Preventivka :) - Vyosek poprosim :)

[vyosek]

No k teto variante - vymazani - bych se primouval...Sam vidite ze ho nejeden AV detekoval...

[JrMn]

Hotovo.

[vyosek]

Jsou s PC nejake problemy

[JrMn]

BSOD, a uz asi pol roka mi nejdu nainstalovat 2 updaty od Silverlightu. (win7 je v test mode)

[vyosek]

Neni nahodou mozne mit win jen na 30 dni na testovani

Silverlight - kontaktovat support Microsoftu

BSOD - zabalit obsah slozky c:\windows\minidump do raru a hodit sem http://vyosek.ic.cz/havet/uploader.php

[JrMn]

Mam full, legalny, zakupeny s NTB.

Upload dokonceny, a pri zlozke Minidump je taky maly zamok, znamena to nieco?

[vyosek]

To netusim, poprosim kolegu at na ty dmp mrkne...

[MiliNess]

Dobrý večer, tak váš problém s BSOD způsobuje ovladač Leadtek.sys.
Jestli se nepletu, jedná se o ovladač USB Mobile broadband modemu od Leadteku, který jste vyfasoval k mobilnímu internetu od nějakého operátora.
Stejný problém jsme řešili zde
Nevím, zda Leadtek či někdo jiný od té doby napsal nový 64bitový ovladač, ten váš tam každopádně dělá naprostá zvěrstva.
Takže buď sehnat lepší ovladač na stránkách výrobce či na stránkách internetového providera nebo modem vložit mezi dva kameny (kameny lze nahradit kladivem, jako to řešil pán zde). Ještě je tu třetí možnost a to nainstalovat 32bitový operační systém, pro který by měla být lepší podpora.
Práci čest a Leadteku smrt.

Pokud je to od T-Mobile, koukám, že

Ovládače pre Windows 7 64bit sa nachádzajú priamo v plnej verzii T-Mobile Communication Center od verzie 3.67.62.99, ktorú si môžete stiahnuť vyššie

[JrMn]

Nabuduce si vas ukradnem. <3
Dakujem velmi pekne.
Taktiez aj vyoskovi^^.

[vyosek]

I za kolegu, nemate zac

[JrMn]

Zdravim, potreboval by som pomoct, nainstaloval som Hotspot Shield a chcel by som ho odinstalovat, no akosi subor uninstall.exe sa tam nikde nevyskytuje.
Pomozte mi prosim.

[vyosek]

Pokud mate v PC CCleaner - tak zalozka Nastroje (Odinstalovat)

Nebo muzete zkusit RevoUninstaller http://www.stahuj.centrum.cz/utility_a_ ... installer/

[JrMn]

Pokud mate v PC CCleaner - tak zalozka Nastroje (Odinstalovat)

Nebo muzete zkusit RevoUninstaller http://www.stahuj.centrum.cz/utility_a_ ... installer/

A ked sa to tam nenachadza?

[vyosek]

Dejte mi aktualni log z RSIT a podivame se zda-li z nej neco vycteme...

[JrMn]

