počítač sa odmieta rozbehnúť

[korzar]

Zdravím,
chcel by som poprosiť o pomoc, pretože v súčasnosti nemôžem formátovať počítač. Aj keď mi možno nakoniec nič iné nezostane.
Pred časom sa mi začal počítač hrozne spomaľovať, k tomu ho začali brzdiť aj rôzne skripty z firefoxu. Následne sa mi niekde stratil Správca procesov a klavesova skratka ctrl alt del mi bola nanic. Teraz sa k tomu pridala aj nemoznost rozbehnut pocitac. Musim ho najmenej 20 x restartnut, nez sa mi zobrazi uvitacia obrazovka. Dovtedy mi nabehne do roznych stadii štartovacieho procesu a skončí s tmavou obrazovkou a blikajúcou modrou kontrolkou na monitore. Keď však konečne úspešne dôjde k prihláseniu, monitor už funguje normálne.
Skúsim sem dať log z rsit, ale asi nevojde do jednej spravy. Vopred vdaka za pomoc

[korzar]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2011-08-23 09:01:44
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 6 GB (4%) free of 153 GB
Total RAM: 511 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:02:20, on 23.8.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17099)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Analog Devices\SoundMAX\smax4.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\365dni\365dniNET.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla FirefoxOld\firefox.exe
C:\Program Files\Mozilla FirefoxOld\plugin-container.exe
C:\Documents and Settings\Administrator\Desktop\DOWNLOADS\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O4 - HKLM\..\Run: [SoundMax] "C:\Program Files\Analog Devices\SoundMAX\smax4.exe" /tray
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [365dni] C:\Program Files\365dni\365dniNET.exe
O4 - HKUS\S-1-5-21-1547161642-1563985344-725345543-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
O9 - Extra button: Web Entry - {B4E30F61-16D9-11D3-85D1-005004229569} - c:\lotus\organize\bandobjs.dll
O9 - Extra button: WebTran - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Acronis OS Selector activator (OS Selector) - Unknown owner - E:\OSS\reinstall_svc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\PROGRA~1\SPYWAR~1\sp_rsser.exe

--
End of file - 6800 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cb0c50ce4068.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IPoint_exe.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\dgs7sz0c.default

prefs.js - "extensions.enabledItems" - "tineye@ideeinc.com:1.1, {20a82645-c095-46ed-80e3-08825760534b}:0.0.0, {73a6fe31-595d-460b-a920-fcc0f8843232}:2.1.2.5, {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.4.76, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.20"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}"=C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448]
"Description"=6.0.12.448
"Path"=C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.1.7]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla FirefoxOld\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

[korzar]

C:\Program Files\Mozilla FirefoxOld\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nppl3260.xpt
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsIQTScriptablePlugin.xpt
nsJSRealPlayerPlugin.xpt
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla FirefoxOld\plugins\
npnul32.dll
nppl3260.dll
nprpjplug.dll

C:\Program Files\Mozilla FirefoxOld\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\dgs7sz0c.default\extensions\
tineye@ideeinc.com
{73a6fe31-595d-460b-a920-fcc0f8843232}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll [2011-03-19 798771]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll [2011-03-19 798771]
{D4027C7F-154A-4066-A1AD-4243D8127440}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMax"=C:\Program Files\Analog Devices\SoundMAX\smax4.exe [2006-05-18 729088]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2219184]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-05-05 1632360]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-05-25 13895272]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"365dni"=C:\Program Files\365dni\365dniNET.exe [2010-05-13 858624]
""= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS\system32\NvCpl.dll [2011-05-25 13895272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-06-23 847872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ASO3DiskOptimizer"=2
"gusvc"=3
"WMPNetworkSvc"=3
"sp_rssrv"=2
"ose"=3
"NetTcpPortSharing"=3
"MDM"=2
"Kingsoft Antivirus WebShield Service"=3
"iPod Service"=3
"idsvc"=3
"IDriverT"=3
"gupdatem"=3
"gupdate"=2
"FLEXnet Licensing Service"=3
"ASTSRV"=2
"astcc"=3
"Adobe LM Service"=3

