VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Pomalý PC

https://forum.viry.cz:443/viewtopic.php?t=131230

Stránka 1 z 2

Pomalý PC

Napsal: 02 črc 2013 16:05
od kniightfiight
Zdravím

mám podozrenie ze mám u seba v PC nejaký keylogger. PC je pomalší (o dosť sa spomalil, keď som nainštaloval ESET NOD32 Antivirus--zaberá 80+MB RAM, ćo by asi nemal.... Mal som aj Bitdefender, ten zaberal oveľa menej, ale ten bol s firewallom, ktorý mi rušil nejaké aplikácie, tak som sa vrátil k ESETu)
Posielam log z RSIT a prosím o optimalizáciu PC, ak sa dá. Programy na zistovanie Aktualizácií tam nepotrebujem, ani Toolbary, ani iné antivírusy a pozostatky po nich okrem ESETU
Plus nejde spustiť Správca úloh, vypisuje to, že Správca systému vypol správcu úloh....

DAKUJEM VELMI PEKNE



Tento súbor je LOG.TXT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Andrej at 2013-07-02 16:54:06
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 375 GB (80%) free of 470 GB
Total RAM: 3071 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:54:23, on 2. 7. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
D:\Andrej\Stahovanie\Xfire\Xfire.exe
C:\Program Files\Sticky Password\stpass.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Andrej\Desktop\RSIT.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Andrej.exe
C:\Windows\system32\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SMTTB2009 - -{FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Xfire] "D:\Andrej\Stahovanie\Xfire\Xfire.exe" -minimize
O4 - HKCU\..\Run: [StickyPassword] "C:\Program Files\Sticky Password\stpass.exe" /autorunned
O8 - Extra context menu item: Sticky Password - res://C:\Program Files\Sticky Password\spIEBho.dll/616
O9 - Extra button: Sothink SWF Catcher - -{E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - -{E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm (file missing)
O9 - Extra button: HiDownload - {F4FBA929-A891-492C-A0F6-5C79CC4F1742} - C:\Program Files\StreamingStar\HiDownload_Platinum\HiDownloadPlatinum.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: mental ray 3.9 Satellite for Autodesk 3ds Max 2012 32-bit - English 32-bit (mi-raysat_3dsmax2012_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Unknown owner - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 6109 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GlaryInitialize.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-748102567-3861943476-210638618-1003UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.sk"
prefs.js - "extensions.enabledItems" - "{35106bca-6c78-48c7-ac28-56df30b51d2a}:1.3.8, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.3, {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:5.0.1, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {70df8d13-bdd3-448e-944c-efde21b77161}:3.3.3.2, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, jqs@sun.com:1.0, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, artur.dubovoy@gmail.com:2.0.21, engine@conduit.com:3.3.3.2, plugin2@gameplaylabs.com:2.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "chrome://browser-region/locale/region.properties"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Program Files\Mozilla Firefox\plugins\
nppdf32.dll

C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\searchplugins\
icqplugin-1.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\-{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-06-10 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-06-10 171424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2012-11-14 5074384]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Xfire"=D:\Andrej\Stahovanie\Xfire\Xfire.exe [2013-03-21 3560832]
"StickyPassword"=C:\Program Files\Sticky Password\stpass.exe [2013-06-19 8136504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2013-04-05 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=1
"SynchronousUserGroupPolicy"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoInstrumentation"=1
"NoDrives"=0
"NoDriveTypeAutoRun"=145
"NoAutoTrayNotify"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.XFR1"=xfcodec.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
"VIDC.XVID"=xvidvfw.dll
"wave4"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"wave8"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave5"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - C:\Windows\NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2013-07-02 16:54:06 ----D---- C:\rsit
2013-07-02 16:54:06 ----D---- C:\Program Files\trend micro
2013-07-02 16:26:59 ----D---- C:\ProgramData\ESET
2013-07-02 16:26:59 ----D---- C:\Program Files\ESET
2013-07-02 16:19:38 ----HD---- C:\ProgramData\sacache
2013-07-02 16:19:20 ----H---- C:\ProgramData\saopts.dat
2013-07-02 16:15:37 ----D---- C:\ProgramData\AgentSS
2013-07-02 16:15:23 ----HD---- C:\ProgramData\sa
2013-06-28 12:02:29 ----D---- C:\Program Files\PSPad editor
2013-06-27 16:29:25 ----D---- C:\Program Files\WinHTTrack
2013-06-27 00:20:27 ----A---- C:\bdlog.txt
2013-06-27 00:05:02 ----D---- C:\Users\Andrej\AppData\Roaming\liQeNSoft
2013-06-26 23:56:57 ----D---- C:\ProgramData\BDLogging
2013-06-26 23:56:48 ----A---- C:\Windows\capicom.dll
2013-06-26 23:49:44 ----D---- C:\Users\Andrej\AppData\Roaming\QuickScan
2013-06-26 23:48:46 ----D---- C:\Program Files\Common Files\Bitdefender
2013-06-24 19:20:46 ----D---- C:\Users\Andrej\AppData\Roaming\PSpad
2013-06-24 13:57:02 ----D---- C:\Users\Andrej\AppData\Roaming\Lamantine
2013-06-24 13:56:08 ----D---- C:\Program Files\Sticky Password
2013-06-17 14:57:01 ----D---- C:\Program Files\Common Files\Macrovision Shared
2013-06-14 14:09:31 ----D---- C:\Program Files\Sony
2013-06-14 14:03:07 ----D---- C:\Program Files\Common Files\SourceTec
2013-06-14 14:03:02 ----D---- C:\Program Files\Sothink SWF Decompiler
2013-06-12 20:48:55 ----A---- C:\Windows\system32\urlmon.dll
2013-06-12 20:48:55 ----A---- C:\Windows\system32\ieui.dll
2013-06-12 20:48:53 ----A---- C:\Windows\system32\ieframe.dll
2013-06-12 20:48:52 ----A---- C:\Windows\system32\mshtml.dll
2013-06-12 20:48:52 ----A---- C:\Windows\system32\iertutil.dll
2013-06-12 20:46:01 ----A---- C:\Windows\system32\jscript.dll
2013-06-12 20:45:59 ----A---- C:\Windows\system32\jsproxy.dll
2013-06-12 20:45:59 ----A---- C:\Windows\system32\jscript9.dll
2013-06-12 20:45:59 ----A---- C:\Windows\system32\iesetup.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-12 20:45:58 ----A---- C:\Windows\system32\msfeeds.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\iesysprep.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\iernonce.dll
2013-06-12 20:45:58 ----A---- C:\Windows\system32\ie4uinit.exe
2013-06-12 20:45:55 ----A---- C:\Windows\system32\wininet.dll
2013-06-12 10:10:41 ----A---- C:\Windows\system32\d3d11.dll
2013-06-12 10:10:35 ----A---- C:\Windows\system32\cryptdlg.dll
2013-06-12 10:10:32 ----A---- C:\Windows\system32\win32spl.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\cryptsvc.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\cryptnet.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\crypt32.dll
2013-06-12 10:10:30 ----A---- C:\Windows\system32\certutil.exe
2013-06-12 10:10:30 ----A---- C:\Windows\system32\certenc.dll
2013-06-12 10:10:25 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-06-12 10:10:24 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-06-12 10:10:24 ----A---- C:\Windows\system32\ntkrnlpa.exe
2013-06-12 10:10:22 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-06-11 10:31:30 ----D---- C:\ProgramData\EA Core
2013-06-11 10:29:38 ----D---- C:\ProgramData\Electronic Arts
2013-06-10 10:11:34 ----A---- C:\Windows\system32\javaws.exe
2013-06-10 10:11:28 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2013-06-10 10:11:28 ----A---- C:\Windows\system32\javaw.exe
2013-06-10 10:11:28 ----A---- C:\Windows\system32\java.exe
2013-06-06 19:46:52 ----D---- C:\Program Files\Actual Installer