Logfile of random's system information tool 1.08 (written by random/random)
Run by JrMn at 2011-04-24 19:53:39
Microsoft Windows 7 Home Premium
System drive C: has 37 GB (13%) free of 292 GB
Total RAM: 3958 MB (30% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:53:45, on 24. 4. 2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16766)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files (x86)\mIRC\mirc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\League of Legends\lol.launcher.exe
C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\League of Legends\Air\LOLClient.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\revouninstaller.exe
C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\League of Legends\Game\League of Legends.exe
C:\Program Files\trend micro\JrMn.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RoccatKone+] "C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [TMCC] "C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe" -m
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: LOLRecorder.lnk = LOLReplay\LOLRecorder.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/stati ... 0.31.0.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Mobility Manager Service (FMMService) - Flarion Technologies, Inc. - C:\PROGRA~2\T-MOBI~1\drivers\8B589B~1\FMMSER~1.EXE
O23 - Service: FOFDM DHCP Timing - Paradoxx Software - C:\PROGRA~2\T-MOBI~1\FOFDMD~1.EXE
O23 - Service: FOFDM Upgrade (FOFDMUpgrade) - Paradoxx Software - C:\PROGRA~2\T-MOBI~1\FOFDMU~1.EXE
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12485 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\SysWOW64\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\PROGRA~2\T-MOBI~1\drivers\8B589B~1\FMMSER~1.EXE
C:\PROGRA~2\T-MOBI~1\FOFDMD~1.EXE
C:\PROGRA~2\T-MOBI~1\FOFDMU~1.EXE
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Java\jre6\bin\jusched.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" -hidden
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe" -m
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe" /Start
"C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe"
"C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe" -Embedding
"C:\Program Files (x86)\mIRC\mirc.exe" -r"C:\Users\JrMn\AppData\Roaming\NoNameScript"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Program Files (x86)\LOLReplay\LOLRecorder.exe"
"C:\Program Files (x86)\Steam\Steam.exe"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\Windows\SysWOW64\WerFault.exe -u -p 1772 -s 284
C:\Windows\system32\DeviceDisplayObjectProvider.exe -Embedding
"C:\Program Files (x86)\League of Legends\lol.launcher.exe"
"C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=en-US --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_750ms_queue_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=5452.00DFA480.272864358 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=en-US --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_750ms_queue_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=5452.00DFA300.231903736 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=en-US --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_750ms_queue_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=5452.00DFA180.1678048525 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtest=CacheSize/CacheSizeGroup_4/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_750ms_queue_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=5452.09154480.987151896 /prefetch:3
Air\LOLClient.exe -runtime .\ -nodebug META-INF\AIR\application.xml .\ -- 8393
C:\Windows\system32\rundll32.exe "C:\Users\JrMn\AppData\Local\Google\Chrome\APPLIC~1\100648~1.205\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\JrMn\AppData\Local\Google\Chrome\Application\10.0.648.205\gcswf32.dll" --lang=en-US --plugin-data-dir="C:\Users\JrMn\AppData\Local\Google\Chrome\User Data\Default" --channel=5452.03986C00.636351524 /prefetch:4 --flash-broker=6068
"C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe"
"C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtest=CacheSize/CacheSizeGroup_4/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_750ms_queue_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=5452.06C72A80.1840876130 /prefetch:3
"C:\Program Files (x86)\CCleaner\CCleaner64.exe"
"C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\revouninstaller.exe"
"C:\Users\JrMn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtest=CacheSize/CacheSizeGroup_4/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_750ms_queue_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=5452.0AD2E300.822730721 /prefetch:3
C:\Windows\SysWOW64\WerFault.exe -u -p 7100 -s 408
"C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe"
"C:\Windows\System32\taskmgr.exe"
"Game\League of Legends.exe" "8390" "lol.launcher.exe" "Air\LOLClient.exe" "95.172.70.178 5177 LsmkGA/I7g5vDASKxFJRzw== 19228360"
"C:\Users\JrMn\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3771932870-3369830453-1068231195-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3771932870-3369830453-1068231195-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-24 43520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
Hotspot Shield Class - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll [2010-09-22 284208]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-23 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-15 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-23 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2009-02-07 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
Hotspot Shield Class - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll [2010-09-22 230448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2009-02-07 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-03 1883432]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2009-12-22 5977600]
"RtkOSD"=C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe [2009-10-13 995840]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-24 172032]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-07-02 2903688]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"=C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2009-10-16 2363392]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]
"minus"= []
"TMCC"=C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe [2010-07-29 774144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\boincmgr]
C:\Program Files\BOINC\boincmgr.exe [2010-07-01 6951680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\boinctray]