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0
"NoDrives"=0
"NoDriveTypeAutoRun"=145
"NoBandCustomize"=0
"NoMovingBands"=0
"NoCloseDragDropBands"=0
"NoActiveDesktop"=0
"NoDesktopCleanupWizard"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=0
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[korzar]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Sierra\Empire Earth\Empire Earth.exe"="C:\Sierra\Empire Earth\Empire Earth.exe:*:Enabled:Empire Earth"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"C:\Program Files\NOVOMATIC Gaminator CF1 Final\game.exe"="C:\Program Files\NOVOMATIC Gaminator CF1 Final\game.exe:*:Enabled:game"
"$INSTDIR\FlvDetector.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlvDetector.exe:*:Enabled:FGFlvDetector"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\lotus\organize\org6.exe"="C:\lotus\organize\org6.exe:*:Enabled:Lotus Organizer"
"C:\Program Files\Novomatic\Multi-Gaminator (22in1)\game.exe"="C:\Program Files\Novomatic\Multi-Gaminator (22in1)\game.exe:*:Enabled:game"
"C:\Program Files\Proxy Switcher Standard\ProxySwitcher.exe"="C:\Program Files\Proxy Switcher Standard\ProxySwitcher.exe:*:Enabled:Proxy Switcher"
"C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe"="C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe:*:Enabled:Adobe Photoshop CS4"
"C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWAGENT.EXE"="C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWAGENT.EXE:*:Enabled:MicroWorld Management Agent"
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\FrostWire\FrostWire.exe"="C:\Program Files\FrostWire\FrostWire.exe:*:Enabled:FrostWire"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\SnugTV\SnugTV Station\ConfigWizard.exe"="C:\Program Files\SnugTV\SnugTV Station\ConfigWizard.exe:*:Enabled:ConfigWizard"
"C:\Program Files\SnugTV\SnugTV Station\QuickStart.exe"="C:\Program Files\SnugTV\SnugTV Station\QuickStart.exe:*:Enabled:QuickStart"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWAGENT.EXE"="C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWAGENT.EXE:*:Enabled:MicroWorld Management Agent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"vidc.XVID"=xvidvfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.YV12"=DivX.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"VIDC.ACDV"=
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"wave2"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-08-23 09:01:48 ----D---- C:\Program Files\trend micro
2011-08-13 21:49:08 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2011-08-13 21:30:28 ----D---- C:\Program Files\Common Files\Nokia
2011-08-13 21:29:38 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2011-08-13 21:29:36 ----A---- C:\WINDOWS\system32\drivers\ccdcmbo.sys
2011-08-13 21:29:28 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
2011-08-13 21:29:28 ----A---- C:\WINDOWS\system32\drivers\ccdcmb.sys
2011-08-13 21:29:28 ----A---- C:\WINDOWS\system32\ccdcmbwu.dll
2011-08-13 21:24:54 ----D---- C:\Program Files\Nokia
2011-08-13 21:24:54 ----D---- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache
2011-08-13 17:46:46 ----D---- C:\Program Files\Oxygen Software
2011-08-12 00:45:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-12 00:45:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-12 00:44:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-12 00:40:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-12 00:40:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-08-05 16:41:19 ----AD---- C:\Program Files\Altap Salamander
2011-08-01 13:23:14 ----D---- C:\Documents and Settings\Administrator\Application Data\Nokia
2011-08-01 13:23:12 ----D---- C:\Documents and Settings\Administrator\Application Data\PC Suite
2011-08-01 13:22:52 ----D---- C:\Documents and Settings\All Users\Application Data\PC Suite
2011-08-01 13:11:42 ----D---- C:\Program Files\DIFX
2011-08-01 13:11:41 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-08-01 13:10:50 ----D---- C:\Program Files\PC Connectivity Solution
2011-08-01 13:10:17 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2011-08-01 13:08:39 ----D---- C:\Documents and Settings\All Users\Application Data\Installations
2011-08-01 11:28:20 ----A---- C:\WINDOWS\system32\easyupdatusapiu.dll
2011-08-01 11:26:29 ----A---- C:\WINDOWS\system32\OpenCL.dll
2011-08-01 11:26:28 ----A---- C:\WINDOWS\system32\nvgenco322090.dll
2011-08-01 11:26:28 ----A---- C:\WINDOWS\system32\nvdispco3220150.dll
2011-08-01 11:26:27 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2011-08-01 11:17:56 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2011-08-01 11:17:54 ----HDC---- C:\WINDOWS\$NtUninstallWdf01009$
2011-08-01 11:17:38 ----A---- C:\WINDOWS\system32\wdfcoinstaller01009.dll
2011-08-01 11:17:38 ----A---- C:\WINDOWS\system32\drivers\point32.sys
2011-08-01 11:16:56 ----D---- C:\Program Files\Microsoft IntelliPoint
2011-07-24 17:26:48 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2011-07-24 17:26:48 ----A---- C:\WINDOWS\system32\pndx5032.dll
2011-07-24 17:26:48 ----A---- C:\WINDOWS\system32\pndx5016.dll
2011-07-24 17:26:48 ----A---- C:\WINDOWS\system32\pncrt.dll
2011-07-24 17:26:46 ----D---- C:\Program Files\Real Alternative

