Prosím o preventívnu kontrolu PC
Napsal: 08 čer 2016 17:31
...ako mám postupovať? 
Additional scan result of Farbar Recovery Scan Tool (x86) Version:07-06-2016
Ran by Andrej (2016-06-08 18:49:48)
Running from C:\Documents and Settings\Andrej.JANO\Desktop
Systém Microsoft Windows XP Professional Service Pack 3 (X86) (2005-05-07 15:24:05)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-117609710-1336601894-1801674531-500 - Administrator - Enabled)
Andrej (S-1-5-21-117609710-1336601894-1801674531-1157 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Andrej.JANO
ASPNET (S-1-5-21-117609710-1336601894-1801674531-1150 - Limited - Enabled)
Guest (S-1-5-21-117609710-1336601894-1801674531-501 - Limited - Enabled)
HelpAssistant (S-1-5-21-117609710-1336601894-1801674531-1000 - Limited - Disabled)
PC1 (S-1-5-21-117609710-1336601894-1801674531-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\PC1
SUPPORT_388945a0 (S-1-5-21-117609710-1336601894-1801674531-1002 - Limited - Disabled)
UpdatusUser (S-1-5-21-117609710-1336601894-1801674531-1008 - Limited - Enabled) => %SystemDrive%\Documents and Settings\TEMP.JANO.002
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ActivInspire v2 (HKLM\...\{84007E42-A06F-4FFE-90D2-85F82CB48615}) (Version: 2.4.66096 - Promethean)
Adobe Flash Player 21 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Reader 7.0 (HKLM\...\{AC76BA86-7AD7-1033-7646-A70000000000}) (Version: 7.0.0 - Adobe Systems Incorporated)
Aktualizácie NVIDIA 1.8.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.8.15 - NVIDIA Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.18 - Piriform)
Compiled Driver Disk (HTC) 1.0 (HKLM\...\{3DCF00F5-04A5-4543-A088-705480811203}_is1) (Version: 1.0.9.6 - COMPELSON Labs)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX218 Series Manuál (HKLM\...\EPSON SX218 Series Manual) (Version: - )
EPSON SX218 Series Printer Uninstall (HKLM\...\EPSON SX218 Series) (Version: - SEIKO EPSON Corporation)
Google Chrome (HKLM\...\Google Chrome) (Version: 49.0.2623.112 - Spoločnosť Google Inc.)
Google Update Helper (Version: 1.3.29.5 - Google Inc.) Hidden
HTC Driver Installer (HKLM\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.17.0.001 - HTC Corporation)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.42 - Irfan Skiljan)
Java 8 Update 91 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
K-Lite Mega Codec Pack 6.2.0 (HKLM\...\KLiteCodecPack_is1) (Version: 6.2.0 - )
Malwarebytes Anti-Malware verze 2.2.1.1043 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 46.0.1 (x86 sk) (HKLM\...\Mozilla Firefox 46.0.1 (x86 sk)) (Version: 46.0.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0 - Microsoft Corporation) Hidden
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
MSXML 6.0 Parser (KB933579) (HKLM\...\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}) (Version: 6.10.1200.0 - Microsoft Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9713 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation)
Ovládací panel NVIDIA 301.42 (Version: 301.42 - NVIDIA Corporation) Hidden
PS TO PC CONVERTER (HKLM\...\{C0EA1DDF-896F-426A-A8FC-500743EECC36}) (Version: 2007.07.3 - )
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5366 - Realtek Semiconductor Corp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype™ 7.21 (HKLM\...\{1845470B-EB14-4ABC-835B-E36C693DC07D}) (Version: 7.21.100 - Skype Technologies S.A.)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
VGA Utility (HKLM\...\{D27BDB5D-3B4C-44F0-A648-BD00B0E79B39}) (Version: 1.00.07.07.17 - GIGABYTE)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Winamp (HKLM\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Windows XP Service Pack 4 (HKLM\...\Windows XP Service Pack) (Version: 20141115.000000 - Charalampos Kazakos )
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\ParetoLogic Registration3.job => rundll32.exe C:\Program Files\Common Files\ParetoLogic\UUS3\UUS3.dll
Task: C:\WINDOWS\Tasks\WGASetup.job => C:\WINDOWS\system32\KB905474\wgasetup.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2013-10-17 15:27 - 2013-10-17 15:27 - 00166912 _____ () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
2004-08-04 00:56 - 2008-04-14 02:11 - 00059904 _____ () C:\WINDOWS\system32\devenum.dll
2004-08-04 00:56 - 2008-04-14 02:11 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll
2016-06-08 17:49 - 2014-02-10 13:44 - 04592128 _____ () C:\Documents and Settings\Andrej.JANO\Local Settings\Application Data\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll
2016-06-08 17:49 - 2014-02-10 13:44 - 00112128 _____ () C:\Documents and Settings\Andrej.JANO\Local Settings\Application Data\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:D282699C [204]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Robesaimpi => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{1a3e09be-1e45-494b-9174-d7385b45bbf5} => ""=""
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKLM\...\regfile\shell\open\command: C:\WINDOWS\REGEDIT.EXE /M "%L" <===== ATTENTION
HKLM\...\batfile\DefaultIcon: <===== ATTENTION
HKLM\...\batfile\shell\open\command: C:\WINDOWS\system32\CMD.EXE /C Call "%L" %* <===== ATTENTION
HKLM\...\cmdfile\shell\open\command: C:\WINDOWS\system32\CMD.EXE /C Call "%L" %* <===== ATTENTION
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2001-08-23 14:00 - 2001-08-23 14:00 - 00000734 ____N C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> (None)
HKU\S-1-5-19.bak-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> (None)
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> (None)
HKU\S-1-5-20.bak-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> (None)
HKU\S-1-5-21-117609710-1336601894-1801674531-1008\Control Panel\Desktop\\Wallpaper -> (None)
HKU\S-1-5-21-117609710-1336601894-1801674531-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> (None)
HKU\S-1-5-21-117609710-1336601894-1801674531-1008.bak-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> (None)
HKU\S-1-5-21-117609710-1336601894-1801674531-1157\Control Panel\Desktop\\Wallpaper -> C:\Documents and Settings\Andrej.JANO\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
HKU\S-1-5-21-117609710-1336601894-1801674531-1157-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Documents and Settings\Andrej.JANO\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
DNS Servers: 192.168.0.1
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^Documents and Settings^PC1^Start Menu^Programs^Startup^GIGABYTE VGA Utility.lnk => C:\WINDOWS\pss\GIGABYTE VGA Utility.lnkStartup
MSCONFIG\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
MSCONFIG\startupreg: EEventManager => "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: NvCplDaemon => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
MSCONFIG\startupreg: NvMediaCenter => RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
MSCONFIG\startupreg: RTHDCPL => RTHDCPL.EXE
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
DomainProfile\AuthorizedApplications: [%SystemRoot%\Network Diagnostic\XPNetDiag.Exe] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP3Res.Dll,-20000
DomainProfile\AuthorizedApplications: [%SystemRoot%\System32\DMAdmin.Exe] => :LocalSubnet:Enabled:Logical Disk Manager service process