======List of files/folders modified in the last 1 month======

2013-07-02 16:54:12 ----D---- C:\Windows\temp
2013-07-02 16:54:06 ----D---- C:\Program Files
2013-07-02 16:52:31 ----D---- C:\Windows\System32
2013-07-02 16:52:31 ----D---- C:\Windows\Help
2013-07-02 16:50:55 ----D---- C:\Windows\system32\config
2013-07-02 16:45:35 ----HD---- C:\Windows\system32\GroupPolicy
2013-07-02 16:35:43 ----D---- C:\Users\Andrej\AppData\Roaming\Macromedia
2013-07-02 16:32:45 ----AD---- C:\Windows
2013-07-02 16:28:53 ----SHD---- C:\Windows\Installer
2013-07-02 16:28:18 ----D---- C:\Windows\system32\drivers
2013-07-02 16:28:14 ----D---- C:\Windows\system32\DriverStore
2013-07-02 16:28:14 ----D---- C:\Windows\inf
2013-07-02 16:26:59 ----HD---- C:\ProgramData
2013-07-02 16:25:32 ----SHD---- C:\System Volume Information
2013-07-02 15:31:15 ----D---- C:\Users\Andrej\AppData\Roaming\Xfire
2013-06-30 16:21:58 ----D---- C:\Users\Andrej\AppData\Roaming\Skype
2013-06-28 20:16:34 ----D---- C:\ProgramData\Skype
2013-06-28 20:16:33 ----RD---- C:\Program Files\Skype
2013-06-28 17:57:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-28 12:56:09 ----D---- C:\Windows\Microsoft.NET
2013-06-28 12:55:53 ----RSD---- C:\Windows\assembly
2013-06-28 09:17:06 ----D---- C:\ProgramData\boost_interprocess
2013-06-28 09:13:35 ----D---- C:\Program Files\Autodesk
2013-06-28 09:12:32 ----D---- C:\Program Files\Common Files\Autodesk Shared
2013-06-28 09:11:08 ----D---- C:\ProgramData\Autodesk
2013-06-27 21:15:42 ----D---- C:\ProgramData\Xfire
2013-06-27 12:18:08 ----D---- C:\Windows\system32\drivers\etc
2013-06-27 00:34:52 ----D---- C:\Windows\winsxs
2013-06-27 00:31:15 ----D---- C:\Windows\system32\catroot
2013-06-27 00:30:23 ----D---- C:\Windows\system32\catroot2
2013-06-27 00:23:40 ----A---- C:\Windows\ntbtlog.txt
2013-06-27 00:11:28 ----D---- C:\Users\Andrej\AppData\Roaming\GlarySoft
2013-06-26 23:48:46 ----D---- C:\Program Files\Common Files
2013-06-24 19:32:32 ----D---- C:\Program Files\JDownloader
2013-06-24 14:33:46 ----D---- C:\Windows\Prefetch
2013-06-23 14:33:45 ----RD---- C:\Users
2013-06-21 13:55:26 ----D---- C:\$RECYCLE.BIN
2013-06-20 21:51:20 ----D---- C:\Windows\Tasks
2013-06-20 21:51:20 ----D---- C:\Windows\system32\wfp
2013-06-20 21:51:20 ----D---- C:\Program Files\Internet Explorer
2013-06-20 21:51:19 ----D---- C:\Windows\system32\wbem
2013-06-20 21:51:19 ----D---- C:\Windows\system32\CodeIntegrity
2013-06-20 21:51:18 ----D---- C:\Users\Andrej\AppData\Roaming\GHISLER
2013-06-20 21:51:17 ----D---- C:\ProgramData\FLEXnet
2013-06-20 21:51:17 ----D---- C:\Program Files\Glary Utilities
2013-06-20 21:51:14 ----D---- C:\Windows\registration
2013-06-20 21:51:05 ----D---- C:\Program Files\Common Files\AVSMedia
2013-06-16 20:02:16 ----D---- C:\Program Files\Mozilla Firefox
2013-06-16 12:23:42 ----D---- C:\Windows\rescache
2013-06-14 14:08:49 ----D---- C:\Users\Andrej\AppData\Roaming\Sony
2013-06-12 20:51:41 ----D---- C:\Windows\system32\sk-SK
2013-06-12 20:51:41 ----D---- C:\Windows\system32\en-US
2013-06-12 20:50:25 ----D---- C:\ProgramData\Microsoft Help
2013-06-12 20:46:51 ----A---- C:\Windows\system32\MRT.exe
2013-06-10 10:11:45 ----D---- C:\Program Files\Common Files\Java
2013-06-10 10:11:19 ----A---- C:\Windows\system32\npdeployJava1.dll
2013-06-10 10:11:18 ----A---- C:\Windows\system32\deployJava1.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-12-07 436792]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-10-08 170656]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-10-08 121216]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2012-10-08 104712]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-12-13 3921448]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2013-02-18 149352]
R3 NVNET;NVIDIA nForce 10/100 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 avbu93qw;avbu93qw; C:\Windows\system32\drivers\avbu93qw.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2011-12-16 14656]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35088]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S4 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\AVGIDSShim.Sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2012-11-14 1329304]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 mi-raysat_3dsmax2012_32;mental ray 3.9 Satellite for Autodesk 3ds Max 2012 32-bit - English 32-bit; C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe [2011-02-23 86016]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-03 162408]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-06-17 1044816]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-08 1343400]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-19 256904]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-18 639776]
S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-26 1260320]
S4 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2010-06-25 117264]
S4 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
S4 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------