======List of files/folders modified in the last 1 month======

2011-08-23 09:01:48 ----RD---- C:\Program Files
2011-08-23 08:08:23 ----D---- C:\WINDOWS\temp
2011-08-23 00:18:29 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-08-22 19:03:43 ----D---- C:\WINDOWS\Prefetch
2011-08-22 16:40:43 ----AD---- C:\WINDOWS
2011-08-22 14:46:50 ----D---- C:\Program Files\Opera
2011-08-22 14:39:30 ----D---- C:\WINDOWS\inf
2011-08-22 14:39:30 ----D---- C:\Program Files\Windows Media Player
2011-08-22 14:39:28 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-22 14:37:32 ----SHD---- C:\WINDOWS\Installer
2011-08-22 14:37:32 ----D---- C:\Config.Msi
2011-08-21 20:30:17 ----D---- C:\WINDOWS\Debug
2011-08-18 06:36:38 ----D---- C:\Program Files\Mozilla FirefoxOld
2011-08-17 22:59:23 ----D---- C:\Documents and Settings\Administrator\Application Data\Skype
2011-08-13 21:49:19 ----DC---- C:\WINDOWS\system32\dllcache
2011-08-13 21:49:14 ----D---- C:\WINDOWS\system32\drivers
2011-08-13 21:48:48 ----D---- C:\WINDOWS\system32
2011-08-13 21:31:57 ----D---- C:\WINDOWS\WinSxS
2011-08-13 21:30:28 ----D---- C:\Program Files\Common Files
2011-08-13 21:29:45 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-08-13 18:32:12 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2011-08-12 12:03:42 ----D---- C:\WINDOWS\Microsoft.NET
2011-08-12 12:03:38 ----RSD---- C:\WINDOWS\assembly
2011-08-12 00:48:46 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-12 00:45:38 ----D---- C:\WINDOWS\$hf_mig$
2011-08-12 00:45:26 ----D---- C:\WINDOWS\system32\en-US
2011-08-12 00:45:26 ----D---- C:\Program Files\Internet Explorer
2011-08-12 00:45:13 ----D---- C:\WINDOWS\ie7updates
2011-08-12 00:41:34 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-12 00:37:39 ----D---- C:\Documents and Settings\Administrator\Application Data\Media Player Classic
2011-08-11 22:37:57 ----D---- C:\Documents and Settings\Administrator\Application Data\vlc
2011-08-01 11:29:21 ----D---- C:\Documents and Settings
2011-08-01 11:29:16 ----D---- C:\Program Files\NVIDIA Corporation
2011-08-01 11:29:10 ----D---- C:\WINDOWS\Help
2011-08-01 11:21:02 ----SD---- C:\WINDOWS\Tasks
2011-08-01 11:17:45 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-08-01 11:17:11 ----RSD---- C:\WINDOWS\Fonts
2011-07-30 15:25:52 ----D---- C:\Program Files\Mozilla Firefox
2011-07-30 15:25:38 ----D---- C:\Temp
2011-07-30 14:59:29 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2011-07-29 08:31:06 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2011-07-24 19:05:10 ----D---- C:\Downloads

