Zaseknutí pc pár vteřin po startu

[Vencafootball]

Mám velký problém, po stažení souboru a jeho rozbalení mě Avast začal hlásit nějaké viry, když jsem chtěl příští den pustit pc tak jsem se dostal k obrazovce s přihlášením, přihlásil jsem se, ale sotva stihlo naběhnou prvních pár programů, cca 10 sec., tak se pc zaseklo, ale to tak, že na ploše se mžu pohybovat ale jakmile chci něco spustit nebo chci otevřít start tak se zobrazí ikona přasípacích hodin a nic se neděje, ani správce úloh nelze zanout, prostě nic...

[Caroprd111]

Zdravím

Jak se chová PC v nouzovém režimu, potřeboval bych log z RSIT.

[Vencafootball]

Jo taky zdravím Hned vyzkouším

[Caroprd111]

OK

[Vencafootball]

Tak, v nouzáku funguje (zatím), pošlu RSIT

[Caroprd111]

[Vencafootball]

Logfile of random's system information tool 1.06 (written by random/random)

Run by Vašek at 2010-03-28 21:01:40

Systém Microsoft Windows XP Professional Service Pack 3

System drive C: has 505 MB (1%) free of 61 GB

Total RAM: 2047 MB (85% free)



Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:01:48, on 28.3.2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16981)

Boot mode: Safe mode



Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Documents and Settings\Vašek\Plocha\RSIT.exe

C:\Program Files\trend micro\Vašek.exe



R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=14597&l=dis

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://localhost:9000/application.pac

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy

O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: PCCBHO.CPCCBHO - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Programy\BitComet\tools\BitCometBHO_1.3.1.15.dll

O2 - BHO: PPVADownloader - {A986E409-30CC-4185-89BB-AB212C104524} - C:\Program Files\PPLive\PPVA\DownloaderManager.dll

O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"

O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe

O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"

O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: syspck32.exe

O4 - Global Startup: BumpTop.lnk = C:\Program Files\BumpTop\BumpTop.exe

O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://D:\Programy\BitComet\BitComet.exe/AddLink.htm

O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://D:\Programy\BitComet\BitComet.exe/AddVideo.htm

O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://D:\Programy\BitComet\BitComet.exe/AddAllLink.htm

O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe

O9 - Extra 'Tools' menuitem: PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe

O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: PPLive - {95B3F550-91C4-4627-BCC4-521288C52977} - D:\Programy\PPTV\PPLive.exe

O9 - Extra 'Tools' menuitem: PPLive - {95B3F550-91C4-4627-BCC4-521288C52977} - D:\Programy\PPTV\PPLive.exe

O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://D:\Programy\BitComet\tools\BitCometBHO_1.3.1.15.dll/206 (file missing)

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\Programy\ICQ\ICQ6.5\ICQ.exe

O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\Programy\ICQ\ICQ6.5\ICQ.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftup ... 4174461437

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 4174439171

O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: MemeoBackgroundService - Unknown owner - C:\Program Files\Memeo\AutoSync\MemeoBackgroundService.exe (file missing)

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PunkBuster (PnkBstrA) - Unknown owner - D:\Hry\Instal\Need for Speed\PB\PnkBstrA.exe

O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

O23 - Service: Zwangi Service - Unknown owner - C:\Documents and Settings\All Users\Data aplikací\Zwangi\zwangi115.exe (file missing)



--

End of file - 8810 bytes



======Scheduled tasks folder======



C:\WINDOWS\tasks\PCConfidential.job

C:\WINDOWS\tasks\RegPowerClean.job

C:\WINDOWS\tasks\RPCReminder.job

C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job



======Registry dump======



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]

Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-05-30 1410344]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF}]

PCCBHO.CPCCBHO - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll [2008-04-01 73728]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]

BitComet Helper - D:\Programy\BitComet\tools\BitCometBHO_1.3.1.15.dll [2009-01-16 656696]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A986E409-30CC-4185-89BB-AB212C104524}]

Download_Bho Class - C:\Program Files\PPLive\PPVA\DownloaderManager.dll [2009-12-15 513384]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

Ask.com Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2009-04-02 809864]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-02-19 41760]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-02-19 79648]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask.com Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2009-04-02 809864]



[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]