DomainProfile\AuthorizedApplications: [%SystemRoot%\System32\DMRemote.Exe] => :LocalSubnet:Enabled:Logical Disk Manager component
DomainProfile\AuthorizedApplications: [%SystemRoot%\System32\FTP.Exe] => Enabled:Windows® FTP Client
DomainProfile\AuthorizedApplications: [%SystemRoot%\System32\MMC.Exe] => :LocalSubNet:Enabled:Microsoft Management Console
DomainProfile\AuthorizedApplications: [%SystemRoot%\System32\SessMgr.Exe] => :LocalSubnet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22019
DomainProfile\AuthorizedApplications: [%SystemRoot%\System32\TCPSvcS.Exe] => :LocalSubNet:Enabled:Windows® TCP/IP Services Application
DomainProfile\AuthorizedApplications: [%SystemRoot%\System32\TFTPD.EXE] => :LocalSubNet:Enabled:Windows® Trivial File Transfer Service
DomainProfile\AuthorizedApplications: [%SystemRoot%\System32\TlntSvr.Exe] => :LocalSubnet:Enabled:Windows® Telnet Service
DomainProfile\AuthorizedApplications: [%SystemRoot%\System32\WBEM\UnSecApp.Exe] => :LocalSubNet:Enabled:Windows® Management Instrumentation
DomainProfile\AuthorizedApplications: [%ProgramFiles%\NetMeeting\Conf.Exe] => :LocalSubNet:Disabled:Windows® NetMeeting®
DomainProfile\AuthorizedApplications: [%SystemRoot%\System32\MNMSrvC.Exe] => :LocalSubNet:Disabled:Windows® NetMeeting® Remote Desktop Sharing
DomainProfile\AuthorizedApplications: [%ProgramFiles%\Windows Media Player\MPlayer2.Exe] => :LocalSubnet:Enabled:Windows® Media Player
DomainProfile\AuthorizedApplications: [%ProgramFiles%\Windows Media Player\WMPlayer.Exe] => :LocalSubnet:Enabled:Windows® Media Player
DomainProfile\AuthorizedApplications: [%SystemRoot%\PCHealth\HelpCtr\Binaries\HelpSvc.Exe] => %SystemRoot%\PCHealth\HelpCtr\Binaries\HelpSvc.exe:LocalSubNet:Enabled:Offer Remote Assistance
DomainProfile\AuthorizedApplications: [%SystemRoot%\PCHealth\HelpCtr\Binaries\HelpCtr.Exe] => %SystemRoot%\PCHealth\HelpCtr\Binaries\HelpCtr.exe:LocalSubNet:Enabled:Remote Assistance - Windows Messenger and Voice
DomainProfile\AuthorizedApplications: [D:\Winamp\winamp.exe] => Enabled:Winamp
DomainProfile\AuthorizedApplications: [C:\Program Files\HTC\HTC Sync Manager\HTCSyncManager.exe] => Enabled:HTCSyncManager
DomainProfile\AuthorizedApplications: [C:\Program Files\Winamp\winamp.exe] => Enabled:Winamp
StandardProfile\AuthorizedApplications: [%SystemRoot%\Network Diagnostic\XPNetDiag.Exe] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP3Res.Dll,-20000
StandardProfile\AuthorizedApplications: [%SystemRoot%\System32\DMAdmin.Exe] => :LocalSubnet:Enabled:Logical Disk Manager service process
StandardProfile\AuthorizedApplications: [%SystemRoot%\System32\DMRemote.Exe] => :LocalSubnet:Enabled:Logical Disk Manager component
StandardProfile\AuthorizedApplications: [%SystemRoot%\System32\FTP.Exe] => Enabled:Windows® FTP Client
StandardProfile\AuthorizedApplications: [%SystemRoot%\System32\MMC.Exe] => :LocalSubNet:Enabled:Microsoft Management Console
StandardProfile\AuthorizedApplications: [%SystemRoot%\System32\SessMgr.Exe] => :LocalSubnet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22019
StandardProfile\AuthorizedApplications: [%SystemRoot%\System32\TCPSvcS.Exe] => :LocalSubNet:Enabled:Windows® TCP/IP Services Application
StandardProfile\AuthorizedApplications: [%SystemRoot%\System32\TFTPD.EXE] => :LocalSubNet:Enabled:Windows® Trivial File Transfer Service
StandardProfile\AuthorizedApplications: [%SystemRoot%\System32\TlntSvr.Exe] => :LocalSubnet:Enabled:Windows® Telnet Service
StandardProfile\AuthorizedApplications: [%SystemRoot%\System32\WBEM\UnSecApp.Exe] => :LocalSubNet:Enabled:Windows® Management Instrumentation
StandardProfile\AuthorizedApplications: [%ProgramFiles%\NetMeeting\Conf.Exe] => :LocalSubNet:Disabled:Windows® NetMeeting®
StandardProfile\AuthorizedApplications: [%SystemRoot%\System32\MNMSrvC.Exe] => :LocalSubNet:Disabled:Windows® NetMeeting® Remote Desktop Sharing
StandardProfile\AuthorizedApplications: [%ProgramFiles%\Windows Media Player\MPlayer2.Exe] => :LocalSubnet:Enabled:Windows® Media Player
StandardProfile\AuthorizedApplications: [%ProgramFiles%\Windows Media Player\WMPlayer.Exe] => :LocalSubnet:Enabled:Windows® Media Player
StandardProfile\AuthorizedApplications: [%SystemRoot%\PCHealth\HelpCtr\Binaries\HelpSvc.Exe] => %SystemRoot%\PCHealth\HelpCtr\Binaries\HelpSvc.exe:LocalSubNet:Enabled:Offer Remote Assistance
StandardProfile\AuthorizedApplications: [%SystemRoot%\PCHealth\HelpCtr\Binaries\HelpCtr.Exe] => %SystemRoot%\PCHealth\HelpCtr\Binaries\HelpCtr.exe:LocalSubNet:Enabled:Remote Assistance - Windows Messenger and Voice
StandardProfile\AuthorizedApplications: [C:\Program Files\Epson Software\Event Manager\EEventManager.exe] => Enabled:EEventManager Application
StandardProfile\AuthorizedApplications: [C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE] => Enabled:Microsoft OneNote
StandardProfile\AuthorizedApplications: [C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE] => Enabled:Microsoft Office Outlook
StandardProfile\AuthorizedApplications: [C:\Program Files\Mozilla Firefox\firefox.exe] => Enabled:Firefox (C:\Program Files\Mozilla Firefox)
StandardProfile\AuthorizedApplications: [C:\Program Files\Skype\Phone\Skype.exe] => Enabled:Skype
StandardProfile\AuthorizedApplications: [C:\Program Files\HTC\HTC Sync Manager\HTCSyncManager.exe] => Enabled:HTCSyncManager
StandardProfile\AuthorizedApplications: [C:\Program Files\Winamp\winamp.exe] => Enabled:Winamp
StandardProfile\AuthorizedApplications: [C:\Program Files\Google\Chrome\Application\chrome.exe] => Enabled:Google Chrome
DomainProfile\GloballyOpenPorts: [135:TCP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22019
DomainProfile\GloballyOpenPorts: [137:UDP] => Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22001
DomainProfile\GloballyOpenPorts: [138:UDP] => Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22002
DomainProfile\GloballyOpenPorts: [139:TCP] => Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22004
DomainProfile\GloballyOpenPorts: [445:TCP] => Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22005
DomainProfile\GloballyOpenPorts: [445:UDP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22003
DomainProfile\GloballyOpenPorts: [1900:UDP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22007
DomainProfile\GloballyOpenPorts: [2869:TCP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22008
DomainProfile\GloballyOpenPorts: [3389:TCP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22009
DomainProfile\GloballyOpenPorts: [500:UDP] => Disabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22017
DomainProfile\GloballyOpenPorts: [1701:UDP] => Disabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22016
DomainProfile\GloballyOpenPorts: [1723:TCP] => Disabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22015
DomainProfile\GloballyOpenPorts: [4500:UDP] => Disabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22018
DomainProfile\GloballyOpenPorts: [80:TCP] => :LocalSubNet:Enabled:Windows® Remote Management
DomainProfile\GloballyOpenPorts: [443:TCP] => :LocalSubNet:Enabled:Windows® Remote Management
StandardProfile\GloballyOpenPorts: [135:TCP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22019
StandardProfile\GloballyOpenPorts: [137:UDP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22001
StandardProfile\GloballyOpenPorts: [138:UDP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22002
StandardProfile\GloballyOpenPorts: [139:TCP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22004
StandardProfile\GloballyOpenPorts: [445:TCP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22005
StandardProfile\GloballyOpenPorts: [445:UDP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22003
StandardProfile\GloballyOpenPorts: [1900:UDP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22007
StandardProfile\GloballyOpenPorts: [2869:TCP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22008
StandardProfile\GloballyOpenPorts: [3389:TCP] => :LocalSubNet:Enabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22009
StandardProfile\GloballyOpenPorts: [500:UDP] => Disabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22017
StandardProfile\GloballyOpenPorts: [1701:UDP] => Disabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22016
StandardProfile\GloballyOpenPorts: [1723:TCP] => Disabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22015
StandardProfile\GloballyOpenPorts: [4500:UDP] => Disabled:@%SystemRoot%\System32\XPSP2Res.Dll,-22018
StandardProfile\GloballyOpenPorts: [80:TCP] => :LocalSubNet:Enabled:Windows® Remote Management
StandardProfile\GloballyOpenPorts: [443:TCP] => :LocalSubNet:Enabled:Windows® Remote Management
==================== Restore Points =========================
08-06-2016 18:13:58 Kontrolný bod systému
==================== Faulty Device Manager Devices =============
Name: USB Device(VID_1f3a_PID_efe8)
Description: USB Device(VID_1f3a_PID_efe8)
Class Guid: {36FC9E60-C465-11CF-8056-444553540000}
Manufacturer: USB Devices
Service: usbUDisc
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/08/2016 06:50:10 PM) (Source: MsiInstaller) (EventID: 11260) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1260. Politika obmedzenia softvéru neumožňuje systému Windows spustiť program. Ďalšie informácie nájdete v programe Zobrazovač udalostí, prípadne sa obráťte na správcu systému.
(NULL)(NULL)(NULL)(NULL)
Error: (06/08/2016 06:25:57 PM) (Source: LoadPerf) (EventID: 3011) (User: )
Description: Nepodarilo sa uvoľniť z pamäte reťazce počítadiel výkonu pre službu ASP.NET_2.0.50727 (ASP.NET_2.0.50727). Kód chyby
je prvý údaj DWORD v údajovej časti.
Error: (06/08/2016 06:25:57 PM) (Source: LoadPerf) (EventID: 3012) (User: )
Description: Hodnota reťazcov výkonu, ktoré sa nachádzajú v kľúči Performance databázy Registry je poškodená, keď
sa spracúva poskytovateľ rozšírených počítadiel Performance. Hodnota BaseIndex z kľúča Performance
databázy Registry je prvý údaj DWORD v údajovej časti, hodnota LastCounter value je druhý údaj
DWORD v údajovej časti a hodnota LastHelp je tretí údaj DWORD v údajovej časti.
Error: (06/08/2016 06:23:14 PM) (Source: LoadPerf) (EventID: 3011) (User: )
Description: Nepodarilo sa uvoľniť z pamäte reťazce počítadiel výkonu pre službu ASP.NET_2.0.50727 (ASP.NET_2.0.50727). Kód chyby
je prvý údaj DWORD v údajovej časti.
Error: (06/08/2016 06:23:14 PM) (Source: LoadPerf) (EventID: 3012) (User: )
Description: Hodnota reťazcov výkonu, ktoré sa nachádzajú v kľúči Performance databázy Registry je poškodená, keď
sa spracúva poskytovateľ rozšírených počítadiel Performance. Hodnota BaseIndex z kľúča Performance
databázy Registry je prvý údaj DWORD v údajovej časti, hodnota LastCounter value je druhý údaj
DWORD v údajovej časti a hodnota LastHelp je tretí údaj DWORD v údajovej časti.
Error: (06/08/2016 06:22:59 PM) (Source: LoadPerf) (EventID: 3011) (User: )
Description: Nepodarilo sa uvoľniť z pamäte reťazce počítadiel výkonu pre službu .NETFramework (.NETFramework). Kód chyby
je prvý údaj DWORD v údajovej časti.
Error: (06/08/2016 06:22:59 PM) (Source: LoadPerf) (EventID: 3012) (User: )
Description: Hodnota reťazcov výkonu, ktoré sa nachádzajú v kľúči Performance databázy Registry je poškodená, keď
sa spracúva poskytovateľ rozšírených počítadiel Performance. Hodnota BaseIndex z kľúča Performance
databázy Registry je prvý údaj DWORD v údajovej časti, hodnota LastCounter value je druhý údaj
DWORD v údajovej časti a hodnota LastHelp je tretí údaj DWORD v údajovej časti.
Error: (06/08/2016 06:20:27 PM) (Source: LoadPerf) (EventID: 3011) (User: )
Description: Nepodarilo sa uvoľniť z pamäte reťazce počítadiel výkonu pre službu ASP.NET_1.1.4322 (ASP.NET_1.1.4322). Kód chyby
je prvý údaj DWORD v údajovej časti.
Error: (06/08/2016 06:20:27 PM) (Source: LoadPerf) (EventID: 3012) (User: )
Description: Hodnota reťazcov výkonu, ktoré sa nachádzajú v kľúči Performance databázy Registry je poškodená, keď
sa spracúva poskytovateľ rozšírených počítadiel Performance. Hodnota BaseIndex z kľúča Performance
databázy Registry je prvý údaj DWORD v údajovej časti, hodnota LastCounter value je druhý údaj
DWORD v údajovej časti a hodnota LastHelp je tretí údaj DWORD v údajovej časti.
Error: (06/08/2016 06:20:13 PM) (Source: System.EnterpriseServices) (EventID: 0) (User: )
Description: System.EnterpriseServices failed to install. Please fix the problem (see exception below) and run 'regasm System.EnterpriseServices.dll' again to install System.EnterpriseServices.
Exception:
'System.Runtime.InteropServices.COMException (0x8004E00F): Model COM+ nemohol nadviazať spojenie s koordinátorom Microsoft Distributed Transaction Coordinator.
at System.EnterpriseServices.Admin.ICatalog2.CurrentPartition(String bstrPartitionIDOrName)
at System.EnterpriseServices.RegistrationHelperTx.InstallUtilityApplication(Type t)'
System errors:
=============
Error: (06/08/2016 06:25:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba COM+ System Application sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 1000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.
Error: (06/08/2016 06:25:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Machine Debug Manager sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát.
Error: (06/08/2016 06:23:48 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba COM+ System Application sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 1000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.
Error: (06/08/2016 06:20:13 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Distributed Transaction Coordinator bola ukončená s chybou služby 3221229584 (0xC0001010).
Error: (06/08/2016 06:19:32 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému zlyhali pri načítaní:
ntiowp
Error: (06/08/2016 06:14:01 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Distributed Transaction Coordinator bola ukončená s chybou služby 3221229584 (0xC0001010).
Error: (06/08/2016 06:12:27 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému zlyhali pri načítaní:
ntiowp
Error: (06/08/2016 05:54:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba MBAMService sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát.
Error: (06/08/2016 05:24:01 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému zlyhali pri načítaní:
ntiowp
Error: (06/08/2016 05:19:41 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému zlyhali pri načítaní:
ntiowp
==================== Memory info ===========================
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4000+
Percentage of memory in use: 77%
Total physical RAM: 959.48 MB
Available physical RAM: 215.41 MB
Total Virtual: 2313.4 MB
Available Virtual: 1057.18 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:39.06 GB) (Free:16.82 GB) NTFS ==>[drive with boot components (Windows XP)]
Drive d: () (Fixed) (Total:109.98 GB) (Free:68.31 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 149.1 GB) (Disk ID: 07260725)
Partition 1: (Active) - (Size=39.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=110 GB) - (Type=OF Extended)
==================== End of Addition.txt ============================
EDIT: MBAM našiel 2 malvéry (screenshot v prílohe)
Jak dopadl nový MBAM?
Spusť opět OTM -> CleanUp! - odinstaluje a vyčistí po sobě.