C:\Program Files\BOINC\boinctray.exe [2010-07-01 56064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files (x86)\Electronic Arts\EADM\Core.exe [2008-07-21 2752512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\JrMn\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-12 136176]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-11-25 98304]
"QlbCtrl.exe"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-10-08 322104]
"WirelessAssistant"=C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2009-07-23 498744]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"RoccatKone+"=C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE [2011-01-27 556072]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
LOLRecorder.lnk - C:\Program Files (x86)\LOLReplay\LOLRecorder.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-04-24 19:32:52 ----D---- C:\Program Files (x86)\VS Revo Group
2011-04-24 18:19:45 ----D---- C:\Hotspot Shield
2011-04-24 18:19:37 ----D---- C:\Program Files (x86)\Hotspot Shield
2011-04-17 16:34:40 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2011-04-17 16:34:40 ----A---- C:\Windows\system32\wcncsvc.dll
2011-04-17 16:26:35 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-04-17 16:26:34 ----A---- C:\Windows\system32\XpsPrint.dll
2011-04-17 16:26:28 ----A---- C:\Windows\system32\FntCache.dll
2011-04-17 16:26:27 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-04-17 16:26:27 ----A---- C:\Windows\system32\DWrite.dll
2011-04-17 16:26:27 ----A---- C:\Windows\system32\d2d1.dll
2011-04-17 16:26:26 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-04-17 16:26:26 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-04-17 16:26:26 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-04-17 16:26:25 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-04-17 16:26:25 ----A---- C:\Windows\system32\d3d10_1.dll
2011-04-15 14:29:18 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-15 14:29:18 ----A---- C:\Windows\system32\mfc42.dll
2011-04-15 14:29:17 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-04-15 14:29:16 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-04-15 14:29:02 ----A---- C:\Windows\system32\win32k.sys
2011-04-15 14:28:56 ----A---- C:\Windows\system32\jscript.dll
2011-04-15 14:28:55 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-04-15 14:28:55 ----A---- C:\Windows\system32\vbscript.dll
2011-04-15 14:28:53 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-04-15 14:28:49 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-15 14:28:48 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-15 14:28:48 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-15 14:28:44 ----A---- C:\Windows\system32\atmfd.dll
2011-04-15 14:28:43 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-04-15 14:28:43 ----A---- C:\Windows\system32\atmlib.dll
2011-04-15 14:28:42 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-04-15 14:28:35 ----A---- C:\Windows\system32\mshtml.dll
2011-04-15 14:28:34 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-04-15 14:28:33 ----A---- C:\Windows\system32\ieframe.dll
2011-04-15 14:28:23 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-04-15 14:28:16 ----A---- C:\Windows\system32\urlmon.dll
2011-04-15 14:28:14 ----A---- C:\Windows\system32\wininet.dll
2011-04-15 14:28:12 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-04-15 14:28:09 ----D---- C:\32326b778c5e685c25b07b
2011-04-15 14:28:06 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-04-15 14:28:01 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-04-15 14:28:01 ----A---- C:\Windows\system32\iedkcs32.dll
2011-04-15 14:28:00 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-04-15 14:28:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-04-15 14:28:00 ----A---- C:\Windows\system32\mstime.dll
2011-04-15 14:28:00 ----A---- C:\Windows\system32\msfeeds.dll
2011-04-15 14:27:59 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-04-15 14:27:59 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-04-15 14:27:59 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-04-15 14:27:59 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-04-15 14:27:59 ----A---- C:\Windows\system32\mshtmled.dll
2011-04-15 14:27:59 ----A---- C:\Windows\system32\ieui.dll
2011-04-15 14:27:59 ----A---- C:\Windows\system32\iertutil.dll
2011-04-15 14:27:59 ----A---- C:\Windows\system32\iepeers.dll
2011-04-15 14:27:58 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-04-15 14:27:58 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-04-15 14:27:58 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-04-15 14:27:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-04-15 14:27:58 ----A---- C:\Windows\system32\msfeedssync.exe
2011-04-15 14:27:58 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-04-15 14:27:58 ----A---- C:\Windows\system32\licmgr10.dll
2011-04-15 14:27:58 ----A---- C:\Windows\system32\jsproxy.dll
2011-04-15 14:23:58 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-15 14:23:57 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-04-15 14:23:57 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-04-15 14:23:57 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-15 14:23:57 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-15 14:23:53 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-04-15 14:23:53 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-15 14:23:43 ----A---- C:\Windows\system32\winresume.exe
2011-04-15 14:23:43 ----A---- C:\Windows\system32\winload.exe
2011-04-15 14:23:42 ----A---- C:\Windows\system32\kdusb.dll
2011-04-15 14:23:42 ----A---- C:\Windows\system32\kdcom.dll
2011-04-15 14:23:42 ----A---- C:\Windows\system32\kd1394.dll
2011-04-15 14:23:33 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-04-15 14:23:15 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-15 14:23:14 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-15 14:23:14 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-15 14:23:14 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-04-10 13:11:11 ----D---- C:\Users\JrMn\AppData\Roaming\Wireshark
2011-04-10 13:02:19 ----D---- C:\Program Files\Wireshark
2011-04-03 20:25:16 ----D---- C:\Users\JrMn\AppData\Roaming\Bitcoin
2011-04-03 20:25:09 ----D---- C:\Program Files (x86)\Bitcoin
2011-04-03 17:59:12 ----D---- C:\Users\JrMn\AppData\Roaming\ZNC
2011-03-31 23:48:38 ----A---- C:\Windows\SYSWOW64\frapsvid.dll
2011-03-31 23:48:36 ----A---- C:\Windows\system32\frapsv64.dll
2011-03-30 08:58:12 ----D---- C:\Program Files (x86)\EverStep
2011-03-28 14:18:55 ----D---- C:\ProgramData\LAG
2011-03-28 14:18:18 ----D---- C:\Windows\SYSWOW64\AGEIA
2011-03-28 14:18:17 ----D---- C:\Program Files (x86)\AGEIA Technologies

