 bře 2013 13:31
od scornful
Prosímo kontrolu logu.
Poslední aktualizace a instalace byly IObit Malware fither, PC Chrono.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Pavel at 2013-03-01 13:28:04
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 15 GB (25%) free of 57 GB
Total RAM: 8150 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:28:12, on 1.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\trend micro\Pavel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=9973
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\IPS\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11999 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
C:\PROGRA~2\AVG\AVG2013\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=2c8da95a-8d7c-403c-a623-bc4207a72523 /coreSdkOptions=4382 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\54530662-48ea-4b55-9757-d77cbec22a4c-1e4-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\AVG2013\avgfws.exe"
"C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\diMaster.dll" /prefetch:1
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\viakaraokesrv.exe
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2013\avgemca.exe"
WLIDSvcM.exe 2396
C:\Windows\system32\SearchIndexer.exe /Embedding
"taskhost.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe" /c /a /s UserSession2
C:\Windows\System32\alg.exe
taskeng.exe {F4FE9AF0-95F1-477E-AA83-BAEA1346C728}
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Steam\steam.exe" -silent
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=a1e5055b-4b10-4e00-a93f-bd1865234773 /coreSdkOptions=4114 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\95011728-49b8-4c5e-9321-901b56570721-a44-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /systemstart /autostart
"C:\Program Files (x86)\Opera\opera.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Users\Pavel\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\coIEPlg.dll [2011-08-11 492984]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\IPS\IPSBHO.DLL [2011-07-25 210872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-02-07 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-02-07 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll [2012-04-16 1508376]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"Steam"=C:\Program Files (x86)\Steam\Steam.exe [2013-02-25 1602984]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-01-08 18705664]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-05-23 5120144]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-02-29 56088]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-05-20 291648]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2013\avgui.exe [2012-12-11 3147384]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2012-12-25 4474832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-03-01 13:28:04 ----D---- C:\rsit
2013-02-28 22:31:57 ----D---- C:\Users\Pavel\AppData\Roaming\Opera
2013-02-28 22:31:53 ----D---- C:\Program Files (x86)\Opera
2013-02-28 14:13:12 ----A---- C:\AdwCleaner[R5].txt
2013-02-28 14:11:07 ----A---- C:\AdwCleaner[S2].txt
2013-02-28 14:10:55 ----A---- C:\AdwCleaner[R4].txt
2013-02-28 14:10:21 ----A---- C:\AdwCleaner[S1].txt
2013-02-28 14:09:56 ----A---- C:\AdwCleaner[R3].txt
2013-02-27 22:56:18 ----A---- C:\AdwCleaner[R2].txt
2013-02-27 22:53:18 ----A---- C:\AdwCleaner[R1].txt
2013-02-27 21:23:45 ----D---- C:\Program Files\trend micro
2013-02-27 17:57:27 ----D---- C:\Program Files (x86)\ESET
2013-02-27 00:07:13 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-02-27 00:07:13 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-02-27 00:07:13 ----A---- C:\Windows\system32\UIAnimation.dll
2013-02-27 00:07:13 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-02-27 00:07:12 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-02-27 00:07:12 ----A---- C:\Windows\system32\WMPhoto.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\dxgi.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d11.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10warp.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10level9.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10core.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10_1.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10.dll
2013-02-27 00:07:10 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-02-27 00:07:10 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-02-27 00:07:10 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-02-27 00:07:10 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\XpsPrint.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\FntCache.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\DWrite.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\d2d1.dll
2013-02-26 19:22:09 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-02-26 19:22:09 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-02-26 19:22:09 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-02-26 19:22:09 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-02-26 19:22:09 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\wksprt.exe
2013-02-26 19:22:09 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-02-26 19:22:09 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-02-26 19:22:09 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\tsgqec.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\rdpudd.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\rdpcorets.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\mstscax.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\mstsc.exe