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2011-05-30 170080]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-04-05 721904]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2005-12-22 5685]
R1 asuskbnt;Enhanced Display Driver Helper Service; C:\WINDOWS\system32\drivers\atkkbnt.sys [2005-10-18 11008]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2010-12-21 94872]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-12-21 141264]
R2 EIO;EIO; \??\C:\WINDOWS\system32\drivers\EIO.sys []
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2006-06-27 245760]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-04-27 93824]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2010-05-10 15664]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-05-25 12753664]
R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2011-01-07 40800]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2006-04-06 81664]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\WINDOWS\system32\DRIVERS\vcsvad.sys [2008-12-26 17792]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S2 713xTVCard;SAA7134 TV Card; C:\WINDOWS\system32\DRIVERS\SAA713x.sys [2005-03-15 277504]
S3 bdfdll;bdfdll; \??\C:\Program Files\Softwin\BitDefender10\bdfdll.sys []
S3 Cap7134;Philips SAA7134 WDM Capture; C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2004-11-05 334816]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 econceal;MicroWorld Technologies Network Service; C:\WINDOWS\system32\DRIVERS\econceal.sys []
S3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
S3 FlyPCI;FlyPCI; \??\C:\WINDOWS\system32\drivers\FlyPCI.sys []
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 PhTVTune;Philips FM1216 MK3 TV Tuner; C:\WINDOWS\system32\DRIVERS\phtvtune.sys [2004-11-05 19904]
S3 RT73;Belkin Wireless 54G USB Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\rt73.sys [2007-10-02 451968]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-07 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2011-05-25 154728]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-25 2214504]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\PROGRA~1\SPYWAR~1\sp_rsser.exe [2011-01-31 496128]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-10 136176]
S2 OS Selector;Acronis OS Selector activator; E:\OSS\reinstall_svc.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 33584]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-10 136176]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-11-12 545568]
S4 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-10-26 72704]
S4 astcc;AST Service; C:\WINDOWS\SYSTEM32\astsrv.exe [2010-05-14 57344]
S4 ASTSRV;Nalpeiron Licensing Service; C:\WINDOWS\system32\ASTSRV.EXE [2010-05-14 57344]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 Kingsoft Antivirus WebShield Service;Kingsoft Antivirus WebShield Service; C:\Program Files\Maxthon2\Modules\MxKWS\KSWebShield.exe [2009-10-26 202136]
S4 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
S4 MWAgent;MWAgent; C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWASER.EXE [2009-11-05 845320]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE []
S4 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]

-----------------EOF-----------------

[Roli]

Zdravím, tak se na to podíváme.

Nejdříve vyloučíme zda to nedělá nějaký šmejd.

Tohle fixni v HJT :

R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKUS\S-1-5-21-1547161642-1563985344-725345543-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)

HJT najdeš zde :

C:\Program Files\trend micro\Administrator.exe

Fix znamená že spustíš HJT

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Přes Start >> Spustit >> napiš - services.msc >> OK. Najdi službu :

Google Update Service (gupdate)

Google Update Service (gupdatem)

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


Přes Start >> Ovládací panely >> Přidat nebo odebrat odinstaluj Kingsoft Antivirus


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

[korzar]

Ahoj,
- odstranovanie v HJT najprv vyhodilo nejaku chybu, ale potom vsetko uspesne zmazalo
- Google update som zakazal
- CCleaner som spustil, ale nebolo moc co mazat, lebo tym pocitac prechadzam pravidelne
- Kingsoft Antivirus som nenasiel v ziadnej ponuke odinstalacnych programov, ani v "pridat - odobrat programy" ani v Program files
- Najvacsi problem v Combofix - vypol som rezidentnu ochranu NOD32, ale napisalo, aby som vypol aj nejaky eScan antivirus - ale nikde som ho nenasiel, ani v procesoch (chybajuci windowsacky som nahradil Security Proces Explorerom)
Tak som teda dal nech sa CF spusti na vlastne riziko, ale zas mi napisalo, ze chyba regedit.exe. Ked som klikol stiahnut z inej "masiny", tak sa cely proces zrusil

[Roli]

Tak jinak.

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Stáhni a spusť OTMoveIt

do levého okna aplikace pod Paste Instructions for Items to be Moved zkopíruj tento text:

Kód: Vybrat vše

:processes
explorer.exe       

:files 
C:\*.tmp
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\tasks\At*.job /s
C:\Program Files\Maxthon2

:services
Kingsoft Antivirus WebShield Service

:commands
[purity]
[emptytemp]
[start explorer]

klikni na MoveIt! a v pravém zeleném okně aplikace se Ti objeví info o provedene akci, obsah okna zkopíruj sem,

pokud aplikace bude požadovat restart, klikni na YES

v tom případě sem chci zkopírovat obsah logu uloženého na C:\_OTMoveIt\MovedFiles\


Použij, WhoCrashed

po spuštění klikni na Analyze,

aplikace po chvilce vytvoří zprávu o příčině pádu, kterou mi sem nakopíruj.