Tento súbor je INFO.TXT

info.txt logfile of random's system information tool 1.09 2013-07-02 16:54:26

======Uninstall list======

Update for Microsoft Office 2007 (KB2508958)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}
-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL
-->C:\Windows\UNNeroShowTime.exe /UNINSTALL
-->C:\Windows\UNNeroVision.exe /UNINSTALL
-->C:\Windows\UNRecode.exe /UNINSTALL
Actual Installer 4.8-->C:\Program Files\Actual Installer\Uninstall.exe
Adobe AIR-->c:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A0087DDE-69D0-11E2-AD57-43CA6188709B}
Adobe Community Help-->msiexec /qb /x {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Community Help-->MsiExec.exe /I{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Flash Player 11 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil32_11_7_700_202_ActiveX.exe -maintain activex
Adobe Flash Player 11 Plugin-->C:\Windows\system32\Macromed\Flash\FlashUtil32_11_7_700_202_Plugin.exe -maintain plugin
Adobe Photoshop CS6-->C:\Program Files\Common Files\Adobe\OOBE\PDApp\core\PDApp.exe --appletID="DWA_UI" --appletVersion="2.0" --mode="Uninstall" --mediaSignature="{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}"
Adobe Reader XI - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AB0000000001}
Age of Empires III - The Asian Dynasties-->C:\Program Files\InstallShield Installation Information\{C43C1415-3DFC-4089-9A32-0BECF28A6046}\setup.exe -runfromtemp -l0x0409
Age of Empires III - The WarChiefs-->C:\PROGRA~1\COMMON~1\INSTAL~2\Driver\11\INTEL3~1\IDriver.exe /M{1C08A24C-B168-407E-A826-68FAF5F20710}
Aktualizácia Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-041B-0000-0000000FF1CE} /uninstall {9A8C39B0-D27F-4F81-BE74-2FECF164707E}
Aktualizácia Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-041B-0000-0000000FF1CE} /uninstall {CE23B3DC-18CC-46FC-A309-81D6670F8D3D}
Aktualizácia Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-041B-0000-0000000FF1CE} /uninstall {D6DBF512-87C0-4F6A-8FB9-AC3A389D9DE5}
Aktualizácie NVIDIA 1.11.3-->"C:\Windows\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{8CEEBF80-15BF-4547-839E-F0C6EF33C8F4}\NVI2.DLL",UninstallPackage Display.Update
Assassin's Creed III 1.01-->C:\Users\Lukáš\AppData\Roaming\Assassin's Creed III\Uninstall\unins000.exe
Assassin's Creed III-->"C:\Users\Lukáš\AppData\Roaming\Assassin's Creed III\Uninstall\unins000.exe"
Autodesk 3ds Max 2012 32-bit - English-->C:\Program Files\Autodesk\3ds Max 2012\Setup\Setup.exe /P {E6083921-A185-0409-B058-ACB1DB615AD9} /M MAX /LANG en-US
Autodesk Backburner 2012.0.0-->MsiExec.exe /I{3D347E6D-5A03-4342-B5BA-6A771885F379}
Autodesk FBX Plug-in 2012.0 - 3ds Max 2012-->C:\Program Files\Autodesk\FBX\FBXPlugins\2012.0\3ds Max 2012\Uninstall.exe
Autodesk Material Library 2012-->MsiExec.exe /I{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}
Autodesk Material Library Base Resolution Image Library 2012-->MsiExec.exe /I{65420DC9-306E-4371-905F-F4DC3B418E52}
Autodesk Material Library Medium Resolution Image Library 2012-->MsiExec.exe /I{B5751715-EC10-43D9-8C95-62E1368433EF}
Autodesk MatchMover 2012 32-bit-->MsiExec.exe /I{00C5E42C-5C3D-4712-91BA-691EBC23DD5C}
Autodesk Maya 2012 32-bit-->C:\Program Files\Autodesk\Maya2012\Setup\Setup.exe /P {EF78070E-F96E-4398-B62F-EE7F793C364D} /M Maya_win /LANG en-US
Composite 2012-->MsiExec.exe /I{FEC02973-0781-49C7-9F04-28DA9BAF0372}
Counter-Strike-->"D:\HRY\STAEAM\steam.exe" steam://uninstall/10
Crysis(R)-->MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}
Crysis® 2-->MsiExec.exe /X{6033673D-2530-4587-8AD0-EB059FC263F9}
EA Download Manager-->D:\HRY\Crysis 2\EADM\EADMUninstall.exe
Fraps (remove only)-->"C:\Program Files\Fraps\uninstall.exe"
Glary Utilities Pro 2.55.0.1790-->"C:\Program Files\Glary Utilities\unins000.exe"
Google Talk Plugin-->MsiExec.exe /I{27979F37-AF9C-33DE-8437-76F7AEFAABAD}
HiDownloadPlatinum-->"C:\Program Files\StreamingStar\HiDownload_Platinum\unins000.exe"
J2SE Runtime Environment 5.0 Update 21-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150210}
Java 7 Update 21-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217021FF}
Java(TM) 6 Update 29-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216029FF}
JDownloader 0.9-->C:\Program Files\JDownloader\JDUninstall.exe
K-Lite Codec Pack 8.9.5 (Standard)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
League of Legends-->"C:\Program Files\InstallShield Installation Information\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\setup.exe" -runfromtemp -l0x0409 -removeonly
LOLReplay-->"D:\Andrej\Stahovanie\LOLReplay\uninstall.exe"
Maya 2012 Bonus Tools-->MsiExec.exe /X{6928F5DE-2679-46C0-AB82-0D0144415AE5}
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{3C3901C5-3455-3E0A-A214-0B093A5070A6}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0015-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0016-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0018-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0019-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001A-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001B-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6E107EB7-8B55-48BF-ACCB-199F86A2CD93}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0044-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-006E-041B-0000-0000000FF1CE} /uninstall {8382BA92-20E3-47B6-971B-F673F0492D4E}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-00A1-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-00BA-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office Access MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0015-041B-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0016-041B-0000-0000000FF1CE}
Microsoft Office File Validation Add-In-->MsiExec.exe /I{90140000-2005-0000-0000-0000000FF1CE}
Microsoft Office Groove MUI (Slovak) 2007-->MsiExec.exe /X{90120000-00BA-041B-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0044-041B-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Slovak) 2007-->MsiExec.exe /X{90120000-00A1-041B-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Slovak) 2007-->MsiExec.exe /X{90120000-001A-041B-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0018-041B-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Hungarian) 2007-->MsiExec.exe /X{90120000-001F-040E-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Slovak) 2007-->MsiExec.exe /X{90120000-002C-041B-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0405-0000-0000000FF1CE} /uninstall {0B7A4B67-2A38-42B1-9857-662FAB361E08}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {928D7B99-2BEA-49F9-83B8-20FA57860643}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {1FF96026-A04A-4C3E-B50A-BB7022654D0F}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-040E-0000-0000000FF1CE} /uninstall {0AD4BB83-13B4-4C9D-9BAC-7F64E0B2D5D7}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-041B-0000-0000000FF1CE} /uninstall {FDF9A959-241A-4662-A8DE-7DED9C22D160}
Microsoft Office Publisher MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0019-041B-0000-0000000FF1CE}
Microsoft Office Shared MUI (Slovak) 2007-->MsiExec.exe /X{90120000-006E-041B-0000-0000000FF1CE}
Microsoft Office Word MUI (Slovak) 2007-->MsiExec.exe /X{90120000-001B-041B-0000-0000000FF1CE}
Microsoft VC90 CRT + OMP-->MsiExec.exe /I{0F931735-0098-4FF6-A49D-17882A294F51}
Microsoft Visual C++ 2005 Redistributable - KB2467175-->MsiExec.exe /X{a0fe116e-9a8a-466f-aee0-625cb7c207e3}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Microsoft_VC80_ATL_x86-->MsiExec.exe /I{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
Microsoft_VC80_CRT_x86-->MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
Microsoft_VC80_MFC_x86-->MsiExec.exe /I{D1A19B02-817E-4296-A45B-07853FD74D57}
Microsoft_VC80_MFCLOC_x86-->MsiExec.exe /I{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
Microsoft_VC90_ATL_x86-->MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
Microsoft_VC90_CRT_x86-->MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403}
Microsoft_VC90_MFC_x86-->MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
Microsoft_VC90_MFCLOC_x86-->MsiExec.exe /I{B6D38690-755E-4F40-A35A-23F8BC2B86AC}
Mozilla Firefox 21.0 (x86 sk)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT Redists-->MsiExec.exe /I{E9627240-E930-11E0-8690-F04DA23A5C58}
MSXML 4.0 SP3 Parser (KB2721691)-->MsiExec.exe /I{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}
MSXML 4.0 SP3 Parser (KB2758694)-->MsiExec.exe /I{1D95BA90-F4F8-47EC-A882-441C99D30C1E}
MSXML 4.0 SP3 Parser (KB973685)-->MsiExec.exe /I{859DFA95-E4A6-48CD-B88E-A3E483E89B44}
MSXML 4.0 SP3 Parser-->MsiExec.exe /I{196467F1-C11F-4F76-858B-5812ADC83B94}
Nero 7 Ultra Edition-->MsiExec.exe /I{4908C75E-E5E2-43F7-B1DF-023CBA831051}
NVIDIA Drivers-->C:\Program Files\NVIDIA Corporation\Uninstall\nvuninst.exe UninstallGUI
NVIDIA Grafický ovládač 311.06-->"C:\Windows\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{16EB87D1-002E-40E1-8D19-467943D8FDB7}\NVI2.DLL",UninstallPackage Display.Driver
NVIDIA Ovládač zvuku HD 1.3.18.0-->"C:\Windows\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{C4522DD4-5BCA-4DE3-ADCA-79F11661E2A6}\NVI2.DLL",UninstallPackage HDAudio.Driver
NVIDIA PhysX Plug-in for Autodesk Maya 2012 32 bit-->MsiExec.exe /X{BFE4A2B6-4894-436C-8847-70FF3F18D892}
PASW Statistics 18-->MsiExec.exe /I{C25215FC-5900-48B0-B93C-8D3379027312}
PDF Settings CS6-->MsiExec.exe /I{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
PSPad editor-->"C:\Program Files\PSPad editor\Uninst\unins000.exe"
Realtek High Definition Audio Driver-->C:\Program Files\Realtek\Audio\HDA\RtlUpd.exe -r -m -nrg2709
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {728D9A6A-2206-31E8-9F65-C3EABEFCF53E} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {2CE2EB39-45C8-32D4-8A99-5529C38F1B99} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7E97AB83-C1FE-38DE-B848-877E0A4BD81E} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {DB31DEDD-BF95-31E7-A9B7-5480561CEFF3} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {67A5F99B-5EBA-3812-8D2E-BC251490DD3F} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8DDEFC7E-0C61-3D11-AFC6-5414F2DAFD01} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {9EC88EA8-4ABE-393C-87BD-90EABB1C4C9B} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {86BB5A25-8CC3-33CE-A393-CF28901682B2} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {16EEC04A-B924-37E0-97CF-422DCEFC1B63} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {C4D978AA-2668-3404-96DE-96E2AFC62FD7} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {CD6D9B8A-BBC4-3FA7-B24D-D74CE90630CF} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {ECBEE23D-AB7E-3DAA-B66B-CD52003198F1} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {788818B1-B191-3217-A210-7ACFDE19CE4A} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {B7C20E16-9A3A-3F05-A6B5-E15AA09200E0} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {CF581973-77E0-3093-A1AC-A03130DE990F} /parameterfolder Client
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C6997D22-CC93-4ED9-AD8A-02C3F3D2F1F9}
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5DD3FF90-B302-45B2-A188-C5EA7ACD5D46}
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {D33B9EF5-3801-496A-A2D6-B7F4BE972D75}
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B145DBBB-7778-4A5D-9D2B-DA6569F02391}
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A0D5F849-D9D5-48ED-99D0-C74D7BFA6A09}
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {E34960DB-2A93-45DB-A208-02650F7AB09C}
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {293FB6BE-D3EB-4162-B522-F9108040B9FE}
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {2B3C041A-A7F2-4A24-968D-4BEB6A123D15}
Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {43171CAD-DC60-4E7B-9703-B2EC18001B9F}
Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3579CE34-B225-4B19-A3AF-DE5F562A212F}
Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {020B65AD-B2ED-4B35-92CA-DB56EFB864A5}
Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CAB47CC0-A98C-47DD-9FA1-C0416EC96ED5}
Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {488F0918-97F9-4CD0-8AD5-8986A46AC962}
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8F311D6C-D8DD-4C32-9457-1A129CABD1A5}
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {AEA16A27-0B97-4670-818F-A98D06EC0A6F}
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0EF0D4FB-BB23-4515-AAEA-1240AC2DA525}
Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {9D689455-5858-4AE4-A3CA-6E4149FE3F70}
Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {718E87EC-6590-485A-B12D-C01D290EDB12}
Skype™ 6.5-->MsiExec.exe /X{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
Sothink SWF Decompiler-->"C:\Program Files\Sothink SWF Decompiler\unins000.exe"
Sticky Password 6.0.11.449-->"C:\Program Files\Sticky Password\unins000.exe"
Stronghold Crusader Extreme-->"C:\Program Files\InstallShield Installation Information\{8C3727F2-8E37-49E4-820C-03B1677F53B6}\setup.exe" -runfromtemp -l0x0009 -removeonly
TeamSpeak 3 Client-->"C:\Program Files\TeamSpeak 3 Client\uninstall.exe"
Total Commander (Remove or Repair)-->C:\Program Files\totalcmd\tcuninst.exe
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {5E9CF3A4-ADB3-3080-A8BF-976A28340758} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {81EBB9D7-173C-32E3-B477-149C8DE075E4} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {5D9961AC-7C99-36A2-9EF0-34678AED5384} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2836939)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {0160BA31-409C-3FD0-9C87-C7D95BF46986} /parameterfolder Client
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A024FC7B-77DE-45DE-A058-1C049A17BFB3}
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {620E77C0-CDFE-4C14-AAEB-830ABB65864C}
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {525A4A44-8940-40AD-ABA0-14501199D2F0}
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8153EC80-C988-4336-8DAF-6D99C0D26E0C}
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition-->msiexec /package {90120000-001A-041B-0000-0000000FF1CE} /uninstall {40D0CA9C-D9BB-4CA7-B174-D2316D692336}
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817327) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {2343F7D1-9E41-4CD7-AC67-264E8E9968BD}
Vegas Pro 11.0-->MsiExec.exe /X{E6F012B0-E930-11E0-A67A-F04DA23A5C58}
Windows 7 Manager-->MsiExec.exe /I{BC97075D-54AC-491B-B72B-8285E4348C73}
Windows 7 Manager-->MsiExec.exe /I{F8A43536-3A52-49BE-BD1C-4A51C943F2B7}
WinHTTrack Website Copier 3.47-19-->"C:\Program Files\WinHTTrack\unins000.exe"
WinPcap 4.1.2-->C:\Program Files\WinPcap\uninstall.exe
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
WM Recorder-->"C:\Windows\WM Recorder\Uninstall.exe" "/U:C:\Program Files\WMR14\Uninstall\uninstall.xml"
Xfire (remove only)-->"D:\Andrej\Stahovanie\Xfire\uninst.exe"