2013-02-26 19:22:09 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-02-26 19:22:09 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-02-26 19:22:09 ----A---- C:\Windows\system32\aaclient.dll
2013-02-26 19:22:08 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-02-26 19:22:08 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-02-26 19:22:08 ----A---- C:\Windows\system32\wksprtPS.dll
2013-02-26 19:22:08 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2013-02-26 19:22:00 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-02-26 19:22:00 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-02-26 19:22:00 ----A---- C:\Windows\system32\lsasrv.dll
2013-02-26 19:21:59 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-02-26 19:21:59 ----A---- C:\Windows\system32\schannel.dll
2013-02-26 19:21:59 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-02-26 19:21:59 ----A---- C:\Windows\system32\drivers\cng.sys
2013-02-26 19:21:50 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-02-26 19:21:50 ----A---- C:\Windows\system32\qdvd.dll
2013-02-23 09:01:00 ----D---- C:\Users\Pavel\AppData\Roaming\AVG
2013-02-23 09:00:49 ----D---- C:\ProgramData\AVG
2013-02-23 09:00:47 ----SHD---- C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}
2013-02-22 23:38:49 ----D---- C:\Windows\Minidump
2013-02-20 13:28:17 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-02-20 01:17:18 ----SHD---- C:\Windows\SYSWOW64\%APPDATA%
2013-02-19 19:34:38 ----D---- C:\Program Files (x86)\Microsoft Works
2013-02-19 19:34:32 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2013-02-19 19:34:25 ----D---- C:\Windows\PCHEALTH
2013-02-19 19:33:37 ----D---- C:\Program Files\Microsoft Office
2013-02-19 19:33:35 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2013-02-19 19:33:21 ----D---- C:\ProgramData\Microsoft Help
2013-02-19 19:33:14 ----RHD---- C:\MSOCache
2013-02-18 11:20:21 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2013-02-16 11:57:11 ----D---- C:\Users\Pavel\AppData\Roaming\Apple Computer
2013-02-16 11:49:21 ----D---- C:\ProgramData\IObit
2013-02-16 11:49:20 ----D---- C:\Users\Pavel\AppData\Roaming\IObit
2013-02-16 11:49:18 ----D---- C:\Program Files (x86)\IObit
2013-02-16 11:45:25 ----D---- C:\Program Files (x86)\AntiLogger
2013-02-16 11:21:07 ----D---- C:\Users\Pavel\AppData\Roaming\AVG2013
2013-02-16 11:19:38 ----HD---- C:\$AVG
2013-02-16 11:19:38 ----D---- C:\ProgramData\AVG2013
2013-02-16 11:19:28 ----D---- C:\Program Files (x86)\AVG
2013-02-16 11:17:31 ----D---- C:\ProgramData\MFAData
2013-02-14 22:31:27 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-02-14 22:31:27 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-02-14 22:31:27 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-02-14 22:31:27 ----A---- C:\Windows\system32\mshtmled.dll
2013-02-14 22:31:27 ----A---- C:\Windows\system32\ieui.dll
2013-02-14 22:31:26 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-02-14 22:31:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-02-14 22:31:26 ----A---- C:\Windows\SYSWOW64\url.dll
2013-02-14 22:31:26 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-02-14 22:31:26 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-02-14 22:31:26 ----A---- C:\Windows\system32\urlmon.dll
2013-02-14 22:31:26 ----A---- C:\Windows\system32\url.dll
2013-02-14 22:31:26 ----A---- C:\Windows\system32\msfeeds.dll
2013-02-14 22:31:26 ----A---- C:\Windows\system32\jscript9.dll
2013-02-14 22:31:26 ----A---- C:\Windows\system32\ieUnatt.exe
2013-02-14 22:31:25 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-02-14 22:31:25 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-02-14 22:31:25 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-02-14 22:31:25 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-02-14 22:31:25 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-02-14 22:31:25 ----A---- C:\Windows\system32\wininet.dll
2013-02-14 22:31:25 ----A---- C:\Windows\system32\vbscript.dll
2013-02-14 22:31:25 ----A---- C:\Windows\system32\jsproxy.dll
2013-02-14 22:31:25 ----A---- C:\Windows\system32\jscript.dll
2013-02-14 22:31:25 ----A---- C:\Windows\system32\iertutil.dll
2013-02-14 22:31:24 ----A---- C:\Windows\system32\mshtml.dll
2013-02-14 22:31:23 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-02-14 22:31:23 ----A---- C:\Windows\system32\ieframe.dll
2013-02-14 09:10:24 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-02-14 09:10:23 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-02-14 09:10:23 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-02-14 09:10:22 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-02-14 09:10:22 ----A---- C:\Windows\SYSWOW64\user.exe
2013-02-14 09:10:22 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-02-14 09:10:22 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-02-14 09:10:22 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-02-14 09:10:22 ----A---- C:\Windows\system32\winsrv.dll
2013-02-14 09:10:22 ----A---- C:\Windows\system32\win32k.sys
2013-02-14 09:10:22 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-02-14 09:10:21 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-02-09 18:40:11 ----D---- C:\Users\Pavel\AppData\Roaming\dvdcss
2013-02-09 18:14:38 ----D---- C:\Users\Pavel\AppData\Roaming\Theta
2013-02-09 18:09:53 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-02-07 09:08:27 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-02-07 09:08:23 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-02-07 09:08:23 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-02-07 09:08:23 ----A---- C:\Windows\SYSWOW64\java.exe
2013-02-02 21:11:15 ----D---- C:\Users\Pavel\AppData\Roaming\Clickteam
2013-02-02 10:12:14 ----D---- C:\Users\Pavel\AppData\Roaming\.minecraft