"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-10-05 868352]

"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]

"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-12-03 13680640]

"nwiz"=nwiz.exe /install []

"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-12-03 86016]

"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2003-12-22 241664]

"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe [2004-03-04 172032]

"HP Software Update"=C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [2004-02-18 49152]

"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-01-21 92168]

"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]



[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-05-16 153136]

"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]

D:\Programy\Alcohol 120\axcmd.exe [2008-11-23 203720]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Memeo AutoBackup]

C:\Program Files\Memeo\AutoBackup\MemeoLauncher2.exe [2008-11-07 144608]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Memeo AutoSync]

C:\Program Files\Memeo\AutoSync\MemeoLauncher2.exe [2008-11-06 144608]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OxigenClientAdmin]

C:\Program Files\Oxigen\bin\Oxigen.exe [2007-06-23 887264]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OxigenTrayIcon]

C:\Program Files\Oxigen\bin\OxiTray.exe [2007-06-23 557536]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]

D:\Hry\Instal\GTA 4\Rockstar Games Social Club\RGSCLauncher.exe /silent []



C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění

BumpTop.lnk - C:\Program Files\BumpTop\BumpTop.exe



C:\Documents and Settings\Vašek\Nabídka Start\Programy\Po spuštění

syspck32.exe



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]



[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1



[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=323

"NoDesktopCleanupWizard"=1

"NoDriveAutoRun"=67108863

"NoDrives"=0



[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"HonorAutoRunSetting"=

"NoDriveAutoRun"=

"NoDriveTypeAutoRun"=

"NoDrives"=

"NoResolveSearch"=



[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"D:\Programy\BitComet\BitComet.exe"="D:\Programy\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"

"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"

"D:\Programy\Hamachi\hamachi.exe"="D:\Programy\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"

"D:\Hry\Instal\GTA 4\Rockstar Games Social Club\RGSCLauncher.exe"="D:\Hry\Instal\GTA 4\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"

"D:\Programy\ICQ\ICQ6.5\ICQ.exe"="D:\Programy\ICQ\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"

"D:\Programy\Poser 7\Poser.exe"="D:\Programy\Poser 7\Poser.exe:*:Enabled:Poser executable file"

"D:\Hry\Instal\Guitar Hero 3\GH3.exe"="D:\Hry\Instal\Guitar Hero 3\GH3.exe:*:Enabled:Guitar Hero III"

"D:\Hry\Instal\Call of Duty 4\iw3mp.exe"="D:\Hry\Instal\Call of Duty 4\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM)"

"D:\Hry\Instal\Mass Effect\Binaries\MassEffect.exe"="D:\Hry\Instal\Mass Effect\Binaries\MassEffect.exe:*:Enabled:Mass Effect Game"

"D:\Hry\Instal\Mass Effect\MassEffectLauncher.exe"="D:\Hry\Instal\Mass Effect\MassEffectLauncher.exe:*:Enabled:Mass Effect Launcher"

"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"

"D:\Hry\Instal\ANNO 1404\Anno4.exe"="D:\Hry\Instal\ANNO 1404\Anno4.exe:*:Enabled:ANNO 1404"

"D:\Hry\Instal\ANNO 1404\tools\Anno4Web.exe"="D:\Hry\Instal\ANNO 1404\tools\Anno4Web.exe:*:Enabled:ANNO 1404 Web"

"C:\Documents and Settings\Vašek\temp\TeamViewer\Version4\TeamViewer.exe"="C:\Documents and Settings\Vašek\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"

"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

"D:\Hry\Instal\Metin 2\metin2.bin"="D:\Hry\Instal\Metin 2\metin2.bin:*:Enabled:metin2"

"D:\Hry\Instal\Metin 2\metin2client.bin"="D:\Hry\Instal\Metin 2\metin2client.bin:*:Enabled:metin2client"

"D:\Hry\Instal\Pro Evolution Soccer 2010\pes2010.exe"="D:\Hry\Instal\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010"

"D:\Hry\Instal\Counter-Strike Source\hl2.exe"="D:\Hry\Instal\Counter-Strike Source\hl2.exe:*:Enabled:hl2"

"D:\Programy\Pinacle studio\Programs\RM.exe"="D:\Programy\Pinacle studio\Programs\RM.exe:*:Enabled:Render Manager"