======List of files/folders modified in the last 1 months======

2011-04-24 19:53:43 ----D---- C:\Program Files\trend micro
2011-04-24 19:36:17 ----D---- C:\Windows\Temp
2011-04-24 19:36:15 ----D---- C:\Windows\system32\drivers
2011-04-24 19:36:14 ----D---- C:\Windows\system32\DriverStore
2011-04-24 19:36:14 ----D---- C:\Windows\system32\catroot
2011-04-24 19:36:14 ----D---- C:\Windows\inf
2011-04-24 19:36:09 ----SHD---- C:\System Volume Information
2011-04-24 19:35:57 ----D---- C:\Windows\SysWOW64
2011-04-24 19:32:52 ----D---- C:\Program Files (x86)
2011-04-24 19:25:56 ----D---- C:\Users\JrMn\AppData\Roaming\Skype
2011-04-24 19:07:17 ----A---- C:\ProgramData\HPWALog.txt
2011-04-24 18:55:02 ----D---- C:\Program Files (x86)\League of Legends
2011-04-24 18:32:38 ----D---- C:\Windows\Logs
2011-04-24 18:31:20 ----D---- C:\Windows\system32\Tasks
2011-04-24 18:22:23 ----D---- C:\Users\JrMn\AppData\Roaming\NoNameScript
2011-04-24 18:20:37 ----D---- C:\Windows\system32\catroot2
2011-04-24 17:27:23 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-04-24 14:33:01 ----D---- C:\Windows\system32\NDF
2011-04-24 13:39:50 ----D---- C:\Users\JrMn\AppData\Roaming\Mumble
2011-04-24 13:35:49 ----D---- C:\Program Files (x86)\Steam
2011-04-24 11:34:41 ----D---- C:\Windows\system32\config
2011-04-24 11:27:32 ----D---- C:\Windows\System32
2011-04-24 11:27:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-24 11:23:33 ----HD---- C:\ProgramData
2011-04-24 11:23:04 ----A---- C:\Windows\SYSWOW64\log.txt
2011-04-22 00:37:48 ----D---- C:\Users\JrMn\AppData\Roaming\.minecraft
2011-04-21 22:45:58 ----D---- C:\Program Files (x86)\Garena
2011-04-21 09:49:31 ----D---- C:\Windows
2011-04-20 21:57:02 ----D---- C:\Program Files (x86)\T-Mobile Communication Center
2011-04-19 20:32:47 ----D---- C:\Windows\Minidump
2011-04-19 14:44:06 ----RSD---- C:\Windows\assembly
2011-04-19 14:44:06 ----D---- C:\Windows\Microsoft.NET
2011-04-18 14:26:20 ----D---- C:\Windows\winsxs
2011-04-17 13:36:53 ----D---- C:\Program Files (x86)\Opera
2011-04-17 03:08:53 ----SHD---- C:\Windows\Installer
2011-04-16 02:30:10 ----D---- C:\Windows\SYSWOW64\migration
2011-04-16 02:30:10 ----D---- C:\Program Files\Internet Explorer
2011-04-16 02:30:10 ----D---- C:\Program Files (x86)\Internet Explorer
2011-04-16 02:30:09 ----D---- C:\Windows\system32\migration
2011-04-16 02:30:06 ----D---- C:\Windows\system32\Boot
2011-04-15 14:28:11 ----A---- C:\Windows\system32\MRT.exe
2011-04-13 17:05:20 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-04-12 17:38:38 ----D---- C:\Users\JrMn\AppData\Roaming\mIRC
2011-04-10 13:02:19 ----D---- C:\Program Files
2011-04-09 01:28:26 ----D---- C:\Program Files (x86)\Warcraft III
2011-04-04 00:31:05 ----D---- C:\Windows\system32\wdi
2011-04-02 16:43:52 ----D---- C:\Program Files\EslWire
2011-04-01 23:56:42 ----D---- C:\Program Files (x86)\Mumble