======List of files/folders modified in the last 1 months======

2013-03-01 13:28:06 ----D---- C:\Windows\Temp
2013-03-01 13:17:44 ----D---- C:\Windows\System32
2013-03-01 13:17:44 ----D---- C:\Windows\inf
2013-03-01 13:17:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-01 13:15:33 ----A---- C:\Windows\SYSWOW64\log.txt
2013-03-01 13:14:00 ----D---- C:\Users\Pavel\AppData\Roaming\Skype
2013-03-01 13:13:43 ----D---- C:\Windows
2013-03-01 13:13:38 ----D---- C:\Program Files (x86)\Steam
2013-03-01 10:57:46 ----SD---- C:\Users\Pavel\AppData\Roaming\Microsoft
2013-03-01 08:23:27 ----D---- C:\Windows\system32\config
2013-03-01 08:10:33 ----SHD---- C:\System Volume Information
2013-02-28 22:31:53 ----RD---- C:\Program Files (x86)
2013-02-28 20:35:20 ----D---- C:\Windows\system32\Tasks
2013-02-28 20:35:20 ----D---- C:\Windows\system32\drivers
2013-02-28 20:34:59 ----D---- C:\Users\Pavel\AppData\Roaming\Mozilla
2013-02-28 18:30:58 ----D---- C:\Windows\SysWOW64
2013-02-28 18:30:21 ----RD---- C:\Program Files (x86)\Skype
2013-02-28 18:30:21 ----D---- C:\Windows\Tasks
2013-02-28 13:14:50 ----D---- C:\Windows\debug
2013-02-27 21:23:45 ----RD---- C:\Program Files
2013-02-27 20:05:56 ----D---- C:\Windows\system32\NDF
2013-02-27 19:29:54 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-02-27 17:57:28 ----D---- C:\Windows\Downloaded Program Files
2013-02-27 16:14:16 ----D---- C:\Users\Pavel\AppData\Roaming\vlc
2013-02-27 09:41:44 ----D---- C:\Windows\winsxs
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\it-IT
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\es-ES
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\en-US
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\el-GR
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\de-DE
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\da-DK
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-02-27 09:41:34 ----D---- C:\Windows\system32\zh-TW
2013-02-27 09:41:34 ----D---- C:\Windows\system32\zh-HK
2013-02-27 09:41:34 ----D---- C:\Windows\system32\zh-CN
2013-02-27 09:41:34 ----D---- C:\Windows\system32\tr-TR
2013-02-27 09:41:34 ----D---- C:\Windows\system32\sv-SE
2013-02-27 09:41:34 ----D---- C:\Windows\system32\ru-RU
2013-02-27 09:41:34 ----D---- C:\Windows\system32\pt-PT
2013-02-27 09:41:34 ----D---- C:\Windows\system32\pt-BR
2013-02-27 09:41:34 ----D---- C:\Windows\system32\pl-PL
2013-02-27 09:41:34 ----D---- C:\Windows\system32\nl-NL
2013-02-27 09:41:34 ----D---- C:\Windows\system32\nb-NO
2013-02-27 09:41:34 ----D---- C:\Windows\system32\ko-KR
2013-02-27 09:41:34 ----D---- C:\Windows\system32\ja-JP
2013-02-27 09:41:34 ----D---- C:\Windows\system32\it-IT
2013-02-27 09:41:34 ----D---- C:\Windows\system32\hu-HU
2013-02-27 09:41:34 ----D---- C:\Windows\system32\fr-FR
2013-02-27 09:41:34 ----D---- C:\Windows\system32\fi-FI
2013-02-27 09:41:34 ----D---- C:\Windows\system32\es-ES
2013-02-27 09:41:34 ----D---- C:\Windows\system32\en-US
2013-02-27 09:41:34 ----D---- C:\Windows\system32\el-GR
2013-02-27 09:41:34 ----D---- C:\Windows\system32\de-DE
2013-02-27 09:41:34 ----D---- C:\Windows\system32\da-DK
2013-02-27 09:41:34 ----D---- C:\Windows\system32\cs-CZ
2013-02-27 00:07:30 ----D---- C:\Windows\system32\catroot2
2013-02-27 00:07:30 ----D---- C:\Windows\system32\catroot
2013-02-26 20:46:37 ----D---- C:\Windows\rescache
2013-02-26 19:36:36 ----D---- C:\Windows\SYSWOW64\wbem
2013-02-26 19:36:36 ----D---- C:\Windows\SYSWOW64\drivers
2013-02-26 19:36:36 ----D---- C:\Windows\system32\wbem
2013-02-26 19:36:36 ----D---- C:\Windows\system32\DriverStore
2013-02-26 19:36:36 ----D---- C:\Windows\system32\drivers\en-US
2013-02-26 19:36:36 ----D---- C:\Windows\PolicyDefinitions
2013-02-24 16:06:56 ----SHD---- C:\Windows\Installer
2013-02-24 10:15:02 ----RSD---- C:\Windows\assembly
2013-02-24 10:15:02 ----D---- C:\Windows\Logs
2013-02-23 09:00:49 ----HD---- C:\ProgramData
2013-02-21 08:05:50 ----D---- C:\Program Files (x86)\Microsoft Office
2013-02-20 23:37:21 ----A---- C:\Windows\win.ini
2013-02-20 13:28:18 ----SD---- C:\ProgramData\Microsoft
2013-02-20 01:18:09 ----RSD---- C:\Windows\Fonts
2013-02-19 20:38:48 ----D---- C:\Users\Pavel\AppData\Roaming\DAEMON Tools Lite
2013-02-19 19:34:35 ----D---- C:\Program Files (x86)\MSBuild
2013-02-19 19:34:32 ----D---- C:\Program Files (x86)\Common Files
2013-02-19 19:34:31 ----D---- C:\Windows\ShellNew
2013-02-19 19:34:25 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-02-19 19:34:10 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-02-17 15:09:06 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-02-16 14:56:59 ----D---- C:\Users\Pavel\AppData\Roaming\Intel Corporation
2013-02-16 14:56:58 ----D---- C:\Users\Pavel\AppData\Roaming\ATI
2013-02-16 11:27:06 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2013-02-16 11:27:05 ----D---- C:\ProgramData\Spybot - Search & Destroy
2013-02-16 11:19:44 ----D---- C:\Users\Pavel\AppData\Roaming\TuneUp Software
2013-02-15 09:43:32 ----D---- C:\Windows\Microsoft.NET
2013-02-15 09:35:52 ----D---- C:\Windows\SYSWOW64\migration
2013-02-15 09:35:52 ----D---- C:\Windows\system32\migration
2013-02-15 09:35:52 ----D---- C:\Windows\AppPatch
2013-02-15 09:35:52 ----D---- C:\Program Files (x86)\Internet Explorer
2013-02-15 09:35:51 ----D---- C:\Program Files\Internet Explorer
2013-02-14 22:33:05 ----A---- C:\Windows\system32\MRT.exe
2013-02-07 09:08:21 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2013-02-07 09:08:21 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-02-07 08:53:26 ----D---- C:\ProgramData\Skype
2013-02-04 11:21:12 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-02-02 21:54:12 ----D---- C:\Windows\system32\drivers\etc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2012-10-15 63328]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2012-09-21 225120]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2012-11-15 111968]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2012-09-14 40800]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2012-02-01 568600]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-05-20 19264]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMDS64.SYS [2011-07-25 451192]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMEFA64.SYS [2011-07-28 1084536]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-11-02 21616]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2012-09-04 50296]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2012-10-02 185696]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2012-09-21 200032]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20130208.001\BHDrvx64.sys [2013-01-16 1388120]
R1 ccSet_NIS;Norton Internet Security Settings Manager; C:\Windows\system32\drivers\NISx64\1301000.01C\ccSetx64.sys [2011-08-08 167048]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-20 283200]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2012-12-20 484512]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20130228.001\IDSvia64.sys [2012-12-20 513184]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSPX64.SYS [2011-08-02 37496]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1301000.01C\Ironx64.SYS [2011-07-25 189560]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMNETS.SYS [2011-07-25 401016]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2010-11-21 146432]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-01-19 138912]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2012-02-03 59520]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2012-02-03 84736]
R3 FileMonitor;FileMonitor; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2012-01-05 21384]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-05-20 357184]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-05-20 789824]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2012-04-25 104560]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-11-10 60184]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130228.024\ENG64.SYS [2013-01-19 126192]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130228.024\EX64.SYS [2013-01-19 2087664]
R3 RegFilter;RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2012-07-05 33224]
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2009-06-10 51712]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSP64.SYS [2011-08-02 729720]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2012-12-14 174200]
R3 UrlFilter;UrlFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2012-07-05 21904]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2012-05-04 2196592]
S3 gdrv;gdrv; C:\Windows\system32\drivers\gdrv.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-02-26 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-02-26 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-02-26 30208]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2013\avgfws.exe [2012-12-10 1342024]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-15 5814904]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-02-01 13592]
R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2012-01-09 821592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-05-10 165144]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-05-15 277784]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe [2011-08-10 138760]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-12-22 76888]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-05-15 363800]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2012-05-04 27760]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-02-25 543144]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-14 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-27 251248]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-14 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-12-21 1255736]