"D:\Programy\Pinacle studio\Programs\VideoSpin.exe"="D:\Programy\Pinacle studio\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"

"D:\Programy\Steam\steamapps\common\left 4 dead 2 demo\left4dead2.exe"="D:\Programy\Steam\steamapps\common\left 4 dead 2 demo\left4dead2.exe:*:Enabled:left4dead2"

"D:\Programy\QIP Infium\infium.exe"="D:\Programy\QIP Infium\infium.exe:*:Enabled:QIP Infium"

"C:\Program Files\Empire of Sports\NetworkDiagnostic.exe"="C:\Program Files\Empire of Sports\NetworkDiagnostic.exe:*:Enabled:Empire of Sports Network Diagnostic"

"C:\Program Files\Empire of Sports\EmpireOfSports.exe"="C:\Program Files\Empire of Sports\EmpireOfSports.exe:*:Enabled:Empire of Sports"

"C:\Documents and Settings\Vašek\Local Settings\Data aplikací\F4\ClientUpdater\ClientUpdater.exe"="C:\Documents and Settings\Vašek\Local Settings\Data aplikací\F4\ClientUpdater\ClientUpdater.exe:*:Enabled:F4 Game Client Updater"

"D:\Hry\Instal\Splinter Cell Double Agent\SCDA-Offline\System\SplinterCell4.exe"="D:\Hry\Instal\Splinter Cell Double Agent\SCDA-Offline\System\SplinterCell4.exe:*:Enabled:SplinterCell4"

"D:\Hry\Instal\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe"="D:\Hry\Instal\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"

"D:\Hry\Instal\GTA4\Grand Theft Auto IV\GTAIV.exe"="D:\Hry\Instal\GTA4\Grand Theft Auto IV\GTAIV.exe:*:Enabled:Grand Theft Auto IV"

"D:\Hry\Rainbow Six Lockdown\LockdownDed.exe"="D:\Hry\Rainbow Six Lockdown\LockdownDed.exe:*:Enabled:Rainbow Six: Lockdown PC Dedicated Server"

"F:\PC\Hry\Red Faction Guerrilla\rfg.exe"="F:\PC\Hry\Red Faction Guerrilla\rfg.exe:*:Enabled:Red Faction: Guerrilla"

"D:\Hry\Instal\Red Faction Guerrilla\rfg.exe"="D:\Hry\Instal\Red Faction Guerrilla\rfg.exe:*:Enabled:Red Faction: Guerrilla"

"D:\Hry\Instal\RESIDENT EVIL 5\RE5DX9.EXE"="D:\Hry\Instal\RESIDENT EVIL 5\RE5DX9.EXE:*:Enabled:RESIDENT EVIL 5"

"D:\Hry\Instal\Vancouver 2010\Vancouver.exe"="D:\Hry\Instal\Vancouver 2010\Vancouver.exe:*:Enabled:Vancouver 2010™"

"D:\Programy\TVAnts\Tvants.exe"="D:\Programy\TVAnts\Tvants.exe:*:Enabled:TVAnts"

"D:\Programy\PPTV\PPLive.exe"="D:\Programy\PPTV\PPLive.exe:*:Enabled:PPLive"

"C:\Program Files\Common Files\PPLiveNetwork\PPAP.exe"="C:\Program Files\Common Files\PPLiveNetwork\PPAP.exe:*:Enabled:PPLive"

"D:\Programy\PPTV\PPLiveU.exe"="D:\Programy\PPTV\PPLiveU.exe:*:Enabled:PPLiveU"

"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"

"C:\Program Files\PPLive\PPVA\PPLiveVA.exe"="C:\Program Files\PPLive\PPVA\PPLiveVA.exe:*:Enabled:PPLiveVA"

"C:\Program Files\PPLive\PPVA\PPLiveVA_U.exe"="C:\Program Files\PPLive\PPVA\PPLiveVA_U.exe:*:Enabled:PPLiveVA"

"C:\Program Files\PPLive\PPVA\FlvPick.exe"="C:\Program Files\PPLive\PPVA\FlvPick.exe:*:Enabled:FlvPick"

"C:\Program Files\PPLive\PPVA\crashreporter.exe"="C:\Program Files\PPLive\PPVA\crashreporter.exe:*:Enabled:CrashUpload"

"C:\Program Files\PPLive\PPVA\PPVADownload.exe"="C:\Program Files\PPLive\PPVA\PPVADownload.exe:*:Enabled:Download"

"C:\Program Files\PPLive\PPVA\DownloadProgress.exe"="C:\Program Files\PPLive\PPVA\DownloadProgress.exe:*:Enabled:DownloadProgress"

"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"

"D:\Hry\Instal\Far Cry 2\bin\FarCry2.exe"="D:\Hry\Instal\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2"

"D:\Hry\Instal\Far Cry 2\bin\FC2Launcher.exe"="D:\Hry\Instal\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"

"D:\Hry\Instal\Far Cry 2\bin\FC2Editor.exe"="D:\Hry\Instal\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editor"

"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"

"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"

"D:\Programy\QIP\qip.exe"="D:\Programy\QIP\qip.exe:*:Disabled:Quiet Internet Pager"

"D:\Programy\Pinacle studio\Programs\umi.exe"="D:\Programy\Pinacle studio\Programs\umi.exe:*:Disabled:umi"

"D:\Hry\Instal\Modern Warfare 2\iw4mp.exe"="D:\Hry\Instal\Modern Warfare 2\iw4mp.exe:*:Enabled:iw4mp"

"D:\Hry\Instal\TrackMania Sunrise\TmSunrise.exe"="D:\Hry\Instal\TrackMania Sunrise\TmSunrise.exe:*:Enabled:TmSunrise"

"D:\Hry\Instal\DiRT 2\dirt2_game.exe"="D:\Hry\Instal\DiRT 2\dirt2_game.exe:*:Enabled:DiRT2"

"D:\Hry\Instal\Tom Clancy´s HAWX\HAWX.exe"="D:\Hry\Instal\Tom Clancy´s HAWX\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"

"D:\Hry\Instal\Tom Clancy´s HAWX\HAWX_dx10.exe"="D:\Hry\Instal\Tom Clancy´s HAWX\HAWX_dx10.exe:*:Enabled:Tom Clancy's H.A.W.X"

"D:\Hry\Instal\Assassins Creed\AssassinsCreed_Dx9.exe"="D:\Hry\Instal\Assassins Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"

"D:\Hry\Instal\Assassins Creed\AssassinsCreed_Dx10.exe"="D:\Hry\Instal\Assassins Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"

"D:\Hry\Instal\Assassins Creed\AssassinsCreed_Launcher.exe"="D:\Hry\Instal\Assassins Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"

"C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"

"C:\Program Files\SopCast\adv\SopAdver.exe"="C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"

"D:\Hry\Instal\Battlefield Bad Company 2\BFBC2Updater.exe"="D:\Hry\Instal\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"



[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"



======List of files/folders created in the last 1 months======



2010-03-28 20:49:44 ----A---- C:\WINDOWS\ntbtlog.txt

2010-03-28 10:51:15 ----D---- C:\Documents and Settings\Vašek\Data aplikací\Tropico 3

2010-03-27 16:54:13 ----D---- C:\Program Files\SopCast

2010-03-27 11:18:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ubisoft

2010-03-26 22:13:20 ----A---- C:\WINDOWS\system32\fjhdyfhsn.bat

2010-03-26 17:37:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun

2010-03-26 17:37:20 ----A---- C:\WINDOWS\system32\javaws.exe

2010-03-26 17:37:20 ----A---- C:\WINDOWS\system32\javaw.exe

2010-03-26 17:37:20 ----A---- C:\WINDOWS\system32\java.exe

2010-03-23 18:35:23 ----D---- C:\Program Files\Ask.com

2010-03-23 18:35:05 ----D---- C:\Documents and Settings\Vašek\Data aplikací\Desktopicon

2010-03-23 18:28:42 ----D---- C:\3gptemp

2010-03-23 18:16:25 ----D---- C:\Program Files\MIKSOFT

2010-03-21 22:53:52 ----D---- C:\Documents and Settings\Vašek\Data aplikací\Ashampoo

2010-03-21 22:53:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\ashampoo

2010-03-16 18:06:35 ----D---- C:\Program Files\Logitech

2010-03-16 18:06:35 ----D---- C:\Program Files\Common Files\Logitech

2010-03-11 08:24:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$

2010-03-09 08:10:15 ----N---- C:\WINDOWS\system32\browserchoice.exe

2010-03-08 22:36:33 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$

2010-03-08 15:45:46 ----A---- C:\WINDOWS\system32\mkl_vml_p4.dll

2010-03-08 15:45:46 ----A---- C:\WINDOWS\system32\mkl_vml_p3.dll

2010-03-08 15:45:46 ----A---- C:\WINDOWS\system32\mkl_vml_def.dll

2010-03-08 15:45:45 ----A---- C:\WINDOWS\system32\mkl_p4.dll

2010-03-08 15:45:45 ----A---- C:\WINDOWS\system32\mkl_p3.dll

2010-03-08 15:45:45 ----A---- C:\WINDOWS\system32\mkl_lapack64.dll

2010-03-08 15:45:44 ----A---- C:\WINDOWS\system32\mkl_lapack32.dll

2010-03-08 15:45:44 ----A---- C:\WINDOWS\system32\mkl_def.dll

2010-03-08 15:45:44 ----A---- C:\WINDOWS\system32\libguide40.dll

2010-03-08 15:44:20 ----RA---- C:\WINDOWS\system32\tmp12F.tmp

2010-03-08 15:44:20 ----RA---- C:\WINDOWS\system32\tmp12E.tmp



======List of files/folders modified in the last 1 months======



2010-03-28 21:01:42 ----D---- C:\Program Files\trend micro

2010-03-28 20:55:58 ----D---- C:\WINDOWS\system32

2010-03-28 20:54:11 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2010-03-28 20:52:38 ----D---- C:\Program Files\Mozilla Firefox

2010-03-28 20:49:44 ----D---- C:\WINDOWS

2010-03-28 20:34:14 ----D---- C:\WINDOWS\Temp

2010-03-28 13:47:38 ----RD---- C:\Program Files

2010-03-28 13:47:38 ----D---- C:\Program Files\Windows Media Player

2010-03-28 13:28:46 ----D---- C:\WINDOWS\Prefetch

2010-03-28 12:00:54 ----A---- C:\WINDOWS\SchedLgU.Txt

2010-03-28 12:00:49 ----D---- C:\WINDOWS\system32\CatRoot2

2010-03-28 11:06:25 ----D---- C:\Downloads

2010-03-28 11:04:08 ----A---- C:\WINDOWS\WINCMD.INI

2010-03-28 10:34:10 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP

2010-03-28 08:57:33 ----HD---- C:\WINDOWS\inf

2010-03-28 08:57:08 ----RSD---- C:\WINDOWS\assembly

2010-03-28 08:56:40 ----D---- C:\WINDOWS\system32\DirectX

2010-03-27 22:59:24 ----SHD---- C:\WINDOWS\Installer

2010-03-27 17:02:55 ----A---- C:\WINDOWS\NeroDigital.ini

2010-03-27 11:21:38 ----D---- C:\Documents and Settings\Vašek\Data aplikací\Ubisoft

2010-03-27 11:02:56 ----HD---- C:\Program Files\InstallShield Installation Information

2010-03-26 22:16:37 ----D---- C:\WINDOWS\system32\drivers

2010-03-26 22:16:10 ----RSHDC---- C:\WINDOWS\system32\dllcache

2010-03-26 17:38:27 ----D---- C:\Program Files\SystemRequirementsLab

2010-03-26 17:37:46 ----D---- C:\Program Files\Common Files\Java

2010-03-26 17:37:19 ----D---- C:\Program Files\Java

2010-03-26 14:13:11 ----A---- C:\WINDOWS\wincheater.ini

2010-03-23 20:17:49 ----D---- C:\Documents and Settings\Vašek\Data aplikací\Audacity

2010-03-23 20:04:46 ----D---- C:\Documents and Settings\Vašek\Data aplikací\Adobe