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-10-13 409624]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-18 834544]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-28 139704]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-06-24 166984]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-28 169592]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-28 50600]
R2 ESLWireAC;ESLWireAC; \??\C:\Windows\system32\drivers\ESLWireACD.sys [2011-03-29 179616]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35344]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-11-19 123408]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-11-25 6174720]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
R3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2010-04-14 54824]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-09-17 98344]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-09-17 132648]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-09-17 35104]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-09-17 21160]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-28 33608]
R3 ESLvnic1;ESLvnic Virtual Network 64 Bit; C:\Windows\system32\DRIVERS\ESLvnic.sys [2010-10-13 25528]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 18432]
R3 HssDrv;Hotspot Shield Helper Miniport; C:\Windows\system32\DRIVERS\HssDrv.sys [2010-09-22 56832]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-12-23 2229280]
R3 Leadtek;Leadtek USB Network Interface; C:\Windows\system32\DRIVERS\Leadtek.sys [2011-04-20 77360]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2010-01-13 7675392]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-21 413800]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-11-03 299056]
R3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys [2010-09-22 37888]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880]
S3 ALSysIO;ALSysIO; \??\C:\Users\JrMn\AppData\Local\Temp\ALSysIO64.sys []
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 33856]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 injectDLL;injectDLL; \??\C:\Users\JrMn\Desktop\ProInjector\injectDLL.sys []
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-09-23 225280]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-10-10 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2010-10-08 144784]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]
S4 RsFx0103;RsFx0103 Driver; C:\Windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 311656]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-11-25 202752]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-09-04 873248]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2010-07-02 810144]
R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 FMMService;Mobility Manager Service; C:\PROGRA~2\T-MOBI~1\drivers\8B589B~1\FMMSER~1.EXE [2011-04-20 40960]
R2 FOFDM DHCP Timing;FOFDM DHCP Timing; C:\PROGRA~2\T-MOBI~1\FOFDMD~1.EXE [2011-02-16 391680]
R2 FOFDMUpgrade;FOFDM Upgrade; C:\PROGRA~2\T-MOBI~1\FOFDMU~1.EXE [2011-02-16 188416]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2009-10-15 120832]
R2 HssSrv;Hotspot Shield Routing Service; C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe [2011-01-05 352304]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2009-10-16 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-10-01 268824]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2009-03-30 57617752]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-01-30 75136]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-07-06 247152]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-15 226656]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 157720]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2320920]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 hpqwmiex;hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2009-05-01 229944]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-04-16 403240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 HssWd;Hotspot Shield Monitoring Service; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [2010-10-15 326704]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-07-11 72704]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-07-02 42360]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-27 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-27 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2010-06-25 117264]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-07-12 1255736]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808]

-----------------EOF-----------------

/preinstaloval som to a uz to tam je, no stale chyba uninstall.exe