======System event log======

Computer Name: Chlapci-PC
Event Code: 1014
Message: Name resolution for the name google.com timed out after none of the configured DNS servers responded.
Record Number: 203875
Source Name: Microsoft-Windows-DNS-Client
Time Written: 20130222132344.468000-000
Event Type: Warning
User: NT AUTHORITY\NETWORK SERVICE

Computer Name: Chlapci-PC
Event Code: 1014
Message: Name resolution for the name google.com timed out after none of the configured DNS servers responded.
Record Number: 203871
Source Name: Microsoft-Windows-DNS-Client
Time Written: 20130222132330.100400-000
Event Type: Warning
User: NT AUTHORITY\NETWORK SERVICE

Computer Name: Chlapci-PC
Event Code: 1014
Message: Name resolution for the name teredo.ipv6.microsoft.com timed out after none of the configured DNS servers responded.
Record Number: 203870
Source Name: Microsoft-Windows-DNS-Client
Time Written: 20130222132324.266000-000
Event Type: Warning
User: NT AUTHORITY\NETWORK SERVICE

Computer Name: Chlapci-PC
Event Code: 1014
Message: Name resolution for the name www.dreamstock.com timed out after none of the configured DNS servers responded.
Record Number: 203835
Source Name: Microsoft-Windows-DNS-Client
Time Written: 20130222091023.102400-000
Event Type: Warning
User: NT AUTHORITY\NETWORK SERVICE

Computer Name: Chlapci-PC
Event Code: 1014
Message: Name resolution for the name www.all4mobiles.com timed out after none of the configured DNS servers responded.
Record Number: 203627
Source Name: Microsoft-Windows-DNS-Client
Time Written: 20130221102153.469000-000
Event Type: Warning
User: NT AUTHORITY\NETWORK SERVICE

=====Application event log=====

Computer Name: Chlapci-PC
Event Code: 4107
Message: Zlyhala extrakcia zoznamu koreňových certifikátov nezávislých vydavateľov z kabinetu automatickej aktualizácie v: <http://www.download.windowsupdate.com/m ... ootstl.cab> s chybou: Pri overovaní s aktuálnymi systémovými hodinami alebo časovou pečiatkou podpísaného súboru sa zistilo, že požadovaný certifikát je mimo dobu platnosti.
.
Record Number: 19353
Source Name: Microsoft-Windows-CAPI2
Time Written: 20120522133816.475050-000
Event Type: Error
User:

Computer Name: Chlapci-PC
Event Code: 4107
Message: Zlyhala extrakcia zoznamu koreňových certifikátov nezávislých vydavateľov z kabinetu automatickej aktualizácie v: <http://www.download.windowsupdate.com/m ... ootstl.cab> s chybou: Pri overovaní s aktuálnymi systémovými hodinami alebo časovou pečiatkou podpísaného súboru sa zistilo, že požadovaný certifikát je mimo dobu platnosti.
.
Record Number: 19352
Source Name: Microsoft-Windows-CAPI2
Time Written: 20120522133816.431050-000
Event Type: Error
User:

Computer Name: Chlapci-PC
Event Code: 4107
Message: Zlyhala extrakcia zoznamu koreňových certifikátov nezávislých vydavateľov z kabinetu automatickej aktualizácie v: <http://www.download.windowsupdate.com/m ... ootstl.cab> s chybou: Pri overovaní s aktuálnymi systémovými hodinami alebo časovou pečiatkou podpísaného súboru sa zistilo, že požadovaný certifikát je mimo dobu platnosti.
.
Record Number: 19351
Source Name: Microsoft-Windows-CAPI2
Time Written: 20120522133816.404050-000
Event Type: Error
User:

Computer Name: Chlapci-PC
Event Code: 4107
Message: Zlyhala extrakcia zoznamu koreňových certifikátov nezávislých vydavateľov z kabinetu automatickej aktualizácie v: <http://www.download.windowsupdate.com/m ... ootstl.cab> s chybou: Pri overovaní s aktuálnymi systémovými hodinami alebo časovou pečiatkou podpísaného súboru sa zistilo, že požadovaný certifikát je mimo dobu platnosti.
.
Record Number: 19350
Source Name: Microsoft-Windows-CAPI2
Time Written: 20120522133816.381050-000
Event Type: Error
User:

Computer Name: Chlapci-PC
Event Code: 1000
Message: Názov chybovej aplikácie: LolClient.exe, verzia: 2.0.2.12610, časová značka: 0x4c00573a
Názov chybového modulu: Adobe AIR.dll, verzia: 3.1.0.4880, časová značka: 0x4eb75fb9
Kód výnimky: 0xc0000005
Odstup chyby: 0x000781a4
Identifikácia chybného procesu: 0x40c
Čas spustenia chybnej aplikácie: 0x01cd3819090fba80
Cesta chybnej aplikácie: C:\Program Files\LeagueofLegends\League of Legends\RADS\projects\lol_air_client\releases\0.0.0.141\deploy\LolClient.exe
Cesta chybného modulu: C:\Program Files\LeagueofLegends\League of Legends\RADS\projects\lol_air_client\releases\0.0.0.141\deploy\Adobe AIR\Versions\1.0\Adobe AIR.dll
Identifikácia hlásenia: 43c7c564-a411-11e1-9157-00241d6c8363
Record Number: 19349
Source Name: Application Error
Time Written: 20120522132306.000000-000
Event Type: Error
User:

=====Security event log=====

Computer Name: Chlapci-PC
Event Code: 5061
Message: Cryptographic operation.

Subject:
Security ID: S-1-5-18
Account Name: CHLAPCI-PC$
Account Domain: 688
Logon ID: 0x3e7

Cryptographic Parameters:
Provider Name: Microsoft Software Key Storage Provider
Algorithm Name: RSA
Key Name: {71CA0A98-D3D4-45A5-8FBC-1C50645464FE}
Key Type: Machine key.

Cryptographic Operation:
Operation: Open Key.
Return Code: 0x0
Record Number: 143033
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130610092334.932200-000
Event Type: Audit Success
User:

Computer Name: Chlapci-PC
Event Code: 5058
Message: Key file operation.

Subject:
Security ID: S-1-5-18
Account Name: CHLAPCI-PC$
Account Domain: 688
Logon ID: 0x3e7

Cryptographic Parameters:
Provider Name: Microsoft Software Key Storage Provider
Algorithm Name: Not Available.
Key Name: {71CA0A98-D3D4-45A5-8FBC-1C50645464FE}
Key Type: Machine key.

Key File Operation Information:
File Path: C:\ProgramData\Microsoft\Crypto\Keys\76decfafa7db3403b8f257a850ea36e9_e2cf0679-8031-4025-b8a0-b8677edc8843
Operation: Read persisted key from file.
Return Code: 0x0
Record Number: 143032
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130610092334.932200-000
Event Type: Audit Success
User:

Computer Name: Chlapci-PC
Event Code: 5059
Message: Key migration operation.

Subject:
Security ID: S-1-5-18
Account Name: CHLAPCI-PC$
Account Domain: 688
Logon ID: 0x3e7

Cryptographic Parameters:
Provider Name: Microsoft Software Key Storage Provider
Algorithm Name: RSA
Key Name: {71CA0A98-D3D4-45A5-8FBC-1C50645464FE}
Key Type: Machine key.

Additional Information:
Operation: Export of persistent cryptographic key.
Return Code: 0x0
Record Number: 143031
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130610092334.804200-000
Event Type: Audit Success
User:

Computer Name: Chlapci-PC
Event Code: 5059
Message: Key migration operation.

Subject:
Security ID: S-1-5-18
Account Name: CHLAPCI-PC$
Account Domain: 688
Logon ID: 0x3e7

Cryptographic Parameters:
Provider Name: Microsoft Software Key Storage Provider
Algorithm Name: RSA
Key Name: {71CA0A98-D3D4-45A5-8FBC-1C50645464FE}
Key Type: Machine key.

Additional Information:
Operation: Export of persistent cryptographic key.
Return Code: 0x0
Record Number: 143030
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130610092334.804200-000
Event Type: Audit Success
User:

Computer Name: Chlapci-PC
Event Code: 5061
Message: Cryptographic operation.

Subject:
Security ID: S-1-5-18
Account Name: CHLAPCI-PC$
Account Domain: 688
Logon ID: 0x3e7

Cryptographic Parameters:
Provider Name: Microsoft Software Key Storage Provider
Algorithm Name: RSA
Key Name: {71CA0A98-D3D4-45A5-8FBC-1C50645464FE}
Key Type: Machine key.

Cryptographic Operation:
Operation: Open Key.
Return Code: 0x0
Record Number: 143029
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130610092334.781200-000
Event Type: Audit Success
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0;C:\Program Files\Common Files\Autodesk Shared;C:\Program Files\Autodesk\Backburner\;C:\Program Files\Common Files\Autodesk Shared\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 67 Stepping 3, AuthenticAMD
"PROCESSOR_REVISION"=4303
"ADSK_3DSMAX_x32_2012"=C:\Program Files\Autodesk\3ds Max 2012\
"CM2012DIR"=C:\Program Files\Common Files\Autodesk Shared\Materials\
"ILBDIR"=C:\Program Files\Common Files\Autodesk Shared\Materials\
"ILMDIR"=C:\Program Files\Common Files\Autodesk Shared\Materials\

-----------------EOF-----------------

Re: Pomalý PC

Napsal: 02 črc 2013 16:20
od Márty84
Zdravim :)

:???: Doufam, ze mate na ten ESET zakoupenou licenci

:arrow: Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Re: Pomalý PC

Napsal: 02 črc 2013 16:45
od kniightfiight
Ano, mam ju kupenu, este do Decembra (Prosinec)
Kontrolu spravim co najskor

Zatial vdaka =D

Re: Pomalý PC

Napsal: 02 črc 2013 17:05
od Márty84
OK :wink:

Re: Pomalý PC

Napsal: 02 črc 2013 19:11
od kniightfiight
Alcohol 120% používam na zálohovanie DVD do PC
Tu je log z MBAM

Vďaka




Malwarebytes Anti-Malware (PRO) 1.75.0.1300
http://www.malwarebytes.org

Verzia databázy: v2013.07.02.05

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16618
Andrej :: CHLAPCI-PC [administrátor]

Ochrana: Vypnuté

2. 7. 2013 17:51:35
MBAM-log-2013-07-02 (20-09-22).txt

Typ kontroly: Úplná kontrola (C:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 569415
Uplynutý čas: 2 hod, 13 min, 25 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr (PUM.Hijack.TaskManager) -> Škodlivý: (1) Dobrý: (0) -> Žiadna úloha nevykonaná.

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 5
C:\$RECYCLE.BIN\S-1-5-21-748102567-3861943476-210638618-1001\$RQPUSXZ\Data\downloads\pc-pandora-7.0.1.1\pc-pandora-7.0.1.1.exe (Trojan.Agent) -> Žiadna úloha nevykonaná.
C:\Program Files\Adobe\Adobe Photoshop CS6\amtlib.dll (PUP.RiskwareTool.CK) -> Žiadna úloha nevykonaná.
C:\Program Files\Alcohol Soft\Alcohol 120\Alcohol 120.exe (Backdoor.Hupigon) -> Žiadna úloha nevykonaná.
C:\Windows\System32\GLLGWP\IUJ.001 (PUP.Ardamax) -> Žiadna úloha nevykonaná.
C:\ProgramData\DXSETUP.exe (Trojan.StartPage) -> Žiadna úloha nevykonaná.

(koniec)

Re: Pomalý PC

Napsal: 02 črc 2013 23:01
od Márty84
Ten Alkohol mate z bezpecneho zdroje? Ostatni nalezy doporucuji odstranit. Pak udelejte rychlou kontrolu a dejte vysledky.

Re: Pomalý PC

Napsal: 03 črc 2013 14:07
od kniightfiight
Ten vír v registroch som prepísal z 1 na 0, dúfam, že to stačí, ostatné súbory som zmazal.......
MBAM som si registroval, a asi ho budem používať namiesto ESETU. ESET tie vírusy nezistil a MBAM hej, a ešte EET spomaluje prihlasovanie sa do niektorých pogramov a hrie, ćo sú na PC (keď som v PC nemal ESET--týžden dozadu--všetko sa spústalo rýchlejsie)
Tu je log z MBAM rýchlej kontroly po odstránení tých vírusov (zmažú sa po reštarte, ale inak tam už nieč nieje):
Ešte by som sa chcel spýtať na nejaké návody na optimalizáciu PC, na rýchlejšie spúštanie atď... Niekedy musím mať na ploche alebo inde na HDD priečinok s viac než 5000 súbormi, tak či je lepšie mať na ploche alebo na disku v D:\\ (súbory, ktoré používam s Autodesk Mayana prácu, nemôžem ich mazať a ani dávať do RAR, treba ich mať po ruke)

Ďakujem





Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2013.07.02.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16618
Andrej :: CHLAPCI-PC [administrátor]

Ochrana: Zapnuté

3. 7. 2013 14:49:57
mbam-log-2013-07-03 (14-49-57).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 322128
Uplynutý čas: 10 min, 45 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 2
C:\$RECYCLE.BIN\S-1-5-21-748102567-3861943476-210638618-1001\$RX5TBMV\IUJ.001 (PUP.Ardamax) -> Pridanie do karantény a zmazanie úspešné.
C:\$RECYCLE.BIN\S-1-5-21-748102567-3861943476-210638618-1001\$RJB5EDM.exe (PUP.RiskwareTool.CK) -> Pridanie do karantény a zmazanie úspešné.

(koniec)

Re: Pomalý PC

Napsal: 03 črc 2013 14:34
od Márty84
Jen pozor na falesne poplachy. MBAM je nekdy az moc paranoidni :)

Plocha by nemela mit vic nez 300MB. A mely by tam byt jen ikony.


:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Prohledat a program zacne pracovat.
Az skonci, vyplivne na vas log (pokud ne, najdete ho zde C:\AdwCleaner[R?].txt ), ten mi sem zkopirujte.

Re: Pomalý PC

Napsal: 03 črc 2013 16:17
od kniightfiight
Takže z plochy som si presunul vyše 6GB na iný HDD a eśte tam m´am nejaké veci, čo si presuniem.
Tu je log z AdwCleaneru (program Xfire používam, ale vśetky toolbary, čo tam mám sa môžu zmazať)

Ak prečistíte Mozillla Firefox, bude to Okey, heslá mám uložené v programe StickyPassword a doplnky vo Firefox si prípadne doinštalujem (používam iba Adblock Plus), a záložky mám exportované...
Vďaka


# AdwCleaner v2.304 - Log vytvorený 03/07/2013 o 17:14:09
# Aktualizované 03/07/2013 Xplode
# Operaený systém : Windows 7 Professional Service Pack 1 (32 bits)
# Uživateľ : Andrej - CHLAPCI-PC
# Spustený systém : Normálny
# Spustené z : C:\Users\Andrej\Desktop\adwcleaner.exe
# Voľba [Prehľada?]


***** [Služby] *****


***** [Súbory / Adresáre] *****

Adresár Nájdené : C:\Program Files\Conduit
Adresár Nájdené : C:\ProgramData\boost_interprocess
Adresár Nájdené : C:\Users\Andrej\AppData\LocalLow\Conduit
Adresár Nájdené : C:\Users\Andrej\AppData\LocalLow\Toolbar4
Adresár Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\Conduit
Adresár Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\fydqmyu0.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Adresár Nájdené : C:\Users\Lukáš\AppData\Local\Conduit
Adresár Nájdené : C:\Users\Lukáš\AppData\LocalLow\Conduit
Adresár Nájdené : C:\Users\Lukáš\AppData\LocalLow\xfirexo
Adresár Nájdené : C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\0ubedc9g.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
Adresár Nájdené : C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\0ubedc9g.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
Súbor Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\searchplugins\icqplugin.xml
Súbor Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\searchplugins\icqplugin-1.xml
Súbor Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\searchplugins\icqplugin-2.xml
Súbor Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\searchplugins\icqplugin-3.xml
Súbor Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\searchplugins\icqplugin-4.xml
Súbor Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\searchplugins\icqplugin-5.xml
Súbor Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\searchplugins\icqplugin-6.xml
Súbor Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\searchplugins\icqplugin-7.xml
Súbor Nájdené : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\fydqmyu0.default\searchplugins\icqplugin.xml

***** [Registre] *****

Kľúe Nájdené : HKCU\Software\AppDataLow\Software\Conduit
Kľúe Nájdené : HKCU\Software\AppDataLow\Toolbar
Kľúe Nájdené : HKCU\Software\SMTTB2009
Kľúe Nájdené : HKCU\Software\Somoto Toolbar
Kľúe Nájdené : HKCU\Software\YourFileDownloader
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Kľúe Nájdené : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\SMTTB2009.IEToolbar
Kľúe Nájdené : HKLM\SOFTWARE\Classes\SMTTB2009.IEToolbar.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\SMTTB2009.SMTTB2009
Kľúe Nájdené : HKLM\SOFTWARE\Classes\SMTTB2009.SMTTB2009.3
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Toolbar3.SMTTB2009
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Toolbar3.SMTTB2009.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
Kľúe Nájdené : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
Kľúe Nájdené : HKLM\Software\Conduit
Kľúe Nájdené : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Kľúe Nájdené : HKLM\Software\YourFileDownloader

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Registre sú eisté.

-\\ Mozilla Firefox v22.0 (sk)

Súbor : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\55no0b2r.default\prefs.js

[OK] Súbor je eistý.

Súbor : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\prefs.js

Nájdené : user_pref("CT2438727..clientLogIsEnabled", false);
Nájdené : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Nájdené : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Nájdené : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nájdené : user_pref("CT2438727.CTID", "CT2438727");
Nájdené : user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
Nájdené : user_pref("CT2438727.CurrentServerDate", "2-1-2011");
Nájdené : user_pref("CT2438727.DialogsAlignMode", "LTR");
Nájdené : user_pref("CT2438727.DownloadReferralCookieData", "");
Nájdené : user_pref("CT2438727.FirstServerDate", "25-9-2010");
Nájdené : user_pref("CT2438727.FirstTime", true);
Nájdené : user_pref("CT2438727.FirstTimeFF3", true);
Nájdené : user_pref("CT2438727.FirstTimeSettingsDone", true);
Nájdené : user_pref("CT2438727.FixPageNotFoundErrors", true);
Nájdené : user_pref("CT2438727.GroupingInvalidateCache", false);
Nájdené : user_pref("CT2438727.GroupingLastCheckTime", "0");
Nájdené : user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
Nájdené : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
Nájdené : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nájdené : user_pref("CT2438727.Initialize", true);
Nájdené : user_pref("CT2438727.InitializeCommonPrefs", true);
Nájdené : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
Nájdené : user_pref("CT2438727.InstalledDate", "Sat Sep 25 2010 20:56:18 GMT+0200 (Central Europe Daylight Tim[...]
Nájdené : user_pref("CT2438727.InvalidateCache", false);
Nájdené : user_pref("CT2438727.IsGrouping", false);
Nájdené : user_pref("CT2438727.IsMulticommunity", false);
Nájdené : user_pref("CT2438727.IsOpenThankYouPage", true);
Nájdené : user_pref("CT2438727.IsOpenUninstallPage", true);
Nájdené : user_pref("CT2438727.LanguagePackLastCheckTime", "Sun Jan 02 2011 14:37:13 GMT+0100 (Central Europe [...]
Nájdené : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
Nájdené : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nájdené : user_pref("CT2438727.LastLogin_2.7.1.3", "Fri Nov 12 2010 14:49:10 GMT+0100 (Central Europe Standard[...]
Nájdené : user_pref("CT2438727.LastLogin_3.2.3.3", "Sun Jan 02 2011 14:37:13 GMT+0100 (Central Europe Standard[...]
Nájdené : user_pref("CT2438727.LatestVersion", "2.7.1.3");
Nájdené : user_pref("CT2438727.Locale", "en");
Nájdené : user_pref("CT2438727.LoginCache", 4);
Nájdené : user_pref("CT2438727.MCDetectTooltipHeight", "83");
Nájdené : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nájdené : user_pref("CT2438727.MCDetectTooltipWidth", "295");
Nájdené : user_pref("CT2438727.RadioLastCheckTime", "0");
Nájdené : user_pref("CT2438727.RadioLastUpdateIPServer", "0");
Nájdené : user_pref("CT2438727.RadioLastUpdateServer", "0");
Nájdené : user_pref("CT2438727.SearchBoxWidth", 150);
Nájdené : user_pref("CT2438727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Nájdené : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
Nájdené : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
Nájdené : user_pref("CT2438727.SearchInNewTabEnabled", true);
Nájdené : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
Nájdené : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Sun Jan 02 2011 14:37:11 GMT+0100 (Central Europ[...]
Nájdené : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nájdené : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Nájdené : user_pref("CT2438727.SearchInNewTabUserEnabled", false);
Nájdené : user_pref("CT2438727.ServiceMapLastCheckTime", "Sat Nov 13 2010 14:05:40 GMT+0100 (Central Europe St[...]
Nájdené : user_pref("CT2438727.SettingsCheckIntervalMin", 120);
Nájdené : user_pref("CT2438727.SettingsLastCheckTime", "Sun Jan 02 2011 14:37:11 GMT+0100 (Central Europe Stan[...]
Nájdené : user_pref("CT2438727.SettingsLastUpdate", "1287517459");
Nájdené : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
Nájdené : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Sat Dec 18 2010 15:46:09 GMT+0100 (Central Eur[...]
Nájdené : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1246790578");
Nájdené : user_pref("CT2438727.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]
Nájdené : user_pref("CT2438727.UserID", "UN21012992683641918");
Nájdené : user_pref("CT2438727.ValidationData_Toolbar", 2);
Nájdené : user_pref("CT2438727.alertChannelId", "832836");
Nájdené : user_pref("CT2438727.backendstorage.currentgame", "706F6B6572");
Nájdené : user_pref("CT2438727.clientLogIsEnabled", true);
Nájdené : user_pref("CT2438727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
Nájdené : user_pref("CT2438727.myStuffEnabled", true);
Nájdené : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
Nájdené : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nájdené : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
Nájdené : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nájdené : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Sun Jan 02 2011 14:37:13 GMT+0100 (Central E[...]
Nájdené : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Sat Nov 13 2010 14:05:42 GMT+0100 (Central E[...]
Nájdené : user_pref("CT2438727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2192277/CT2192277[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=590805&fid=586667", "\"0\""[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=832836&fid=828639", "\"0\""[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=909619&fid=905414", "\"0\""[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/590805/586667/DEFAULT", "\"[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/590805/586667/SK", "\"0\"")[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/SK", "\"0\"")[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/SK", "\"0\"")[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2192277", [...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", [...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.2[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2192277",[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=11/8/20[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2192277&octid=[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438727&octid=[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/?ctid=CT2192277&octid=CT[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2192277/CT2192277[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Dawn/equalizer_dea[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Dawn/minimize.gif"[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Dawn/play.gif", "\[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Dawn/stop.gif", "\[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Dawn/vol.gif", "\"[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Icy/equalizer_dead[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Icy/minimize.gif",[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Icy/play.gif", "\"[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Icy/stop.gif", "\"[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Icy/vol.gif", "\"0[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"61c[...]
Nájdené : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/40008954.xml", "\"91b3cd516a25c02464e[...]
Nájdené : user_pref("CommunityToolbar.EngineHiddenByUser", true);
Nájdené : user_pref("CommunityToolbar.EngineOwner", "");
Nájdené : user_pref("CommunityToolbar.EngineOwnerGuid", "{70df8d13-bdd3-448e-944c-efde21b77161}");
Nájdené : user_pref("CommunityToolbar.EngineOwnerToolbarId", "clixsense.com");
Nájdené : user_pref("CommunityToolbar.IsEngineShown", false);
Nájdené : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Nájdené : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Andrej\\AppData\\Roaming\\Mozilla\\[...]
Nájdené : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.14.1.0");
Nájdené : user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://cndt.thefreesmsapp.com/v1.0.0/main.htm?sm[...]
Nájdené : user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.clixsense.com/toolbar_ads.php", "609x[...]
Nájdené : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2192277");
Nájdené : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{70df8d13-bdd3-448e-944c-efde21b77161}");
Nájdené : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "clixsense.com");
Nájdené : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Nájdené : user_pref("CommunityToolbar.ToolbarsList", "CT2438727");
Nájdené : user_pref("CommunityToolbar.ToolbarsList2", "CT2438727");
Nájdené : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Mar 20 2011 22:23:43 GMT+01[...]
Nájdené : user_pref("CommunityToolbar.alert.alertEnabled", false);
Nájdené : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Nájdené : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Feb 16 2011 19:28:40 GMT+0100 (Centr[...]
Nájdené : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Nájdené : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
Nájdené : user_pref("CommunityToolbar.alert.locale", "en");
Nájdené : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Nájdené : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Mon Jun 27 2011 16:32:22 GMT+0200 (Central E[...]
Nájdené : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Nájdené : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Nájdené : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Nájdené : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Nájdené : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Nájdené : user_pref("CommunityToolbar.alert.userId", "{72ba9f6b-717f-4828-b25a-c316de235ac3}");
Nájdené : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Dec 25 2010 20:56:01 GMT+0100 (Cen[...]
Nájdené : user_pref("CommunityToolbar.globalUserId", "e13dd215-d519-4fed-9c8c-dc13158aedc6");
Nájdené : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Nájdené : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Nájdené : user_pref("CommunityToolbar.killedEngine", true);
Nájdené : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Jul 25 2012 19:02:3[...]
Nájdené : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Nájdené : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Nájdené : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri Jul 27 2012 18:04:04 GMT+020[...]
Nájdené : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Nájdené : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
Nájdené : user_pref("CommunityToolbar.notifications.locale", "en");
Nájdené : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Nájdené : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Jul 29 2012 19:16:36 GMT+0200");
Nájdené : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Nájdené : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Nájdené : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Nájdené : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Nájdené : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Nájdené : user_pref("CommunityToolbar.notifications.userId", "b25338c3-e69d-4206-b64e-561e092d8919");
Nájdené : user_pref("CommunityToolbar.twitter.user_40008954.LastCheckTime", "Sat Dec 25 2010 20:56:03 GMT+0100[...]
Nájdené : user_pref("CommunityToolbar.undefined", "");
Nájdené : user_pref("browser.search.defaulturl", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_v[...]
Nájdené : user_pref("extensions.greasemonkey.scriptvals.userscripts.org/CarrioS Cavern Links Checker by Carrio[...]
Nájdené : user_pref("extensions.greasemonkey.scriptvals.userscripts.org/CarrioS Cavern Links Checker by Carrio[...]
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.fr", "1300956353");
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.ranonce", true);
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.rule_/", "1300956406");
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.rule_dealsplugin.com/", "1300956406");
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.rule_facebook.com", "1300956406");
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.rule_h", "1300956406");
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.rule_hxxp", "1300956406");
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.rule_iqquizgame.com/", "1300956406");
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.rule_play-ga.me/", "1300956406");
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.rule_revealmycrush.com/", "1300956406");
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/browserplugin", "1300956406");
Nájdené : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/plugin", "1300956406");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.fr", "1300486126");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_/", "1300486131");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_dealsplugin.com/", "1300486131");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_facebook.com", "1300486131");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_h", "1300956315");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_hxxp", "1300486131");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_hxxp://www.facebook.com/plugins/like.php?href=htt[...]
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_iqquizgame.com/", "1300486131");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_play-ga.me/", "1300486131");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_revealmycrush.com/", "1300486131");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_unlock-this.com/browserplugin", "1300486131");
Nájdené : user_pref("extensions.plugin@gameplaylabs.com.rule_unlock-this.com/plugin", "1300486131");
Nájdené : user_pref("icqtoolbar.allowSendURL", false);
Nájdené : user_pref("icqtoolbar.engineVerified", true);
Nájdené : user_pref("icqtoolbar.geolastmodified", 1313653693);
Nájdené : user_pref("icqtoolbar.hiddenElements", "itb_options");
Nájdené : user_pref("icqtoolbar.history", "cache%3ADz7GUAhh1P0J%3Awww.alertpay.com%2F%20alertpay||alertpay||in[...]
Nájdené : user_pref("icqtoolbar.hpChange", true);
Nájdené : user_pref("icqtoolbar.icqgeo", 4201);
Nájdené : user_pref("icqtoolbar.installTime", "1313849304");
Nájdené : user_pref("icqtoolbar.newtab_state", "1");
Nájdené : user_pref("icqtoolbar.numberOfSearches", 0);
Nájdené : user_pref("icqtoolbar.previousFFVersion", "5.0");
Nájdené : user_pref("icqtoolbar.skip_default_search", "no");
Nájdené : user_pref("icqtoolbar.uninstStatSent", true);
Nájdené : user_pref("icqtoolbar.uniqueID", "129901233712990124261299013100215");
Nájdené : user_pref("icqtoolbar.usageStatstTimestamp", 1308236096);
Nájdené : user_pref("icqtoolbar.userHpApproved", true);
Nájdené : user_pref("icqtoolbar.voucherHideClicks", 0);
Nájdené : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Nájdené : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Nájdené : user_pref("icqtoolbar.voucherWasShown", 0);
Nájdené : user_pref("icqtoolbar.xmlEnableHomePageDsGuard", true);
Nájdené : user_pref("icqtoolbar.xmlLanguage", "sk");

Súbor : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\dtmqqjy0.default\prefs.js

[OK] Súbor je eistý.

Súbor : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\fydqmyu0.default\prefs.js

Nájdené : user_pref("browser.startup.homepage", "hxxp://start.icq.com/");
Nájdené : user_pref("icqtoolbar.installsource", "1");

Súbor : C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\0ubedc9g.default\prefs.js

[OK] Súbor je eistý.

*************************

AdwCleaner[R1].txt - [26340 octets] - [03/07/2013 17:14:09]

########## EOF - C:\AdwCleaner[R1].txt - [26401 octets] ##########

Re: Pomalý PC

Napsal: 03 črc 2013 16:25
od Márty84
Nemuselo to byt na jiny HDD, stacilo to dat do nejake slozky mimo plochu :)

:arrow: Znovu ukoncete vsechny programy a spustte AdwCleaner jako spravce.
Tentokrat kliknete na Smazat
Program zacne pracovat (muze dojit k restartu pc) a vyplivne dalsi log (pripadne bude zde C:\AdwCleaner [S1].txt ). Ten mi sem zase zkopirujte.

Re: Pomalý PC

Napsal: 03 črc 2013 17:25
od kniightfiight
Musel som to spustit v Safe Mode, lebo v normálnom režime sa sekol celý PC a mohol som to iba reštartovať....
Log sa po reštarte PC do normálneho režimu neukázal. Potom som dal teda prehľadať s AdwCleanerom PC znova a toto mi vyskočilo.. Potom som AdwCleaner odinštaloval........
Je to už v poriadku?? Chystám sa defragmentovať disk aby bol PC rýchlejśí, máte ešte nejakú radu,čo by mi pomohla?? Denne čistím PC s GlaryUtilities





# AdwCleaner v2.304 - Log vytvorený 03/07/2013 o 18:19:48
# Aktualizované 03/07/2013 Xplode
# Operaený systém : Windows 7 Professional Service Pack 1 (32 bits)
# Uživateľ : Andrej - CHLAPCI-PC
# Spustený systém : Normálny
# Spustené z : C:\Users\Andrej\Desktop\adwcleaner.exe
# Voľba [Prehľada?]


***** [Služby] *****


***** [Súbory / Adresáre] *****


***** [Registre] *****


***** [Internetové prehliadaee] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Registre sú eisté.

-\\ Mozilla Firefox v22.0 (sk)

Súbor : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\55no0b2r.default\prefs.js

[OK] Súbor je eistý.

Súbor : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\bnufp2dq.default\prefs.js

[OK] Súbor je eistý.

Súbor : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\dtmqqjy0.default\prefs.js

[OK] Súbor je eistý.

Súbor : C:\Users\Andrej\AppData\Roaming\Mozilla\Firefox\Profiles\fydqmyu0.default\prefs.js

[OK] Súbor je eistý.

Súbor : C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\0ubedc9g.default\prefs.js

[OK] Súbor je eistý.

*************************

AdwCleaner[R1].txt - [26471 octets] - [03/07/2013 17:14:09]
AdwCleaner[R2].txt - [1221 octets] - [03/07/2013 18:19:48]
AdwCleaner[S1].txt - [366 octets] - [03/07/2013 17:52:43]

########## EOF - C:\AdwCleaner[R2].txt - [1340 octets] ##########

Re: Pomalý PC

Napsal: 03 črc 2013 18:57
od Márty84
:arrow: S defragmentaci pockejte az skoncime s cistkou.


:arrow: Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe , ulozte ho na plochu, kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Zprava a objevi se log. Ten mi sem vlozte

Re: Pomalý PC

Napsal: 03 črc 2013 19:16
od kniightfiight
Idem na to....
Inak ked som zmenil v registroch to povolenie spustenia Task Manageru (Správca súborov) na 0, tak to nešlo, a potom som to zmazal a spravil nový DWORD s hodnotou 0..... To čo som tam mal nebolo DWORD ale bola tam hodnota 0 a TM nešiel aj tak..... Keby ste tu mali rovnaký problém, tak aby ste vedeli, že tú starú hodnotu ttreba odstrániť, a vytvoriť novú....

Re: Pomalý PC

Napsal: 03 črc 2013 19:25
od kniightfiight
Ešte aby ste vedeli, nainstaloval som si BitDefender, ten je aj s Firewallom, tak uvidím, co to spraví v 30 dnoch...



RogueKiller V8.6.2 [Jul 3 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : hxxp://www.adlice.com/forum/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Andrej [Práva Správcu]
Režim : Kontrola -- Dátum : 07/03/2013 20:23:22
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 13 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> NÁJDENÉ
[HJ POL] HKLM\[...]\System : DisableRegistryTools (0) -> NÁJDENÉ
[HJ POL] HKLM\[...]\System : EnableLUA (0) -> NÁJDENÉ
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> NÁJDENÉ
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> NÁJDENÉ
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NÁJDENÉ
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> NÁJDENÉ
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowVideos (0) -> NÁJDENÉ
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowHelp (0) -> NÁJDENÉ
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> NÁJDENÉ
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> NÁJDENÉ
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NÁJDENÉ
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NÁJDENÉ

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spustenie položky : 0 ¤¤¤

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤
[Address] IRP[IRP_MJ_CREATE] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_CLOSE] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_DEVICE_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_POWER] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_SYSTEM_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)
[Address] IRP[IRP_MJ_PNP] : C:\Windows\system32\drivers\winhv.sys -> HOOKED ([Address] Unknown @ 0x85D6F1F8)

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: SAMSUNG HD154UI SCSI Disk Device +++++
--- User ---
[MBR] 753afdecbdfd67a2ee348c2ca9a5187f
[BSP] 362659e2bcb65deb3e19e0e2da6d7546 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 470003 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 962568192 | Size: 29995 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 1023999165 | Size: 930789 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončené : << RKreport[0]_S_07032013_202322.txt >>

Re: Pomalý PC

Napsal: 03 črc 2013 20:11
od Márty84
:arrow: Najdete tento soubor C:\Windows\system32\drivers\winhv.sys a otestujte ho na virustotal a jotti http://forum.viry.cz/viewtopic.php?f=29&t=5846 Vysledky sem zkopirujte, nebo dejte odkaz.



:arrow: Znovu spustte RogueKiller jako spravce (pokud jste ho jeste nezavrel/a, rovnou kliknete na napis Smazat)
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte.
Pak kliknete na napis Oprava Host a Zprava.
Objevi se dalsi log. I ten mi sem vlozte.
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz