Seká se mi comp,cpu stálá zátěž 50%,windows script host

[jirka bj]

zdravím, můžete mi prosím pomoc? seká se mi vše a procesor je neustále zatížen 50-70% start je pomalý.vše běží těžce,s problémy,po startu naskočí hláška chyba - windows script host.
zde je log:
-------------------------------------------------------------------------------------------

Logfile of random's system information tool 1.09 (written by random/random)
Run by Georgie at 2013-08-23 16:50:33
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 12 GB (15%) free of 76 GB
Total RAM: 2046 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:50:41, on 23.8.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Creative\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\WINDOWS\inf\msqfxvw\msqfxvw.exe
C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Documents and Settings\Georgie\Plocha\RSIT.exe
C:\Program Files\trend micro\Georgie.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.tune-up.com/link/?target=ins ... NjQ4YmFhMQ~~
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O4 - HKLM\..\Run: [SbUsb AudCtrl] RunDll32 sbusbdll.dll,RCMonitor
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NtVdmSrv] C:\WINDOWS\inf\ntvdm.vbe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\DVDAudio\CTDVDDET.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1409082233-1303643608-1417001333-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 4046488078
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe

--
End of file - 7787 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-08-07 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-08-07 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"H2O"=C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2005-12-18 307200]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2013-03-21 5078504]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2009-10-14 2793304]
"SbUsb AudCtrl"=RunDll32 sbusbdll.dll,RCMonitor []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2013-06-21 15677728]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2013-06-21 223008]
"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2013-06-21 2586912]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"NtVdmSrv"=C:\WINDOWS\inf\ntvdm.vbe [2013-06-20 1219]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"CTxfiHlp"=C:\WINDOWS\system32\CTXFIHLP.EXE [2011-08-22 25600]
"CTDVDDET"=C:\Program Files\Creative\DVDAudio\CTDVDDET.EXE [2003-06-18 45056]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\Program Files\Maxthon\Bin\MxUp.exe"="C:\Program Files\Maxthon\Bin\MxUp.exe:*:Enabled:MxUp"
"C:\Program Files\Maxthon\Bin\Maxthon.exe"="C:\Program Files\Maxthon\Bin\Maxthon.exe:*:Enabled:Maxthon"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre7\bin\javaw.exe"="C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre7\bin\java.exe"="C:\Program Files\Java\jre7\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Bohemia Interactive\ArmA 2 Free\arma2free.exe"="C:\Program Files\Bohemia Interactive\ArmA 2 Free\arma2free.exe:*:Enabled:ArmA 2 Free"
"C:\Documents and Settings\Georgie\Plocha\Bohemia Interactive\arma2free.exe"="C:\Documents and Settings\Georgie\Plocha\Bohemia Interactive\arma2free.exe:*:Enabled:ArmA 2 Free"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codeca.acm
"VIDC.FFDS"=ff_vfw.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux3"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux4"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"msacm.avis"=ff_acm.acm

======List of files/folders created in the last 1 month======

2013-08-23 16:33:52 ----D---- C:\rsit
2013-08-23 16:27:21 ----A---- C:\AdwCleaner[S5].txt
2013-08-23 16:17:21 ----A---- C:\AdwCleaner[S4].txt
2013-08-23 16:16:34 ----A---- C:\AdwCleaner[R4].txt
2013-08-23 00:42:08 ----A---- C:\WINDOWS\ntbtlog.txt
2013-08-21 03:18:39 ----D---- C:\Program Files\QuickTime
2013-08-21 02:26:14 ----D---- C:\Documents and Settings\Georgie\Data aplikací\Publish Providers
2013-08-21 02:00:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony
2013-08-21 02:00:10 ----D---- C:\Program Files\Sony
2013-08-21 01:59:22 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2013-08-21 01:58:12 ----D---- C:\Documents and Settings\Georgie\Data aplikací\Sony
2013-08-20 19:10:52 ----D---- C:\Documents and Settings\Georgie\Data aplikací\AnvSoft
2013-08-20 19:10:29 ----D---- C:\Program Files\AnvSoft
2013-08-19 03:26:53 ----N---- C:\WINDOWS\system32\CTAA1.DAT
2013-08-19 03:26:38 ----N---- C:\WINDOWS\system32\ctdvda32.dll
2013-08-19 03:07:05 ----D---- C:\Program Files\Common Files\Creative Labs Shared
2013-08-19 03:06:40 ----A---- C:\WINDOWS\system32\cttele32.dll
2013-08-19 03:05:54 ----D---- C:\WINDOWS\system32\Data
2013-08-19 03:05:53 ----D---- C:\Program Files\Creative
2013-08-16 22:32:24 ----D---- C:\Program Files\Bohemia Interactive
2013-08-16 19:01:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\4shared Desktop
2013-08-16 18:45:30 ----D---- C:\Program Files\dumps
2013-08-16 18:44:46 ----D---- C:\Program Files\Common Files\Steam
2013-08-16 02:05:49 ----D---- C:\Program Files\TornTV.com
2013-08-15 02:29:47 ----A---- C:\WINDOWS\system32\TURegOpt.exe
2013-08-15 02:29:10 ----D---- C:\Program Files\TuneUp Utilities 2012
2013-08-15 00:40:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2850869$
2013-08-15 00:40:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2859537$
2013-08-15 00:39:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2863058$
2013-08-15 00:39:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2849470$
2013-08-14 18:04:34 ----D---- C:\Program Files\TuneUp Utilities 2013
2013-08-14 18:02:05 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-08-14 16:00:23 ----D---- C:\Program Files\Common Files\Adobe
2013-08-14 16:00:23 ----D---- C:\Program Files\Adobe
2013-08-14 16:00:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2013-08-14 12:26:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\StarApp
2013-08-10 18:03:25 ----D---- C:\Documents and Settings\Georgie\Data aplikací\GameMaker
2013-08-10 16:58:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Desura
2013-08-10 14:10:10 ----D---- C:\VVVVVV
2013-08-09 13:15:49 ----D---- C:\Slender The Nine Pages
2013-08-07 19:11:39 ----D---- C:\Program Files\Common Files\Java
2013-08-07 19:11:36 ----A---- C:\WINDOWS\system32\javaws.exe
2013-08-07 19:11:33 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-08-07 19:11:33 ----A---- C:\WINDOWS\system32\javaw.exe
2013-08-07 19:11:33 ----A---- C:\WINDOWS\system32\java.exe
2013-08-04 22:15:43 ----D---- C:\Program Files\GIMP 2
2013-08-03 14:59:42 ----D---- C:\Documents and Settings\Georgie\Data aplikací\.minecraft
2013-08-01 06:51:45 ----D---- C:\Documents
2013-08-01 05:44:18 ----SHD---- C:\WINDOWS\system32\AI_RecycleBin
2013-07-29 12:43:24 ----D---- C:\Program Files\AGEIA Technologies
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrszht.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrstr.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsth.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrssv.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrssl.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrssk.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsru.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrspt.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrspl.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsno.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsko.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsja.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsit.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrshu.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrshe.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrses.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrseng.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsel.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsde.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsda.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrscs.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvrsar.dll
2013-07-29 12:43:03 ----A---- C:\WINDOWS\system32\nvcolor.exe
2013-07-29 12:43:02 ----A---- C:\WINDOWS\system32\nvmctray.dll
2013-07-29 12:43:02 ----A---- C:\WINDOWS\system32\nvcpl.dll
2013-07-29 12:42:59 ----A---- C:\WINDOWS\system32\nvwddi.dll
2013-07-29 12:37:21 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2013-07-29 12:37:21 ----A---- C:\WINDOWS\system32\nvdispgenco3232049.dll
2013-07-29 12:37:21 ----A---- C:\WINDOWS\system32\nvdispco3232049.dll
2013-07-29 12:37:21 ----A---- C:\WINDOWS\system32\nvcuda.dll
2013-07-29 12:37:17 ----A---- C:\WINDOWS\system32\nvapi.dll
2013-07-29 12:18:02 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2013-07-29 11:46:49 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2013-07-28 16:18:06 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2013-07-28 10:17:14 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2013-07-28 10:14:16 ----D---- C:\Program Files\MSBuild
2013-07-28 10:14:13 ----D---- C:\WINDOWS\system32\XPSViewer
2013-07-28 10:14:11 ----D---- C:\Program Files\Reference Assemblies
2013-07-28 10:13:45 ----N---- C:\WINDOWS\system32\spmsg2.dll
2013-07-28 10:04:20 ----RSD---- C:\WINDOWS\assembly
2013-07-28 10:03:54 ----D---- C:\WINDOWS\system32\en-US
2013-07-28 10:03:45 ----D---- C:\WINDOWS\Microsoft.NET
2013-07-25 06:05:19 ----D---- C:\Documents and Settings\Georgie\Data aplikací\NVIDIA
2013-07-25 05:55:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2013-07-25 05:55:23 ----A---- C:\WINDOWS\system32\npDeployJava1.dll
2013-07-25 05:55:23 ----A---- C:\WINDOWS\system32\deployJava1.dll
2013-07-25 05:54:56 ----D---- C:\Program Files\Java
2013-07-25 05:53:44 ----D---- C:\Documents and Settings\Georgie\Data aplikací\Sun
2013-07-25 02:43:45 ----D---- C:\WINDOWS\system32\appmgmt
2013-07-25 02:28:02 ----A---- C:\CEPx4367.tmp
2013-07-25 02:04:58 ----D---- C:\Documents and Settings\Georgie\Data aplikací\Logitech
2013-07-24 06:01:32 ----SHD---- C:\WINDOWS\CSC

======List of files/folders modified in the last 1 month======

2013-08-23 16:50:41 ----D---- C:\WINDOWS\Prefetch
2013-08-23 16:50:36 ----D---- C:\Program Files\trend micro
2013-08-23 16:41:33 ----D---- C:\WINDOWS\temp
2013-08-23 16:40:27 ----D---- C:\WINDOWS\system32\inetsrv
2013-08-23 16:30:23 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-08-23 15:44:51 ----D---- C:\WINDOWS
2013-08-23 13:41:16 ----D---- C:\WINDOWS\system32
2013-08-22 18:17:11 ----D---- C:\Documents and Settings\Georgie\Data aplikací\vlc
2013-08-21 21:31:26 ----SHD---- C:\System Volume Information
2013-08-21 21:31:26 ----D---- C:\WINDOWS\system32\Restore
2013-08-21 21:30:33 ----HD---- C:\Config.Msi
2013-08-21 11:32:18 ----SHD---- C:\WINDOWS\Installer
2013-08-21 11:30:31 ----D---- C:\WINDOWS\WinSxS
2013-08-21 11:30:22 ----D---- C:\Program Files\Common Files
2013-08-21 11:29:37 ----RD---- C:\Program Files
2013-08-21 09:05:25 ----D---- C:\Documents and Settings\Georgie\Data aplikací\uTorrent
2013-08-21 03:19:11 ----D---- C:\Program Files\Internet Explorer
2013-08-21 01:59:45 ----HD---- C:\WINDOWS\inf
2013-08-21 01:59:41 ----D---- C:\WINDOWS\system32\mui
2013-08-21 01:59:40 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-08-20 00:21:15 ----D---- C:\WINDOWS\system32\CatRoot2
2013-08-19 18:54:14 ----SD---- C:\WINDOWS\Tasks
2013-08-19 17:44:14 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2013-08-19 17:39:39 ----D---- C:\WINDOWS\system32\drivers
2013-08-19 03:35:05 ----HD---- C:\Program Files\InstallShield Installation Information
2013-08-19 03:11:23 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-08-19 03:06:33 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2013-08-19 03:06:33 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2013-08-17 15:22:29 ----D---- C:\WINDOWS\Logs
2013-08-16 23:00:47 ----D---- C:\WINDOWS\system32\DirectX
2013-08-15 02:26:37 ----D---- C:\WINDOWS\Debug
2013-08-15 00:48:19 ----D---- C:\WINDOWS\system32\MRT
2013-08-15 00:45:48 ----A---- C:\WINDOWS\system32\MRT.exe
2013-08-15 00:42:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-14 18:05:03 ----D---- C:\Documents and Settings\Georgie\Data aplikací\TuneUp Software
2013-08-14 18:05:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
2013-08-14 16:01:09 ----D---- C:\Documents and Settings\Georgie\Data aplikací\Adobe
2013-08-14 16:01:08 ----SD---- C:\Documents and Settings\Georgie\Data aplikací\Microsoft
2013-08-13 11:18:09 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-07-31 15:55:01 ----D---- C:\Program Files\CCleaner
2013-07-29 12:43:24 ----D---- C:\Program Files\NVIDIA Corporation
2013-07-29 03:12:48 ----A---- C:\WINDOWS\win.ini
2013-07-28 16:18:19 ----D---- C:\WINDOWS\system32\CatRoot
2013-07-28 11:29:34 ----RSD---- C:\WINDOWS\Fonts
2013-07-28 10:17:02 ----D---- C:\WINDOWS\system32\cs-cz
2013-07-28 10:13:48 ----D---- C:\WINDOWS\system32\spool
2013-07-28 10:03:47 ----D---- C:\Program Files\Microsoft.NET
2013-07-26 04:49:00 ----A---- C:\WINDOWS\system32\wininet.dll
2013-07-26 04:48:59 ----N---- C:\WINDOWS\system32\occache.dll
2013-07-26 04:48:59 ----N---- C:\WINDOWS\system32\mstime.dll
2013-07-26 04:48:59 ----N---- C:\WINDOWS\system32\mshtmled.dll
2013-07-26 04:48:59 ----N---- C:\WINDOWS\system32\licmgr10.dll
2013-07-26 04:48:59 ----A---- C:\WINDOWS\system32\urlmon.dll
2013-07-26 04:48:59 ----A---- C:\WINDOWS\system32\url.dll
2013-07-26 04:48:59 ----A---- C:\WINDOWS\system32\mshtml.dll
2013-07-26 04:48:59 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2013-07-26 04:48:59 ----A---- C:\WINDOWS\system32\msfeeds.dll
2013-07-26 04:48:59 ----A---- C:\WINDOWS\system32\jsproxy.dll
2013-07-26 04:48:59 ----A---- C:\WINDOWS\system32\iertutil.dll
2013-07-26 04:48:58 ----N---- C:\WINDOWS\system32\iepeers.dll
2013-07-26 04:48:58 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2013-07-26 04:48:58 ----A---- C:\WINDOWS\system32\ieframe.dll
2013-07-25 21:23:00 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2013-07-25 02:58:39 ----D---- C:\Program Files\coolpro2
2013-07-25 02:58:05 ----A---- C:\WINDOWS\system.ini
2013-07-25 02:17:52 ----D---- C:\Documents and Settings\Georgie\Data aplikací\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 BANTExt;Belarc SMBios Access; C:\WINDOWS\System32\Drivers\BANTExt.sys [2011-08-09 3840]
R1 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2013-01-10 161368]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2013-01-10 122240]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2013-01-10 105784]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 truecrypt;truecrypt; C:\WINDOWS\System32\drivers\truecrypt.sys [2013-07-11 231760]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R3 b57w2k;Broadcom NetXtreme 57xx Gigabit Controller; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2005-03-17 132608]
R3 CLEDX;Team H2O CLEDX service; C:\WINDOWS\system32\DRIVERS\cledx.sys [2005-05-09 33792]
R3 CT20XUT.SYS;CT20XUT.SYS; C:\WINDOWS\System32\drivers\CT20XUT.SYS [2011-08-22 171096]
R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\system32\drivers\ctac32k.sys [2011-08-22 511064]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2011-08-22 528344]
R3 CTEXFIFX.SYS;CTEXFIFX.SYS; C:\WINDOWS\System32\drivers\CTEXFIFX.SYS [2011-08-22 1324120]
R3 CTHWIUT.SYS;CTHWIUT.SYS; C:\WINDOWS\System32\drivers\CTHWIUT.SYS [2011-08-22 72792]
R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\system32\drivers\ctprxy2k.sys [2011-08-22 14424]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\drivers\ctsfm2k.sys [2011-08-22 158808]
R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\system32\drivers\emupia2k.sys [2011-08-22 95832]
R3 ha20x2k;Creative 20X HAL Driver; C:\WINDOWS\system32\drivers\ha20x2k.sys [2011-08-22 1178200]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2009-10-07 25752]
R3 LVRS;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs.sys [2009-05-01 265496]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2013-06-21 10973504]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2011-08-22 130136]
R3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2009-05-01 13976]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-05-01 2687512]
R3 sbusb;Sound Blaster USB Audio Driver; C:\WINDOWS\system32\DRIVERS\sbusb.sys [2005-06-10 1694592]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys []
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 CT20XUT;CT20XUT; C:\WINDOWS\system32\drivers\CT20XUT.SYS [2011-08-22 171096]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\system32\drivers\ctdvda2k.sys [2011-08-22 347144]
S3 CTEXFIFX;CTEXFIFX; C:\WINDOWS\system32\drivers\CTEXFIFX.SYS [2011-08-22 1324120]
S3 CTHWIUT;CTHWIUT; C:\WINDOWS\system32\drivers\CTHWIUT.SYS [2011-08-22 72792]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-12-15 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-12-15 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-12-15 21744]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2013-02-25 128672]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2009-02-23 307200]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2013-03-21 1341664]
R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-07 154136]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2013-06-21 156960]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-03 1259880]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe [2012-04-05 1529152]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-21 162408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-16 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2013-08-19 79360]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-08-07 182184]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-04-18 754856]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[cernohous13]

Zdravím,

Stáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe

Spusť program „OTM.exe“ (pro Vistu a Win7 – pravým a „Run As Administrator“).
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“

Klikni na červené „MoveIt!“

Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\ - dej mi ho sem na kontrolu

Script OTM

Kód: Vybrat vše

:Commands
[emptytemp]
[emptyflash]
[emptyjava]
[clearallrestorepoints]

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\WINDOWS\inf\msqfxvw
C:\WINDOWS\inf\ntvdm.vbe
C:\AdwCleaner*

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NtVdmSrv"=-
"Adobe ARM"=-

:Services

[jirka bj]

Jste zlatej, cpu výkon klesl skoro na nulu
nevím ale co to bylo virus nebo co?
Mám dvoujadrový procesor ale pořád jakoby nestíhá občas i grafika přitom obojí by mělo být dost výkonné.Já na tom dělám jen muziku/Emagic Logic/ a syn na něm občas hraje hru minecraft a občas se to seká jako když to nestíhá tak nevím
Zatím mi to běží podstatně líp ale ještě jsem to neprojel tak uvidím
nevím jestli to stačilo ale cpu jede na skoro nulu předtím tam bylo 50-70% i když nic nejelo.
Tak tady je log snad tam něco vyčtete .
A moc díky, jste dobrej.Jirka

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: All Users.WINDOWS.0

User: CraftMan
->Temp folder emptied: 40358672 bytes
->Temporary Internet Files folder emptied: 42104537 bytes
->Flash cache emptied: 492 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User.WINDOWS.0
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Georgie
->Temp folder emptied: 7778434 bytes
->Temporary Internet Files folder emptied: 1295369 bytes
->Flash cache emptied: 1941 bytes

User: jirka
->Temp folder emptied: 172700852 bytes
->Temporary Internet Files folder emptied: 503418 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 34546 bytes

User: LocalService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 34724 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 8112243 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 260,00 mb


[EMPTYFLASH]

User: All Users

User: All Users.WINDOWS.0

User: CraftMan
->Flash cache emptied: 0 bytes

User: Default User

User: Default User.WINDOWS.0

User: Georgie
->Flash cache emptied: 0 bytes

User: jirka

User: LocalService

User: LocalService.NT AUTHORITY

User: NetworkService

User: NetworkService.NT AUTHORITY

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: All Users

User: All Users.WINDOWS.0

User: CraftMan

User: Default User

User: Default User.WINDOWS.0

User: Georgie

User: jirka

User: LocalService

User: LocalService.NT AUTHORITY

User: NetworkService

User: NetworkService.NT AUTHORITY

User: UpdatusUser

Total Java Files Cleaned = 0,00 mb


Restore point Set: OTM Restore Point
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1030.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP11A7.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP124D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1396.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP146E.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP15E5.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1720.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP247.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP26D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP293.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3E3.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP59D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP60C.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6E7.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6FA.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP70A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8C9.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP977.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC95.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPCDA.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPCF7.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD5A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD9D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDC2.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDF3.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE0B.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI3FE.tmp moved successfully.
C:\WINDOWS\twain_32\hpqgnds2.tmp moved successfully.
C:\WINDOWS\inf\msqfxvw\bitstreams folder moved successfully.
C:\WINDOWS\inf\msqfxvw folder moved successfully.
C:\WINDOWS\inf\ntvdm.vbe moved successfully.
C:\AdwCleaner[R4].txt moved successfully.
C:\AdwCleaner[S4].txt moved successfully.
C:\AdwCleaner[S5].txt moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NtVdmSrv deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
========== SERVICES/DRIVERS ==========

OTM by OldTimer - Version 3.1.21.0 log created on 08252013_012951

Files moved on Reboot...
C:\WINDOWS\temp\MRT\B6345F3A-AFA9-42FF-A5E7-DFC6C57B7EF8\MpGearSupport_20130825_012939046.log moved successfully.
File C:\WINDOWS\temp\MRT\B6345F3A-AFA9-42FF-A5E7-DFC6C57B7EF8\TMP000000014E31C6D2D908D431 not found!
C:\WINDOWS\temp\MPENGINE.DLL moved successfully.
C:\WINDOWS\temp\MPGEAR.DLL moved successfully.

Registry entries deleted on Reboot...

[cernohous13]

Ještě bych navrhl kontrolu

Stáhni a nainstaluj MBAM zde http://www.malwarebytes.org/products/malwarebytes_free/
Spustit -> na 3.záložce "Aktualizace" -> Kontrola aktualizací
následně na 1.záložce "Kontrolor" -> Rychlá kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení

Stáhni AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Ulož nejlépe na plochu -> ukonči všechny programy -> spusť AdwCleaner -> klikni na Search po dokončení na Clean
bude provedena oprava, restartuje se - (případně restartuj) a vypadne log C:\AdwCleaner\AdwCleaner[S?].txt , jeho obsah vložíš sem

[jirka bj]

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.08.25.02

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Georgie :: DJEANS-8B2BD17D [administrátor]

Ochrana: Povolena

25.8.2013 6:30:01
MBAM-log-2013-08-25 (06-41-54).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 377202
Uplynulý čas: 6 minut, 46 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4E892B84-0A0B-4AC7-A82C-4229956A0972} (PUP.Optional.Tarma.A) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SETUP.EXE (PUP.Optional.Tarma.A) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DE4FA976-CA82-4532-A7D9-82A005AC8B80} (PUP.Optional.Tarma.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 2
C:\Documents and Settings\Georgie\Data aplikací\OpenCandy (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Georgie\Data aplikací\OpenCandy\42DDB97E7ED94F5EBE3B252C6B719E2A (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 5
C:\Documents and Settings\All Users\Data aplikací\InstallMate\{4E892B84-0A0B-4AC7-A82C-4229956A0972}\Setup.exe (PUP.Optional.Tarma.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\All Users\Data aplikací\InstallMate\{4E892B84-0A0B-4AC7-A82C-4229956A0972}\TsuDll.dll (PUP.Optional.Tarma.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\All Users\Data aplikací\InstallMate\{DE4FA976-CA82-4532-A7D9-82A005AC8B80}\Setup.exe (PUP.Optional.Tarma.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\All Users\Data aplikací\InstallMate\{DE4FA976-CA82-4532-A7D9-82A005AC8B80}\TsuDll.dll (PUP.Optional.Tarma.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Georgie\Data aplikací\OpenCandy\42DDB97E7ED94F5EBE3B252C6B719E2A\TuneUpUtilities2013-2200329_cs-CZ.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

(konec)

[jirka bj]

# AdwCleaner v3.001 - Report created 25/08/2013 at 06:45:44
# Updated 24/08/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Georgie - DJEANS-8B2BD17D
# Running from : C:\Documents and Settings\Georgie\Plocha\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found C:\Documents and Settings\All Users\Data aplikací\apn
Folder Found C:\Documents and Settings\All Users\Data aplikací\InstallMate
Folder Found C:\Documents and Settings\All Users\Data aplikací\StarApp
Folder Found C:\Documents and Settings\Georgie\Data aplikací\OpenCandy
Folder Found C:\Documents and Settings\Georgie\IECompatCache
Folder Found C:\Documents and Settings\Georgie\Local Settings\Data aplikací\cre
Folder Found C:\Documents and Settings\Georgie\Nabídka Start\Programy\TornTV.com
Folder Found C:\Program Files\TornTV.com

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\1ClickDownload
Key Found : HKCU\Software\APN PIP
Key Found : HKLM\Software\TENCENT

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


*************************

AdwCleaner[R0].txt - [1189 octets] - [25/08/2013 06:45:44]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1249 octets] ##########

[cernohous13]

nález MBAM nech odstranit

v AdwCleaneru potřebuji log po příkazu "Clean"

[jirka bj]

# AdwCleaner v3.001 - Report created 25/08/2013 at 08:04:10
# Updated 24/08/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Georgie - DJEANS-8B2BD17D
# Running from : C:\Documents and Settings\Georgie\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\apn
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\StarApp
Folder Deleted : C:\Program Files\TornTV.com
Folder Deleted : C:\Documents and Settings\Georgie\IECompatCache
Folder Deleted : C:\Documents and Settings\Georgie\Local Settings\Data aplikací\cre
Folder Deleted : C:\Documents and Settings\Georgie\Nabídka Start\Programy\TornTV.com

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKLM\Software\TENCENT

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


*************************

AdwCleaner[R0].txt - [1329 octets] - [25/08/2013 06:45:44]
AdwCleaner[R1].txt - [1317 octets] - [25/08/2013 08:02:14]
AdwCleaner[S0].txt - [1272 octets] - [25/08/2013 08:04:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1332 octets] ##########

[cernohous13]

Jak moc jsem ti to rozvrtal? - ještě nějaký problém nebo budeme mazat stopy

[jirka bj]

Nerozvrtal ,vůbec ne cpu jede na nulu, když není nic zapnutý ale jinak je dost pomalý
ale to není vůbec vaše práce.
Vy jste dobrej to co mě to brzdilo je určitě pryč.
Co mám tedy dělat dál?

[cernohous13]

Tak úklid

MBAM odinstaluj

Spusť opět OTM -> CleanUp! - odinstaluje a vyčistí po sobě.

Mohu doporučit kontrolu a vyčištění Ccleanerem

Stáhni Ccleaner - http://www.slunecnice.cz/sw/ccleaner/
Při instalaci vyhodit fajfku u "Instalovat Yahoo! Toolbar"

zavřít Internetový prohlížeč a
spustit "Čistič" > "Spustit Ccleaner" - odstraní nepotřebné
spustit "Registry" > "Hledej problémy" > "Opravit vybrané problémy"
souhlas se zálohou registrů - opakovat dokud nebudou registry čisté.

Návod:http://jnp.zive.cz/Clanky/Prirucka-do-k ... fault.aspx

Ten si můžeš nechat i na budoucí občasné čištění.

Po vyčištění by se hodila defragmentace
doporučuji http://www.slunecnice.cz/sw/defraggler/ + čeština

a mělo by být hotovo