[korzar]

Move It
All processes killed
Error: Unable to interpret <processes> in the current context!
Error: Unable to interpret <explorer.exe > in the current context!
========== FILES ==========
File/Folder C:\*.tmp not found.
File/Folder C:\WINDOWS\System32\*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
File/Folder C:\WINDOWS\tasks\At*.job not found.
C:\Program Files\Maxthon2\Skin folder moved successfully.
C:\Program Files\Maxthon2\SharedAccount\Downloads folder moved successfully.
C:\Program Files\Maxthon2\SharedAccount\Data\FeedCache folder moved successfully.
C:\Program Files\Maxthon2\SharedAccount\Data folder moved successfully.
C:\Program Files\Maxthon2\SharedAccount\Config folder moved successfully.
C:\Program Files\Maxthon2\SharedAccount folder moved successfully.
C:\Program Files\Maxthon2\Plugin folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\popo\lib\jquery folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\popo\lib folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\popo\js\main folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\popo\js folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\popo\image\main folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\popo\image\green folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\popo\image folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\popo\css folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\popo folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\style\main folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\style folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\lib\tooltip folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\lib\jquery folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\lib folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\js\set folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\js\search folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\js\replace folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\js\newtip folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\js\main folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\js\iepopo folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\js folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\images\set\base folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\images\set folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\images\search folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\images\replace folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\images\newtip folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\images\main\set folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\images\main folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\images\iepopo folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield\images folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui\kwebshield folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\webui folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\KWSUpd\webui\kwebshield\js\set folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\KWSUpd\webui\kwebshield\js folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\KWSUpd\webui\kwebshield folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\KWSUpd\webui folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\KWSUpd folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\KWSReUpd\webui\kwebshield\js\set folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\KWSReUpd\webui\kwebshield\js folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\KWSReUpd\webui\kwebshield folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\KWSReUpd\webui folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS\KWSReUpd folder moved successfully.
C:\Program Files\Maxthon2\Modules\MxKWS folder moved successfully.
C:\Program Files\Maxthon2\Modules folder moved successfully.
C:\Program Files\Maxthon2\Favicons folder moved successfully.
C:\Program Files\Maxthon2\Config folder moved successfully.
C:\Program Files\Maxthon2 folder moved successfully.
========== SERVICES/DRIVERS ==========
Service Kingsoft Antivirus WebShield Service stopped successfully!
Service Kingsoft Antivirus WebShield Service deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 114822 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 57172366 bytes
->Google Chrome cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 8943 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33321 bytes

User: My Documents

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Raoider

User: remoteservice

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 174859233 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 222,00 mb


OTM by OldTimer - Version 3.1.18.0 log created on 08232011_152930

Files moved on Reboot...

Registry entries deleted on Reboot...

[korzar]

who crashed
System Information (local)
--------------------------------------------------------------------------------

computer name: PETER-779CFABC5
windows version: Windows XP Service Pack 3, 5.1, build: 2600
windows dir: C:\WINDOWS
CPU: GenuineIntel Intel(R) Pentium(R) 4 CPU 3.00GHz Intel586, level: 15
2 logical processors, active mask: 3
RAM: 535998464 total
VM: 2147352576, free: 2049052672



--------------------------------------------------------------------------------
Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.


No valid crash dumps have been found on your computer

[Roli]

Znovu spusť OTMoveIt a nahoře v aplikaci klini na CleanUP!

tímto po sobě uklidí.


Na ty pády OS zkusíme něco jiného.

Stáhni a nainstaluj Debugging Tools For Windows .

Přes Start >> Všechny programy vyhledej program s jménem WinDbg ve složce Debugging Tools for Windows a spusť.

Pokud používáš Windows Vista a máš zapnutý UAC, spusť WinDbg jako administrátor (budeš přistupovat do adresáře Windows)

První co budeš muset nastavit je cesta k symbolům. Klikni na File -> Symbol File Path a zde nastav http://msdl.microsoft.com/download/symbols

Nyní můžeš začít analyzovat BSOB.

Klikni na File -> Open Crash Dump a najdi složku C:\Windows\Minidump.

Ve složce Minidumps se nacházejí soubory Minixxxxxx-xx.dmp (xxxxxx-xx je datum a pořadové číslo).

Pokud je složka prázdná neměl jsi ještě žádnou BSOD nebo jsi jí vymazal.

Jakmile soubor otevřeš začnou se načítat symboly a po chvilce můžeš zadávat přikazy do přikazového řádku, kde stačí napsat !analyze -v

nebo kliknout myší na příkaz.

Nejdůležitější parametry, které tě mohou zajímat jsou :

PROCESS_NAME (jméno procesu, který způsobil chybu),

IMAGE_NAME

MODULE_NAME

(tyto tři hodnoty mi sem nakopíruj nebo je stačí zadat do Googlu a řešení je jako na dlani)

Vypadá to asi TAKHLE


Plus ještě nech projet kontrolu disku, přes Start >> Spustit >> napiš - cmd >> OK

do otevřeného okna s blikajícím kurzorem nakopíruj chkdsk c: /f/r/x

stiskni ENTER

Pak dej vědět jak to dopadlo.

[korzar]

Zložka Minidump bola prázdna
chkdsk bežal aspon hodinu.
Vysledok - zda sa, ze start by mal uz fungovat, ale pocitac je neskutocne pomaly a skripty vo firefoxe ho spomaluju este viac
no a spravcu procesov stale neviem vyvolat pomocou ctrl alt del, ani nijako inak

[Roli]

No ono 512MB RAM není žádná sláva, ale pokud to doteď nějak šlapalo tak bude problém jinde.

Buď je nakopnutý systém nebo odchází nějaký hardware (HDD, RAM, ....)

Nejdříve stáhni HD Tune a otestuj HDD.

Benchmark - Test disku Klikni na tlačítko Start a vyčkej dokud se nezaplní celý graf. Poté se dozvíš přenosovou rychlost a přístupový čas pevného disku.

Info Přesná kapacita, souborový systém, podporované funkce, verze firmware, sériové číslo a typ zapojení disků.

Health - Kondice Seznam důležitých parametrů a jejich hodnoty. Ideální je mít všude OK.

Když je nějaká položka žlutá pravděpodobně brzy změní status na failed. Když je červená má status failed, to by znamenalo výměnu disku.

Error Scan - Hledání chyb Klikni na tlačítko Start a program prozkoumá disk zda na něm nejsou vadné bloky.

Pokud na konci testu jsou všechny zelené, je vše v pořádku. Když je byť jeden z nich červený, doporučuji zazálohovat data a počítat s výměnou disku.

Teplota Teploměr nahoře a číslo vedle něj znázorňují teplotu disku. Normální hodnota je pod 50°C. Teplota ale nesmí přesáhnout 60°C, program upozorní když dosáhne hranice 55°C.


Pak mi písni výsledky nebo udělej Print screen a dej to sem nebo někam nahoď.

[korzar]

Ahoj,
prepac, bol som na dovolenke. a pocitac ma privital s novymi problemami
- neda sa spustit regedit
- neda sa spustit spravca uloh (nahradil som ho sice DTaskManagerom, ale tym som neodstranil dovod, preco povodny spravca uloh nefunguje
- ked spustim firefox, restartne mi pocitac a windows napise, ze system obnovil po zavaznej chybe
pocas rozbiehania pocitaca mi tam stale svchost.exe, ktory zabera asi 150 K z operacnej pamati spomaluje pocitac este viac
- nejde mi spustit ovladaci panel javy

cele som to presiel mwavom, adawarom, antispywarom, precistil registre, preinstaloval fitrefox, javu.... a nic. Stale to iste.
Urcite tam musi byt nejaky virus

[korzar]

no a dalsia novinka - teraz uz sa restartuje pri spusteni hociktoreho prehliadaca, takze musim sa pripajat cez safe mode
- inak skusal som dat opravu windowsu, ale ked som tam dal CD, napisalo mi, ze mam inu verziu windows - service pack 3. Lenze ja mam stale ten isty...
- Najradsej by som to sformatoval, ale mam milion veci v pocitaci, ktore nemam kde inde ulozit

[Roli]

No pokud chceš opravit systém z CD, musí být minimálně stejná verze kterou máš nainstalovanou.

Je totiž možné že na CD je pouze Service Pack 2 a ty už máš Service Pack 3.

Jedině by sis musel půjčit CD kde už Service Pack 3 je.


Pokud to správně chápu, tak v Nouzovém režimu PC jede normálně.

To by znamenalo poškozený systém, hardware nebo jak píšeš nějaký ukrytý šmejd.

Zkusíme se tedy ještě jednou podívat na ty šmejdy.

Použij tedy AVP Tool z mého podpisu a dej mi sem z něj log, je možné že bude hooodně velký tak ho nahraj třeba na

Leteckou poštu a sem mi dej odkaz na stažení nebo jen písni co (ne)našel.

Pokud bude blbnout nebo nepůjde spustit v Normálním režimu zkus to v Nouzovém.