2010-03-23 20:04:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe

2010-03-23 20:03:53 ----D---- C:\Program Files\Common Files\Adobe

2010-03-23 20:03:51 ----D---- C:\Program Files\Common Files

2010-03-23 18:35:29 ----SD---- C:\WINDOWS\Tasks

2010-03-16 18:07:17 ----D---- C:\WINDOWS\system32\ReinstallBackups

2010-03-16 17:02:40 ----D---- C:\WINDOWS\system32\CatRoot

2010-03-15 21:17:02 ----D---- C:\Program Files\Google

2010-03-11 08:25:20 ----A---- C:\WINDOWS\win.ini

2010-03-11 08:24:14 ----D---- C:\Program Files\Movie Maker

2010-03-11 08:23:53 ----HD---- C:\WINDOWS\$hf_mig$

2010-03-08 22:36:39 ----A---- C:\WINDOWS\imsins.BAK

2010-03-08 15:45:48 ----D---- C:\Program Files\BRS

2010-03-08 15:44:21 ----A---- C:\WINDOWS\system32\wrap_oal.dll

2010-03-08 15:44:20 ----A---- C:\WINDOWS\system32\OpenAL32.dll

2010-03-08 14:39:11 ----D---- C:\Documents and Settings\Vašek\Data aplikací\BSplayer

2010-03-02 07:30:12 ----A---- C:\WINDOWS\system32\MRT.exe



======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======



R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]

R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]

R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]

R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]

R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]

R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]

R3 USBSTOR;Ovladač velkokapacitního paměového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]

R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2009-01-13 19336]

R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2009-01-13 49160]

S1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]

S1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]

S1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]

S1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]

S1 mferkdk;VSCore mferkdk; \??\C:\Program Files\McAfee\VirusScan Enterprise\mferkdk.sys []

S1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-08-09 53920]

S2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]

S2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]

S2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-08-03 281760]

S2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-08-03 25888]

S3 ADIDTSFiltService;ADI DTS Filter Service; C:\WINDOWS\system32\drivers\adidts.sys [2006-09-01 139776]

S3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2006-09-08 247296]

S3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-29 94080]

S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]

S3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]

S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]

S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-12-03 6209536]

S3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter; C:\WINDOWS\system32\DRIVERS\RTL8187.sys [2008-07-09 175872]

S3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2006-05-23 245248]

S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []



======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======



S2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]

S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]

S2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]

S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-12-17 153376]

S2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]

S2 MemeoBackgroundService;MemeoBackgroundService; C:\Program Files\Memeo\AutoSync\MemeoBackgroundService.exe []

S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-12-03 163908]

S2 PnkBstrA;PunkBuster; D:\Hry\Instal\Need for Speed\PB\PnkBstrA.exe [2008-10-23 63040]

S2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-02-11 107832]

S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

S2 Zwangi Service;Zwangi Service; C:\Documents and Settings\All Users\Data aplikací\Zwangi\zwangi115.exe C:\Program Files\Zwangi\zwangi.dll Service []

S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]

S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-03-06 654848]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]

S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]



-----------------EOF-----------------

[Caroprd111]

Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe

• Spusťte program, poté klikněte na Run Scan
• Po dokončení, sem vložte logy OTL.Txt a Extras.txt

Poté začneme s mazáním havěti.

[Vencafootball]

Při spuštění mě napíše - program se nevejde do paměti -1250

[Caroprd111]

Kroky proveďte přesně v pořadí jak jsou napsané.


Otevřete si Poznámkový blok a zkopírujte do něj text (z bílého políčka):

Kód: Vybrat vše

REGEDIT4

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

Nyní uložte jako (typ: všechny soubory) kde za název souboru zadáte "smazani.reg" bez uvozovek, klik na uložit, pak na soubor standardně 2X kliknete a potvrďte dialogové okno.



Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary
• Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrazí stránka s licenčními podmínkami, pokračujte stisknutím tlačítka "Ano"
• Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna
• Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.
• Během skenování může být počítač restartován.

[Vencafootball]

Jak mám v nouzáku vypnout rezidentní štít avastu ?

[Caroprd111]

Pokud v liště nemáte ikonu Avastu, tak ho asi nemáte spuštění. Případně hlášku ComboFixu ignorujte.

[Vencafootball]

To už snad není možný Spustím ombofix a: Some installation files are corrupt. Please download a fresh copy and retry the installation

[Caroprd111]

V nouzovém režimu s prací v síti stáhněte nový ComboFix, ale uložte ho jako cokoliv.com Poté pokračujte podle návodu.

[Vencafootball]

Du na to...