-----------------EOF-----------------

Re: nekolikadenní opakovaná modrá smrt

Napsal: 01 bře 2013 13:51
od scornful
Ještě doplním. Nedávno velký problém s sevices.exe a svchost. Neustále vyskakování okna a přitom klávesnice neustále psala "QQQQQQQQQ"? Dle rady kamaráda povoleno ve firewall. Zřejmě špatné řešení.

Re: nekolikadenní opakovaná modrá smrt

Napsal: 01 bře 2013 14:07
od scornful
Zkoušel jsem otevřít C:\Windows\Minidump.
Je tam soubor DMP o velikosti 270kB. Nelze zabalit do rar. Přístup odepřen?
Je nutné stáhnout nějaký program na otevření?

Díky moc

Re: nekolikadenní opakovaná modrá smrt

Napsal: 01 bře 2013 14:25
od MiliNess
Nejprve ho překopíruj do složky Dokumenty a odtud upni na http://www.leteckaposta.cz. Balit ho nemusíš, když je jediný.
V Ovládací panely->Nástroje pro správu->Prohlížeč událostí->Protokoly systému Windows->klikni pravým myšítkem na protokol Systém,
vyber Uložit všechny události jako, ulož to jako .evtx soubor a ten upni na http://www.leteckaposta.cz

Re: nekolikadenní opakovaná modrá smrt

Napsal: 01 bře 2013 14:54
od scornful
http://leteckaposta.cz/819892651

Re: nekolikadenní opakovaná modrá smrt

Napsal: 02 bře 2013 00:58
od MiliNess
Ajéje. Ty to tam máš nějaké přezabezpečené.
K chybě dochází díky jednomu ze síťových filtrů, nejpravděpodobněji se jedná o filtr IDSvia64.sys (Symantec Intrusion Detection)
Dále by to mohl být filtr avgidsdrivera.sys (DS Application Activity Monitor Driver od AVG), BHDrvx64.sys (BASH Driver - Symantec) a FileMonitor.sys od IObit.
(zhruba seřazeny podle pravděpodobnosti způsobování havárie).
Možná bych sázel i na avgidsdrivera.sys nebo jeho konflikt s IDSvia64.sys.
Jinak používat dva antiviry je největší blbost, kterou můžeš pro svou ochranu udělat (Norton Internet Security + AVG2013)

Re: nekolikadenní opakovaná modrá smrt

Napsal: 02 bře 2013 21:24
od scornful
:-)
jj dva antiviry nejsou dobrá volba. Jenže když jsem začal mít pocit, že mám zavirovanej počítač tak jsem v zoufalství nechal kamaráda doinstalovat mně tam to AVG.
Počítač je asi 3M starý a ještě je tam původní Norton od prodejce. Plánuji po vypršení licence u Nortona zakoupit nějaký jiný.
Patrně NOD32 jelikož jeho on-line scan mně odstranil pár trojanů. Ty které Norton ani AVG neregistrovali.

Zruším to AVG atd a snad to bude OK. Díky.
Pavel

Re: nekolikadenní opakovaná modrá smrt

Napsal: 03 bře 2013 00:35
od MiliNess
Zruš. Pokud to ještě spadne, upni nový minidump.

Re: nekolikadenní opakovaná modrá smrt

Napsal: 06 bře 2013 18:52
od scornful
Dobrý den,
bohužel dnes opět modrá smrt. AVG bylo odinstalováno ale ještě nebyl počítač dle požadavku restartován, možná to má vliv.
Modrá smrt nastala při pokusu otevřít int.odkaz. Nyní svítí modrá obrazovka i 5 sekund. Dříve jen problikla a spustila restart.
Díky předem za help.

Pavel

Re: nekolikadenní opakovaná modrá smrt

Napsal: 06 bře 2013 18:57
od scornful
přidávám minidump
http://leteckaposta.cz/999391340

log viz níže
Logfile of random's system information tool 1.08 (written by random/random)
Run by Pavel at 2013-03-06 18:56:54
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 15 GB (26%) free of 57 GB
Total RAM: 8150 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:57:01, on 6.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\Pavel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=9973
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\IPS\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11798 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe"
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\diMaster.dll" /prefetch:1
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\viakaraokesrv.exe
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\alg.exe
WLIDSvcM.exe 1436
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe" /c /a /s UserSession2
taskeng.exe {783CCDD4-CE51-4A87-9090-F885490383D5}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Steam\steam.exe" -silent
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /systemstart /autostart
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Opera\opera.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Pavel\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\coIEPlg.dll [2011-08-11 492984]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\IPS\IPSBHO.DLL [2011-07-25 210872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-02-07 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-02-07 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll [2012-04-16 1508376]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"Steam"=C:\Program Files (x86)\Steam\Steam.exe [2013-02-25 1602984]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-01-08 18705664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-05-23 5120144]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-02-29 56088]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-05-20 291648]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2012-12-25 4474832]
"ArcSoft Connection Service"=C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-03-18 207360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-03-06 16:33:14 ----SHD---- C:\Config.Msi
2013-03-04 12:06:05 ----D---- C:\ProgramData\ArcSoft
2013-03-04 12:03:50 ----D---- C:\Users\Pavel\AppData\Roaming\ArcSoft
2013-03-03 20:54:13 ----D---- C:\Program Files (x86)\Firebird
2013-03-01 13:28:04 ----D---- C:\rsit
2013-02-28 22:31:57 ----D---- C:\Users\Pavel\AppData\Roaming\Opera
2013-02-28 22:31:53 ----D---- C:\Program Files (x86)\Opera
2013-02-28 14:13:12 ----A---- C:\AdwCleaner[R5].txt
2013-02-28 14:11:07 ----A---- C:\AdwCleaner[S2].txt
2013-02-28 14:10:55 ----A---- C:\AdwCleaner[R4].txt
2013-02-28 14:10:21 ----A---- C:\AdwCleaner[S1].txt
2013-02-28 14:09:56 ----A---- C:\AdwCleaner[R3].txt
2013-02-27 22:56:18 ----A---- C:\AdwCleaner[R2].txt
2013-02-27 22:53:18 ----A---- C:\AdwCleaner[R1].txt
2013-02-27 21:23:45 ----D---- C:\Program Files\trend micro
2013-02-27 17:57:27 ----D---- C:\Program Files (x86)\ESET
2013-02-27 00:07:13 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-02-27 00:07:13 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-02-27 00:07:13 ----A---- C:\Windows\system32\UIAnimation.dll
2013-02-27 00:07:13 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-02-27 00:07:12 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-02-27 00:07:12 ----A---- C:\Windows\system32\WMPhoto.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 00:07:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-02-27 00:07:11 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\dxgi.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d11.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10warp.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10level9.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10core.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10_1.dll
2013-02-27 00:07:11 ----A---- C:\Windows\system32\d3d10.dll
2013-02-27 00:07:10 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-02-27 00:07:10 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-02-27 00:07:10 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-02-27 00:07:10 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\XpsPrint.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\FntCache.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\DWrite.dll
2013-02-27 00:07:10 ----A---- C:\Windows\system32\d2d1.dll
2013-02-26 19:22:09 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-02-26 19:22:09 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-02-26 19:22:09 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-02-26 19:22:09 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-02-26 19:22:09 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\wksprt.exe
2013-02-26 19:22:09 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-02-26 19:22:09 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-02-26 19:22:09 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\tsgqec.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\rdpudd.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\rdpcorets.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\mstscax.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\mstsc.exe
2013-02-26 19:22:09 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-02-26 19:22:09 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-02-26 19:22:09 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-02-26 19:22:09 ----A---- C:\Windows\system32\aaclient.dll
2013-02-26 19:22:08 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-02-26 19:22:08 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-02-26 19:22:08 ----A---- C:\Windows\system32\wksprtPS.dll
2013-02-26 19:22:08 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2013-02-26 19:22:00 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-02-26 19:22:00 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-02-26 19:22:00 ----A---- C:\Windows\system32\lsasrv.dll
2013-02-26 19:21:59 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-02-26 19:21:59 ----A---- C:\Windows\system32\schannel.dll
2013-02-26 19:21:59 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-02-26 19:21:59 ----A---- C:\Windows\system32\drivers\cng.sys
2013-02-26 19:21:50 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-02-26 19:21:50 ----A---- C:\Windows\system32\qdvd.dll
2013-02-23 09:01:00 ----D---- C:\Users\Pavel\AppData\Roaming\AVG
2013-02-23 09:00:49 ----D---- C:\ProgramData\AVG
2013-02-23 09:00:47 ----SHD---- C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}
2013-02-22 23:38:49 ----D---- C:\Windows\Minidump
2013-02-20 13:28:17 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-02-20 01:17:18 ----SHD---- C:\Windows\SYSWOW64\%APPDATA%
2013-02-19 19:34:38 ----D---- C:\Program Files (x86)\Microsoft Works
2013-02-19 19:34:32 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2013-02-19 19:34:25 ----D---- C:\Windows\PCHEALTH
2013-02-19 19:33:37 ----D---- C:\Program Files\Microsoft Office
2013-02-19 19:33:35 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2013-02-19 19:33:21 ----D---- C:\ProgramData\Microsoft Help
2013-02-19 19:33:14 ----RHD---- C:\MSOCache
2013-02-18 11:20:21 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2013-02-16 11:57:11 ----D---- C:\Users\Pavel\AppData\Roaming\Apple Computer
2013-02-16 11:49:21 ----D---- C:\ProgramData\IObit
2013-02-16 11:49:20 ----D---- C:\Users\Pavel\AppData\Roaming\IObit
2013-02-16 11:49:18 ----D---- C:\Program Files (x86)\IObit
2013-02-16 11:45:25 ----D---- C:\Program Files (x86)\AntiLogger
2013-02-16 11:19:38 ----D---- C:\ProgramData\AVG2013
2013-02-16 11:17:31 ----D---- C:\ProgramData\MFAData
2013-02-14 22:31:27 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-02-14 22:31:27 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-02-14 22:31:27 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-02-14 22:31:27 ----A---- C:\Windows\system32\mshtmled.dll
2013-02-14 22:31:27 ----A---- C:\Windows\system32\ieui.dll
2013-02-14 22:31:26 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-02-14 22:31:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-02-14 22:31:26 ----A---- C:\Windows\SYSWOW64\url.dll
2013-02-14 22:31:26 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-02-14 22:31:26 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-02-14 22:31:26 ----A---- C:\Windows\system32\urlmon.dll
2013-02-14 22:31:26 ----A---- C:\Windows\system32\url.dll
2013-02-14 22:31:26 ----A---- C:\Windows\system32\msfeeds.dll
2013-02-14 22:31:26 ----A---- C:\Windows\system32\jscript9.dll
2013-02-14 22:31:26 ----A---- C:\Windows\system32\ieUnatt.exe
2013-02-14 22:31:25 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-02-14 22:31:25 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-02-14 22:31:25 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-02-14 22:31:25 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-02-14 22:31:25 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-02-14 22:31:25 ----A---- C:\Windows\system32\wininet.dll
2013-02-14 22:31:25 ----A---- C:\Windows\system32\vbscript.dll
2013-02-14 22:31:25 ----A---- C:\Windows\system32\jsproxy.dll
2013-02-14 22:31:25 ----A---- C:\Windows\system32\jscript.dll
2013-02-14 22:31:25 ----A---- C:\Windows\system32\iertutil.dll
2013-02-14 22:31:24 ----A---- C:\Windows\system32\mshtml.dll
2013-02-14 22:31:23 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-02-14 22:31:23 ----A---- C:\Windows\system32\ieframe.dll
2013-02-14 09:10:24 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-02-14 09:10:23 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-02-14 09:10:23 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-02-14 09:10:22 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-02-14 09:10:22 ----A---- C:\Windows\SYSWOW64\user.exe
2013-02-14 09:10:22 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-02-14 09:10:22 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-02-14 09:10:22 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-02-14 09:10:22 ----A---- C:\Windows\system32\winsrv.dll
2013-02-14 09:10:22 ----A---- C:\Windows\system32\win32k.sys
2013-02-14 09:10:22 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-02-14 09:10:21 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-02-09 18:40:11 ----D---- C:\Users\Pavel\AppData\Roaming\dvdcss
2013-02-09 18:14:38 ----D---- C:\Users\Pavel\AppData\Roaming\Theta
2013-02-09 18:09:53 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-02-07 09:08:27 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-02-07 09:08:23 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-02-07 09:08:23 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-02-07 09:08:23 ----A---- C:\Windows\SYSWOW64\java.exe

======List of files/folders modified in the last 1 months======

2013-03-06 18:56:56 ----D---- C:\Windows\Temp
2013-03-06 18:42:28 ----D---- C:\Windows\System32
2013-03-06 18:42:28 ----D---- C:\Windows\inf
2013-03-06 18:42:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-06 18:40:12 ----A---- C:\Windows\SYSWOW64\log.txt
2013-03-06 18:38:51 ----D---- C:\Users\Pavel\AppData\Roaming\Skype
2013-03-06 18:38:19 ----D---- C:\Windows
2013-03-06 18:38:17 ----D---- C:\Program Files (x86)\Steam
2013-03-06 18:38:05 ----RD---- C:\Program Files (x86)
2013-03-06 16:33:51 ----SHD---- C:\Windows\Installer
2013-03-06 16:33:50 ----SHD---- C:\System Volume Information
2013-03-06 16:33:36 ----D---- C:\Windows\system32\drivers
2013-03-06 12:35:32 ----D---- C:\Windows\system32\config
2013-03-05 12:09:34 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-03-04 12:16:04 ----D---- C:\Windows\winsxs
2013-03-04 12:06:05 ----HD---- C:\ProgramData
2013-03-04 12:05:04 ----D---- C:\Program Files (x86)\Common Files
2013-03-04 10:33:36 ----D---- C:\Users\Pavel\AppData\Roaming\DAEMON Tools Lite
2013-03-03 21:24:07 ----SD---- C:\Users\Pavel\AppData\Roaming\Microsoft
2013-03-03 21:15:14 ----D---- C:\Windows\SysWOW64
2013-03-01 17:11:43 ----D---- C:\Windows\rescache
2013-02-28 20:35:20 ----D---- C:\Windows\system32\Tasks
2013-02-28 20:34:59 ----D---- C:\Users\Pavel\AppData\Roaming\Mozilla
2013-02-28 18:30:21 ----RD---- C:\Program Files (x86)\Skype
2013-02-28 18:30:21 ----D---- C:\Windows\Tasks
2013-02-28 13:14:50 ----D---- C:\Windows\debug
2013-02-27 21:23:45 ----RD---- C:\Program Files
2013-02-27 20:05:56 ----D---- C:\Windows\system32\NDF
2013-02-27 19:29:54 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-02-27 17:57:28 ----D---- C:\Windows\Downloaded Program Files
2013-02-27 16:14:16 ----D---- C:\Users\Pavel\AppData\Roaming\vlc
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\it-IT
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\es-ES
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\en-US
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\el-GR
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\de-DE
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\da-DK
2013-02-27 09:41:35 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-02-27 09:41:34 ----D---- C:\Windows\system32\zh-TW
2013-02-27 09:41:34 ----D---- C:\Windows\system32\zh-HK
2013-02-27 09:41:34 ----D---- C:\Windows\system32\zh-CN
2013-02-27 09:41:34 ----D---- C:\Windows\system32\tr-TR
2013-02-27 09:41:34 ----D---- C:\Windows\system32\sv-SE
2013-02-27 09:41:34 ----D---- C:\Windows\system32\ru-RU
2013-02-27 09:41:34 ----D---- C:\Windows\system32\pt-PT
2013-02-27 09:41:34 ----D---- C:\Windows\system32\pt-BR
2013-02-27 09:41:34 ----D---- C:\Windows\system32\pl-PL
2013-02-27 09:41:34 ----D---- C:\Windows\system32\nl-NL
2013-02-27 09:41:34 ----D---- C:\Windows\system32\nb-NO
2013-02-27 09:41:34 ----D---- C:\Windows\system32\ko-KR
2013-02-27 09:41:34 ----D---- C:\Windows\system32\ja-JP
2013-02-27 09:41:34 ----D---- C:\Windows\system32\it-IT
2013-02-27 09:41:34 ----D---- C:\Windows\system32\hu-HU
2013-02-27 09:41:34 ----D---- C:\Windows\system32\fr-FR
2013-02-27 09:41:34 ----D---- C:\Windows\system32\fi-FI
2013-02-27 09:41:34 ----D---- C:\Windows\system32\es-ES
2013-02-27 09:41:34 ----D---- C:\Windows\system32\en-US
2013-02-27 09:41:34 ----D---- C:\Windows\system32\el-GR
2013-02-27 09:41:34 ----D---- C:\Windows\system32\de-DE
2013-02-27 09:41:34 ----D---- C:\Windows\system32\da-DK
2013-02-27 09:41:34 ----D---- C:\Windows\system32\cs-CZ
2013-02-27 00:07:30 ----D---- C:\Windows\system32\catroot2
2013-02-27 00:07:30 ----D---- C:\Windows\system32\catroot
2013-02-26 19:36:36 ----D---- C:\Windows\SYSWOW64\wbem
2013-02-26 19:36:36 ----D---- C:\Windows\SYSWOW64\drivers
2013-02-26 19:36:36 ----D---- C:\Windows\system32\wbem
2013-02-26 19:36:36 ----D---- C:\Windows\system32\DriverStore
2013-02-26 19:36:36 ----D---- C:\Windows\system32\drivers\en-US
2013-02-26 19:36:36 ----D---- C:\Windows\PolicyDefinitions
2013-02-24 10:15:02 ----RSD---- C:\Windows\assembly
2013-02-24 10:15:02 ----D---- C:\Windows\Logs
2013-02-21 08:05:50 ----D---- C:\Program Files (x86)\Microsoft Office
2013-02-20 23:37:21 ----A---- C:\Windows\win.ini
2013-02-20 13:28:18 ----SD---- C:\ProgramData\Microsoft
2013-02-20 01:18:09 ----RSD---- C:\Windows\Fonts
2013-02-19 19:34:35 ----D---- C:\Program Files (x86)\MSBuild
2013-02-19 19:34:31 ----D---- C:\Windows\ShellNew
2013-02-19 19:34:25 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-02-19 19:34:10 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-02-17 15:09:06 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-02-16 14:56:59 ----D---- C:\Users\Pavel\AppData\Roaming\Intel Corporation
2013-02-16 14:56:58 ----D---- C:\Users\Pavel\AppData\Roaming\ATI
2013-02-16 11:27:06 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2013-02-16 11:27:05 ----D---- C:\ProgramData\Spybot - Search & Destroy
2013-02-16 11:19:44 ----D---- C:\Users\Pavel\AppData\Roaming\TuneUp Software
2013-02-15 09:43:32 ----D---- C:\Windows\Microsoft.NET
2013-02-15 09:35:52 ----D---- C:\Windows\SYSWOW64\migration
2013-02-15 09:35:52 ----D---- C:\Windows\system32\migration
2013-02-15 09:35:52 ----D---- C:\Windows\AppPatch
2013-02-15 09:35:52 ----D---- C:\Program Files (x86)\Internet Explorer
2013-02-15 09:35:51 ----D---- C:\Program Files\Internet Explorer
2013-02-14 22:33:05 ----A---- C:\Windows\system32\MRT.exe
2013-02-07 09:08:21 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2013-02-07 09:08:21 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-02-07 08:53:26 ----D---- C:\ProgramData\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2012-02-01 568600]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-05-20 19264]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMDS64.SYS [2011-07-25 451192]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMEFA64.SYS [2011-07-28 1084536]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-11-02 21616]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20130301.001\BHDrvx64.sys [2013-01-16 1388120]
R1 ccSet_NIS;Norton Internet Security Settings Manager; C:\Windows\system32\drivers\NISx64\1301000.01C\ccSetx64.sys [2011-08-08 167048]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-20 283200]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2012-12-20 484512]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20130305.001\IDSvia64.sys [2012-12-20 513184]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSPX64.SYS [2011-08-02 37496]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1301000.01C\Ironx64.SYS [2011-07-25 189560]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMNETS.SYS [2011-07-25 401016]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2010-11-21 146432]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-01-19 138912]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2012-02-03 59520]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2012-02-03 84736]
R3 FileMonitor;FileMonitor; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2012-01-05 21384]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-05-20 357184]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-05-20 789824]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2012-04-25 104560]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-11-10 60184]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130306.005\ENG64.SYS [2013-01-19 126192]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130306.005\EX64.SYS [2013-01-19 2087664]
R3 RegFilter;RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2012-07-05 33224]
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2009-06-10 51712]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSP64.SYS [2011-08-02 729720]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2012-12-14 174200]
R3 UrlFilter;UrlFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2012-07-05 21904]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2012-05-04 2196592]
S3 gdrv;gdrv; C:\Windows\system32\drivers\gdrv.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-02-26 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-02-26 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-02-26 30208]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-02-01 13592]
R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2012-01-09 821592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-05-10 165144]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-05-15 277784]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe [2011-08-10 138760]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-12-22 76888]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-05-15 363800]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2012-05-04 27760]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-02-25 543144]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-14 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-27 251248]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-14 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-12-21 1255736]

-----------------EOF-----------------

Re: nekolikadenní opakovaná modrá smrt

Napsal: 06 bře 2013 19:38
od MiliNess
Minidump tam není, tak ho prosím upni znovu.

Re: nekolikadenní opakovaná modrá smrt

Napsal: 06 bře 2013 20:02
od scornful
heh.
snad teď

http://leteckaposta.cz/816733449

Re: nekolikadenní opakovaná modrá smrt

Napsal: 06 bře 2013 20:14
od scornful
pořád to padá. Posílám aktuální.
http://leteckaposta.cz/215041789

Re: nekolikadenní opakovaná modrá smrt

Napsal: 06 bře 2013 20:19
od MiliNess
Tím "minidump" myslím nový soubor/y ze složky Windows\Minidump
Raději je všechny zararuj a upni.

Re: nekolikadenní opakovaná modrá smrt

Napsal: 06 bře 2013 20:29
od scornful
http://leteckaposta.cz/595561247
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz