Dobrý den!
Už nějakou dobu mě zlobí Avira s hláškou,že na mojí USB klíčence je přítomnost víru obsažená v poměrně známém "Autorun". Mohl bych se toho nějak zbavit? Předem díky!
Autorun.inf
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Autorun.inf
Zdravim a pekny vecer preji 
Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)
Dejte log z RSIT http://www.viry.cz/forum/viewtopic.php?f=13&t=105895
Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)
- Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
- Spustte a kliknete na Deletion
- Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt
Dejte log z RSIT http://www.viry.cz/forum/viewtopic.php?f=13&t=105895"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Autorun.inf
############################## | UsbFix 7.014 | [Deletion]
User: michal (Administrator) # MICHAL-PC [Gigabyte Technology Co., Ltd. H67MA-D2H]
Updated 24/06/10 by El Desaparecido / C_XX
Started at 22:35:31 | 07/09/2011
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com
CPU: Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz
CPU 2: Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz
Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
Internet Explorer 9.0.8112.16421
Windows Firewall: Disabled /!\
RAM -> 3597 Mb
C:\ (%systemdrive%) -> Fixed drive # 88 Gb (10 Mb free - 12%) [] # NTFS
D:\ -> CD-ROM
E:\ -> Fixed drive # 844 Gb (389 Mb free - 46%) [] # NTFS
F:\ -> CD-ROM
G:\ -> CD-ROM
J:\ -> Removable drive # 4 Gb (692 Mb free - 18%) [KINGSTON] # FAT32
################## | Files # Infected Folders |
################## | Registry |
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Listing |
[07/09/2011 - 22:37:47 | SHD ] C:\$RECYCLE.BIN
[03/09/2011 - 12:50:48 | AD ] C:\Alone in the Dark
[10/03/2011 - 22:03:14 | RAD ] C:\Autorun.inf
[26/03/2011 - 19:47:21 | A | 14167] C:\ComboFix.txt
[02/02/2011 - 18:36:54 | A | 180] C:\csb.log
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[07/09/2011 - 19:09:22 | ASH | 2829131776] C:\hiberfil.sys
[02/02/2011 - 18:35:55 | A | 189] C:\Install.log
[02/02/2011 - 18:34:01 | D ] C:\Intel
[07/09/2011 - 19:09:24 | ASH | 3772178432] C:\pagefile.sys
[14/07/2009 - 05:20:08 | D ] C:\PerfLogs
[04/09/2011 - 19:48:17 | RD ] C:\Program Files
[04/09/2011 - 19:43:03 | RD ] C:\Program Files (x86)
[15/08/2011 - 17:57:47 | D ] C:\ProgramData
[02/02/2011 - 23:54:40 | D ] C:\PSFONTS
[02/02/2011 - 18:24:52 | D ] C:\Recovery
[02/02/2011 - 18:35:32 | A | 2110] C:\RHDSetup.log
[26/03/2011 - 14:07:34 | D ] C:\rsit
[10/07/2011 - 22:24:59 | D ] C:\rtmpdump
[31/03/2011 - 18:40:41 | D ] C:\Sibelius 6
[07/09/2011 - 21:38:24 | SHD ] C:\System Volume Information
[07/09/2011 - 22:37:48 | D ] C:\UsbFix
[07/09/2011 - 22:35:32 | A | 2334] C:\UsbFix.txt
[10/03/2011 - 22:03:14 | A | 3038] C:\UsbFix_Upload_Me_MICHAL-PC.zip
[25/02/2011 - 18:58:42 | RD ] C:\Users
[02/06/2011 - 19:43:19 | HD ] C:\VritualRoot
[05/09/2011 - 18:31:03 | D ] C:\Windows
[04/09/2011 - 16:55:21 | D ] C:\_OTL
[07/09/2011 - 22:37:48 | D ] E:\$RECYCLE.BIN
[20/07/2011 - 16:59:55 | D ] E:\Aldous Huxley Collection
[04/03/2011 - 03:21:49 | A | 1048576000] E:\ASanchez_MasterSeries_faststrings.com.part1.rar
[04/03/2011 - 21:25:54 | A | 1048576000] E:\ASanchez_MasterSeries_faststrings.com.part2.rar
[10/03/2011 - 22:03:14 | RAD ] E:\Autorun.inf
[12/07/2011 - 09:30:20 | D ] E:\Black Adder
[07/06/2011 - 21:54:14 | D ] E:\Branford Marsalis - Contemporary Jazz
[01/06/2010 - 22:56:50 | A | 1564672] E:\bukowski.ppt
[29/08/2011 - 00:40:02 | D ] E:\Charles Mingus - Live At Montreux (1975)
[07/08/2011 - 10:01:09 | D ] E:\Chick Corea - Return To Forever 72,[ECM,Japan-9266]_2006
[14/08/2011 - 19:59:22 | D ] E:\Download
[07/09/2011 - 22:28:50 | D ] E:\Downloads
[20/07/2011 - 20:55:36 | A | 734189568] E:\Elephant Man.avi
[13/08/2011 - 13:26:15 | D ] E:\Eraserhead (1977)
[07/08/2011 - 22:50:28 | D ] E:\Eternal Sunshine of the Spotless Mind
[20/07/2011 - 23:11:30 | D ] E:\Eternal.Sunshine.Of.The.Spotless.Mind.DVDrip.XViD-DVL
[19/03/2011 - 20:56:48 | D ] E:\Fake Books
[12/06/2011 - 15:03:06 | A | 20971520] E:\FPZ1.part1.rar
[12/06/2011 - 15:30:11 | A | 20679017] E:\FPZ1.part2.rar
[12/06/2011 - 15:57:11 | A | 20971520] E:\FPZ2.part1.rar
[12/06/2011 - 16:24:27 | A | 20066706] E:\FPZ2.part2.rar
[12/06/2011 - 14:45:24 | A | 11671513] E:\FPZ_1_2.pdf
[22/04/2011 - 23:52:04 | D ] E:\Funkifying the Clave Afro-Cuban Grooves for Bass and Drums
[31/03/2011 - 21:22:32 | D ] E:\Garritan Personal Orchestra
[14/08/2011 - 15:17:56 | A | 224] E:\INSTALL.LOG
[14/08/2011 - 21:25:37 | D ] E:\IT CROWD
[13/04/2011 - 21:39:14 | A | 4754298] E:\jazzovka.mp3
[26/02/2011 - 14:45:16 | A | 87084582] E:\Jim_Chapin_-_Advanced_Techniquees_for_the_Modern_Drummer.zip
[27/02/2011 - 19:03:30 | D ] E:\Matematika.RoaNe
[27/02/2011 - 16:57:08 | A | 52047181] E:\Matematika.RoaNe.rar
[06/09/2011 - 23:04:13 | D ] E:\mes créations
[28/06/2011 - 22:07:50 | A | 2158536] E:\michwi1.jpg
[28/06/2011 - 22:09:36 | A | 493159] E:\michwi2.jpg
[17/11/2010 - 14:46:28 | A | 111793] E:\MILES_DAVIS.srt
[26/02/2011 - 13:05:13 | D ] E:\MS Office Pro Enterprise 2003 CZ
[01/12/2006 - 23:37:14 | A | 904704] E:\msdia80.dll
[07/03/2011 - 21:24:51 | RD ] E:\MSOCache
[27/02/2011 - 18:01:56 | D ] E:\Multimedia
[05/09/2011 - 21:40:20 | RD ] E:\Music
[13/08/2011 - 13:27:43 | D ] E:\Noty,noty notičky
[20/07/2011 - 17:43:21 | D ] E:\Old Corel Works
[13/08/2011 - 13:22:30 | D ] E:\On U Va - CD
[20/07/2011 - 18:44:29 | A | 682123536] E:\Other Worlds - Ayahuasca Documentary.avi
[29/07/2010 - 16:55:16 | A | 37391] E:\Other.Worlds.-.Ayahuasca.Documentary.txt
[26/03/2011 - 14:23:38 | A | 31744] E:\seminarni prace.doc
[02/02/2011 - 19:04:26 | SHD ] E:\System Volume Information
[19/03/2011 - 21:04:26 | D ] E:\The.Holy.Mountain.1973.REMASTERED.DVDRip.XviD-OSTERMANN
[20/07/2011 - 18:00:01 | A | 876841529] E:\The.Spirit.Molecule.2010.x264.m4v
[30/01/2011 - 02:01:16 | A | 90471] E:\The.Spirit.Molecule.2010.x264.pl.txt
[19/07/2011 - 08:59:53 | D ] E:\Urlop
[20/07/2011 - 00:53:18 | D ] E:\Video
[07/08/2011 - 09:46:24 | D ] E:\Weather Report on CJCM
[15/07/2011 - 11:48:58 | A | 3963287] E:\Yu4RlQ3I3gc.mp3
[20/07/2011 - 17:47:32 | D ] J:\Movies_Documentaries_ETC
[14/08/2011 - 14:38:12 | A | 78286970] J:\V_jako_Vendeta.cbr
[20/07/2011 - 17:47:40 | D ] J:\Work
[20/07/2011 - 17:48:22 | D ] J:\Stickin Stuff
[04/09/2011 - 15:26:12 | A | 610] J:\UnHookExec.inf
[10/03/2011 - 21:03:16 | RASHD ] J:\Autorun.inf
[25/05/2010 - 22:52:56 | D ] J:\VLCPortable
################## | Vaccin |
(!) This computer is not vaccinated!
################## | Upload |
Please send the file: C:\UsbFix_Upload_Me_MICHAL-PC.zip
http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution.
################## | E.O.F |
User: michal (Administrator) # MICHAL-PC [Gigabyte Technology Co., Ltd. H67MA-D2H]
Updated 24/06/10 by El Desaparecido / C_XX
Started at 22:35:31 | 07/09/2011
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com
CPU: Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz
CPU 2: Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz
Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
Internet Explorer 9.0.8112.16421
Windows Firewall: Disabled /!\
RAM -> 3597 Mb
C:\ (%systemdrive%) -> Fixed drive # 88 Gb (10 Mb free - 12%) [] # NTFS
D:\ -> CD-ROM
E:\ -> Fixed drive # 844 Gb (389 Mb free - 46%) [] # NTFS
F:\ -> CD-ROM
G:\ -> CD-ROM
J:\ -> Removable drive # 4 Gb (692 Mb free - 18%) [KINGSTON] # FAT32
################## | Files # Infected Folders |
################## | Registry |
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Listing |
[07/09/2011 - 22:37:47 | SHD ] C:\$RECYCLE.BIN
[03/09/2011 - 12:50:48 | AD ] C:\Alone in the Dark
[10/03/2011 - 22:03:14 | RAD ] C:\Autorun.inf
[26/03/2011 - 19:47:21 | A | 14167] C:\ComboFix.txt
[02/02/2011 - 18:36:54 | A | 180] C:\csb.log
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[07/09/2011 - 19:09:22 | ASH | 2829131776] C:\hiberfil.sys
[02/02/2011 - 18:35:55 | A | 189] C:\Install.log
[02/02/2011 - 18:34:01 | D ] C:\Intel
[07/09/2011 - 19:09:24 | ASH | 3772178432] C:\pagefile.sys
[14/07/2009 - 05:20:08 | D ] C:\PerfLogs
[04/09/2011 - 19:48:17 | RD ] C:\Program Files
[04/09/2011 - 19:43:03 | RD ] C:\Program Files (x86)
[15/08/2011 - 17:57:47 | D ] C:\ProgramData
[02/02/2011 - 23:54:40 | D ] C:\PSFONTS
[02/02/2011 - 18:24:52 | D ] C:\Recovery
[02/02/2011 - 18:35:32 | A | 2110] C:\RHDSetup.log
[26/03/2011 - 14:07:34 | D ] C:\rsit
[10/07/2011 - 22:24:59 | D ] C:\rtmpdump
[31/03/2011 - 18:40:41 | D ] C:\Sibelius 6
[07/09/2011 - 21:38:24 | SHD ] C:\System Volume Information
[07/09/2011 - 22:37:48 | D ] C:\UsbFix
[07/09/2011 - 22:35:32 | A | 2334] C:\UsbFix.txt
[10/03/2011 - 22:03:14 | A | 3038] C:\UsbFix_Upload_Me_MICHAL-PC.zip
[25/02/2011 - 18:58:42 | RD ] C:\Users
[02/06/2011 - 19:43:19 | HD ] C:\VritualRoot
[05/09/2011 - 18:31:03 | D ] C:\Windows
[04/09/2011 - 16:55:21 | D ] C:\_OTL
[07/09/2011 - 22:37:48 | D ] E:\$RECYCLE.BIN
[20/07/2011 - 16:59:55 | D ] E:\Aldous Huxley Collection
[04/03/2011 - 03:21:49 | A | 1048576000] E:\ASanchez_MasterSeries_faststrings.com.part1.rar
[04/03/2011 - 21:25:54 | A | 1048576000] E:\ASanchez_MasterSeries_faststrings.com.part2.rar
[10/03/2011 - 22:03:14 | RAD ] E:\Autorun.inf
[12/07/2011 - 09:30:20 | D ] E:\Black Adder
[07/06/2011 - 21:54:14 | D ] E:\Branford Marsalis - Contemporary Jazz
[01/06/2010 - 22:56:50 | A | 1564672] E:\bukowski.ppt
[29/08/2011 - 00:40:02 | D ] E:\Charles Mingus - Live At Montreux (1975)
[07/08/2011 - 10:01:09 | D ] E:\Chick Corea - Return To Forever 72,[ECM,Japan-9266]_2006
[14/08/2011 - 19:59:22 | D ] E:\Download
[07/09/2011 - 22:28:50 | D ] E:\Downloads
[20/07/2011 - 20:55:36 | A | 734189568] E:\Elephant Man.avi
[13/08/2011 - 13:26:15 | D ] E:\Eraserhead (1977)
[07/08/2011 - 22:50:28 | D ] E:\Eternal Sunshine of the Spotless Mind
[20/07/2011 - 23:11:30 | D ] E:\Eternal.Sunshine.Of.The.Spotless.Mind.DVDrip.XViD-DVL
[19/03/2011 - 20:56:48 | D ] E:\Fake Books
[12/06/2011 - 15:03:06 | A | 20971520] E:\FPZ1.part1.rar
[12/06/2011 - 15:30:11 | A | 20679017] E:\FPZ1.part2.rar
[12/06/2011 - 15:57:11 | A | 20971520] E:\FPZ2.part1.rar
[12/06/2011 - 16:24:27 | A | 20066706] E:\FPZ2.part2.rar
[12/06/2011 - 14:45:24 | A | 11671513] E:\FPZ_1_2.pdf
[22/04/2011 - 23:52:04 | D ] E:\Funkifying the Clave Afro-Cuban Grooves for Bass and Drums
[31/03/2011 - 21:22:32 | D ] E:\Garritan Personal Orchestra
[14/08/2011 - 15:17:56 | A | 224] E:\INSTALL.LOG
[14/08/2011 - 21:25:37 | D ] E:\IT CROWD
[13/04/2011 - 21:39:14 | A | 4754298] E:\jazzovka.mp3
[26/02/2011 - 14:45:16 | A | 87084582] E:\Jim_Chapin_-_Advanced_Techniquees_for_the_Modern_Drummer.zip
[27/02/2011 - 19:03:30 | D ] E:\Matematika.RoaNe
[27/02/2011 - 16:57:08 | A | 52047181] E:\Matematika.RoaNe.rar
[06/09/2011 - 23:04:13 | D ] E:\mes créations
[28/06/2011 - 22:07:50 | A | 2158536] E:\michwi1.jpg
[28/06/2011 - 22:09:36 | A | 493159] E:\michwi2.jpg
[17/11/2010 - 14:46:28 | A | 111793] E:\MILES_DAVIS.srt
[26/02/2011 - 13:05:13 | D ] E:\MS Office Pro Enterprise 2003 CZ
[01/12/2006 - 23:37:14 | A | 904704] E:\msdia80.dll
[07/03/2011 - 21:24:51 | RD ] E:\MSOCache
[27/02/2011 - 18:01:56 | D ] E:\Multimedia
[05/09/2011 - 21:40:20 | RD ] E:\Music
[13/08/2011 - 13:27:43 | D ] E:\Noty,noty notičky
[20/07/2011 - 17:43:21 | D ] E:\Old Corel Works
[13/08/2011 - 13:22:30 | D ] E:\On U Va - CD
[20/07/2011 - 18:44:29 | A | 682123536] E:\Other Worlds - Ayahuasca Documentary.avi
[29/07/2010 - 16:55:16 | A | 37391] E:\Other.Worlds.-.Ayahuasca.Documentary.txt
[26/03/2011 - 14:23:38 | A | 31744] E:\seminarni prace.doc
[02/02/2011 - 19:04:26 | SHD ] E:\System Volume Information
[19/03/2011 - 21:04:26 | D ] E:\The.Holy.Mountain.1973.REMASTERED.DVDRip.XviD-OSTERMANN
[20/07/2011 - 18:00:01 | A | 876841529] E:\The.Spirit.Molecule.2010.x264.m4v
[30/01/2011 - 02:01:16 | A | 90471] E:\The.Spirit.Molecule.2010.x264.pl.txt
[19/07/2011 - 08:59:53 | D ] E:\Urlop
[20/07/2011 - 00:53:18 | D ] E:\Video
[07/08/2011 - 09:46:24 | D ] E:\Weather Report on CJCM
[15/07/2011 - 11:48:58 | A | 3963287] E:\Yu4RlQ3I3gc.mp3
[20/07/2011 - 17:47:32 | D ] J:\Movies_Documentaries_ETC
[14/08/2011 - 14:38:12 | A | 78286970] J:\V_jako_Vendeta.cbr
[20/07/2011 - 17:47:40 | D ] J:\Work
[20/07/2011 - 17:48:22 | D ] J:\Stickin Stuff
[04/09/2011 - 15:26:12 | A | 610] J:\UnHookExec.inf
[10/03/2011 - 21:03:16 | RASHD ] J:\Autorun.inf
[25/05/2010 - 22:52:56 | D ] J:\VLCPortable
################## | Vaccin |
(!) This computer is not vaccinated!
################## | Upload |
Please send the file: C:\UsbFix_Upload_Me_MICHAL-PC.zip
http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution.
################## | E.O.F |
Re: Autorun.inf
Logfile of random's system information tool 1.09 (written by random/random)
Run by michal at 2011-09-07 23:43:16
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 16 GB (18%) free of 90 GB
Total RAM: 3597 MB (46% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:43:18, on 7.9.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\michal.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\SysWOW64\Userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: MyPlayCity Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout Free Download Managerem - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video Free Download Managerem - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané Free Download Managerem - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše Free Download Managerem - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (cmdagent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7457 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000694
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-3954bfbe-037a-4433-9e3c-989fca9aba51 -SystemEventPortName:HostProcess-2a399b9b-181e-40cd-a221-eb086427290e -IoCancelEventPortName:HostProcess-393e0393-9861-48c4-aaec-411524e94092 -NonStateChangingEventPortName:HostProcess-a98bcdb7-26f0-4a9f-8c5f-4070acefee21 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c4cd6f29-dce4-44fa-afae-375c2dd9e2b5
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {3eef301f-b596-4c0b-bd92-013beafce793} -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\explorer.exe /factory,{682159d9-c321-47ca-b3f1-30e36b2ec8b9} -Embedding
"C:\Windows\EXPLORER.EXE"
"C:\Program Files (x86)\Opera\opera.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\michal\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\SlimDrivers Startup.job
=========Mozilla firefox=========
ProfilePath - C:\Users\michal\AppData\Roaming\Mozilla\Firefox\Profiles\fnx3sc22.default
prefs.js - "extensions.enabledItems" - "{e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
NPOFFICE.DLL
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Users\michal\AppData\Roaming\Mozilla\Firefox\Profiles\fnx3sc22.default\extensions\
toolbar@ask.com
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files (x86)\Free Download Manager\iefdm2.dll [2008-12-30 98304]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
MyPlayCity Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-08-03 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - MyPlayCity Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-09-03 11464296]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-26 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-26 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-26 418840]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-07-12 9048392]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2011-03-29 399736]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2011-08-04 1955208]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2011-01-10 281768]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2011-05-17 395144]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
""= []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-26 385024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-07-03 249344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0
"NoDriveTypeAutoRun"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0
"NoDriveTypeAutoRun"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2011-09-06 23:00:17 ----D---- C:\Users\michal\AppData\Roaming\rockbox.org
2011-09-04 16:55:21 ----D---- C:\_OTL
2011-09-03 15:34:28 ----D---- C:\Program Files (x86)\Microsoft WSE
2011-09-03 12:52:55 ----D---- C:\Program Files (x86)\DOSBox-0.74
2011-09-03 12:50:47 ----AD---- C:\Alone in the Dark
2011-09-02 14:15:46 ----D---- C:\Users\michal\AppData\Roaming\GNU Solfege
2011-09-02 14:14:47 ----D---- C:\Program Files (x86)\GNU Solfege
2011-09-02 14:04:47 ----D---- C:\Users\michal\AppData\Roaming\be.miles.FunctionalEarTrainer
2011-09-02 14:04:27 ----D---- C:\Program Files (x86)\Functional Ear Trainer
2011-08-26 09:36:58 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-08-26 09:36:58 ----A---- C:\Windows\system32\tzres.dll
2011-08-19 23:22:18 ----D---- C:\Users\michal\AppData\Roaming\Ableton
2011-08-19 23:22:03 ----A---- C:\Windows\SYSWOW64\REX Shared Library.dll
2011-08-19 23:22:03 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2011-08-19 23:22:03 ----A---- C:\Windows\SYSWOW64\msvcp71.dll
2011-08-19 23:22:03 ----A---- C:\Windows\SYSWOW64\MFC71.dll
2011-08-19 23:21:50 ----D---- C:\Program Files (x86)\Ableton
2011-08-19 20:56:49 ----D---- C:\Program Files (x86)\Arturia
2011-08-19 20:56:49 ----A---- C:\Windows\SYSWOW64\ArtFfct.dll
2011-08-19 10:06:55 ----D---- C:\Program Files (x86)\Barbie(TM) Dobrodruzstvi s konmi(TM)
2011-08-15 20:51:21 ----D---- C:\Users\michal\AppData\Roaming\cacaoweb
2011-08-15 17:58:54 ----A---- C:\Windows\SYSWOW64\SYNSOEMU.DLL
2011-08-15 17:57:47 ----D---- C:\ProgramData\VST3 Presets
2011-08-15 17:52:02 ----D---- C:\ProgramData\Steinberg
2011-08-14 19:31:32 ----D---- C:\Users\michal\AppData\Roaming\FreeCommander
2011-08-14 19:31:32 ----D---- C:\Program Files (x86)\FreeCommander
2011-08-14 18:39:34 ----D---- C:\Program Files (x86)\Gmail Notifier
2011-08-14 15:03:09 ----D---- C:\Users\michal\AppData\Roaming\Steinberg
2011-08-14 14:59:42 ----D---- C:\Users\michal\AppData\Roaming\Gmail Notifier Plus
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\rmbe3260.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\ra32sipr.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\ra32dnet.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\ra3228_8.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\ra3214_4.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\pngu3263.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\pneng50.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\pnc3250.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\msvcr70.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\msvcp70.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\encdnet.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\decdnet.dll
2011-08-14 14:41:08 ----D---- C:\Program Files (x86)\Steinberg
2011-08-14 14:40:26 ----A---- C:\Windows\SYSWOW64\drivers\synUSB64.sys
2011-08-14 14:40:25 ----D---- C:\Program Files (x86)\Syncrosoft
2011-08-14 14:40:25 ----A---- C:\Windows\SYSWOW64\SynsoLChk.dll
2011-08-14 14:40:25 ----A---- C:\Windows\SYSWOW64\SYNSOACC.dll
2011-08-13 23:11:27 ----D---- C:\Users\michal\AppData\Roaming\Miranda
2011-08-13 23:11:16 ----D---- C:\Program Files (x86)\Miranda IM
2011-08-13 16:49:56 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-08-13 16:49:56 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-08-13 16:49:56 ----A---- C:\Windows\SYSWOW64\java.exe
2011-08-13 14:22:41 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2011-08-13 14:19:56 ----D---- C:\Users\michal\AppData\Roaming\.minecraft
2011-08-13 14:16:30 ----A---- C:\Program Files\MinecraftSP.exe
2011-08-12 14:51:08 ----D---- C:\ProgramData\Boss Media
2011-08-12 12:33:00 ----D---- C:\Users\michal\AppData\Roaming\Plogue
2011-08-12 12:33:00 ----D---- C:\Users\michal\AppData\Roaming\Garritan
2011-08-12 12:31:41 ----D---- C:\Users\michal\AppData\Roaming\MakeMusic
2011-08-12 12:21:14 ----D---- C:\Program Files\vstplugins
2011-08-12 12:20:15 ----D---- C:\Program Files\Plogue
2011-08-12 12:20:09 ----D---- C:\Program Files\Garritan
2011-08-12 12:18:46 ----D---- C:\ProgramData\MakeMusic
2011-08-12 12:18:41 ----D---- C:\Program Files (x86)\Finale 2011
2011-08-12 11:49:23 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2011-08-11 11:04:11 ----D---- C:\Program Files (x86)\Docx Reader
2011-08-10 23:33:51 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-10 23:33:50 ----A---- C:\Windows\SYSWOW64\url.dll
2011-08-10 23:33:50 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-08-10 23:33:50 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-08-10 23:33:50 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-08-10 23:33:50 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-08-10 23:33:50 ----A---- C:\Windows\system32\url.dll
2011-08-10 23:33:50 ----A---- C:\Windows\system32\jscript9.dll
2011-08-10 23:33:50 ----A---- C:\Windows\system32\ieui.dll
2011-08-10 23:33:50 ----A---- C:\Windows\system32\iertutil.dll
2011-08-10 23:33:49 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-08-10 23:33:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-08-10 23:33:49 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-08-10 23:33:49 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-08-10 23:33:49 ----A---- C:\Windows\system32\wininet.dll
2011-08-10 23:33:49 ----A---- C:\Windows\system32\urlmon.dll
2011-08-10 23:33:49 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-10 23:33:49 ----A---- C:\Windows\system32\jscript.dll
2011-08-10 23:33:48 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-08-10 23:33:47 ----A---- C:\Windows\system32\mshtml.dll
2011-08-10 23:33:46 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-08-10 23:33:46 ----A---- C:\Windows\system32\ieframe.dll
2011-08-10 21:22:29 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-08-10 21:22:29 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-08-10 21:22:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-08-10 21:11:20 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2011-08-10 21:11:20 ----A---- C:\Windows\system32\xmllite.dll
2011-08-10 21:11:19 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-08-10 21:11:19 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\system32\odbctrac.dll
2011-08-10 21:11:19 ----A---- C:\Windows\system32\odbccu32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\system32\odbccr32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\system32\odbccp32.dll
2011-08-10 21:11:18 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-08-10 21:11:14 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-08-10 21:11:14 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-08-10 21:11:14 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-08-10 21:11:14 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-08-10 21:11:14 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\wow64win.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\wow64cpu.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\wow64.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\winsrv.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\ntvdm64.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\KernelBase.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\kernel32.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\conhost.exe
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-08-10 21:11:13 ----A---- C:\Windows\SYSWOW64\user.exe
2011-08-10 21:11:13 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-08-10 21:11:10 ----A---- C:\Windows\system32\drivers\tcpip.sys
======List of files/folders modified in the last 1 month======
2011-09-07 23:43:18 ----D---- C:\Windows\Prefetch
2011-09-07 23:43:17 ----D---- C:\Program Files\trend micro
2011-09-07 23:40:52 ----A---- C:\UsbFix.txt
2011-09-07 22:37:49 ----D---- C:\UsbFix
2011-09-07 22:37:49 ----D---- C:\Autorun.inf
2011-09-07 22:37:47 ----SHD---- C:\$RECYCLE.BIN
2011-09-07 22:35:46 ----A---- C:\Windows\SYSWOW64\log.txt
2011-09-07 22:35:31 ----D---- C:\Users\michal\AppData\Roaming\uTorrent
2011-09-07 22:23:38 ----D---- C:\Windows\System32
2011-09-07 22:23:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-09-07 21:38:24 ----SHD---- C:\System Volume Information
2011-09-07 20:42:12 ----D---- C:\Windows\temp
2011-09-07 20:36:23 ----D---- C:\Windows\system32\drivers
2011-09-07 19:57:04 ----D---- C:\Windows\system32\config
2011-09-06 05:42:33 ----D---- C:\Users\michal\AppData\Roaming\foobar2000
2011-09-05 18:31:03 ----D---- C:\Windows
2011-09-04 19:48:17 ----RD---- C:\Program Files
2011-09-04 19:46:33 ----D---- C:\Users\michal\AppData\Roaming\Media Player Classic
2011-09-04 19:43:03 ----RD---- C:\Program Files (x86)
2011-09-04 19:43:03 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-09-04 12:55:19 ----D---- C:\Program Files (x86)\AC
2011-09-03 15:34:35 ----SHD---- C:\Windows\Installer
2011-09-03 15:34:35 ----RSD---- C:\Windows\assembly
2011-09-03 12:57:49 ----SD---- C:\ProgramData\Microsoft
2011-09-02 23:10:30 ----D---- C:\Users\michal\AppData\Roaming\Audacity
2011-09-02 14:04:37 ----D---- C:\ProgramData\Adobe
2011-09-02 14:04:29 ----D---- C:\Program Files (x86)\Common Files
2011-09-02 14:04:29 ----D---- C:\Program Files (x86)\Adobe
2011-09-02 13:42:59 ----D---- C:\Users\michal\AppData\Roaming\Adobe
2011-09-01 18:11:39 ----D---- C:\Program Files (x86)\Opera
2011-08-28 11:29:51 ----D---- C:\Windows\rescache
2011-08-28 09:08:37 ----D---- C:\Windows\winsxs
2011-08-28 09:08:32 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-08-28 09:08:32 ----D---- C:\Windows\SysWOW64
2011-08-28 09:08:32 ----D---- C:\Windows\system32\cs-CZ
2011-08-26 09:36:13 ----D---- C:\Windows\system32\catroot2
2011-08-26 09:36:13 ----D---- C:\Windows\system32\catroot
2011-08-19 23:39:25 ----D---- C:\Windows\system32\Tasks
2011-08-19 20:56:50 ----D---- C:\Program Files (x86)\VstPlugins
2011-08-19 15:32:25 ----D---- C:\Users\michal\AppData\Roaming\dvdcss
2011-08-19 10:07:28 ----A---- C:\Windows\KA.ini
2011-08-17 19:59:04 ----D---- C:\Users\michal\AppData\Roaming\InImages
2011-08-15 17:57:47 ----D---- C:\ProgramData
2011-08-15 11:50:23 ----D---- C:\Users\michal\AppData\Roaming\Mp3tag
2011-08-14 20:32:29 ----RSD---- C:\Windows\Fonts
2011-08-14 14:40:26 ----D---- C:\Windows\SYSWOW64\drivers
2011-08-14 14:40:26 ----D---- C:\Windows\inf
2011-08-13 16:49:53 ----D---- C:\Program Files (x86)\Java
2011-08-13 15:40:40 ----D---- C:\Users\michal\AppData\Roaming\Free Download Manager
2011-08-13 15:40:29 ----D---- C:\Windows\Minidump
2011-08-13 15:40:29 ----D---- C:\Windows\debug
2011-08-13 13:19:57 ----D---- C:\Windows\ERDNT
2011-08-12 12:01:13 ----D---- C:\Windows\system32\DriverStore
2011-08-12 11:49:23 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2011-08-11 09:35:29 ----D---- C:\Windows\Microsoft.NET
2011-08-11 08:32:52 ----D---- C:\Windows\SYSWOW64\migration
2011-08-11 08:32:52 ----D---- C:\Windows\system32\migration
2011-08-11 08:32:52 ----D---- C:\Windows\AppPatch
2011-08-11 08:32:52 ----D---- C:\Program Files\Internet Explorer
2011-08-11 08:32:52 ----D---- C:\Program Files (x86)\Internet Explorer
2011-08-10 23:37:37 ----A---- C:\Windows\system32\MRT.exe
2011-08-10 23:37:17 ----A---- C:\Windows\win.ini
2011-08-08 15:49:52 ----SD---- C:\Users\michal\AppData\Roaming\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2007-02-07 14104]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-08-07 526392]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2010-04-27 21544]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2011-06-28 123784]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2011-07-12 252344]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2011-07-12 41712]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-08-12 270912]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2011-07-12 92688]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2011-06-28 88288]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35344]
R3 appliandMP;appliandMP; C:\Windows\system32\DRIVERS\appliand.sys [2010-06-24 33888]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-26 12262336]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-09-03 2480104]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-07-27 78848]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-07-27 180224]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-09-03 349800]
S3 aaaiyumg;aaaiyumg; C:\Windows\system32\drivers\aaaiyumg.sys []
S3 appliand;Applian Network Service; C:\Windows\system32\DRIVERS\appliand.sys [2010-06-24 33888]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-06-28 269480]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-28 136360]
R2 cmdagent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-07-12 2528096]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-08-04 2329480]
S2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-07-09 75136]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2010-06-25 117264]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-04 1255736]
-----------------EOF-----------------
Run by michal at 2011-09-07 23:43:16
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 16 GB (18%) free of 90 GB
Total RAM: 3597 MB (46% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:43:18, on 7.9.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\michal.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\SysWOW64\Userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: MyPlayCity Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout Free Download Managerem - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video Free Download Managerem - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané Free Download Managerem - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše Free Download Managerem - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (cmdagent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7457 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000694
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-3954bfbe-037a-4433-9e3c-989fca9aba51 -SystemEventPortName:HostProcess-2a399b9b-181e-40cd-a221-eb086427290e -IoCancelEventPortName:HostProcess-393e0393-9861-48c4-aaec-411524e94092 -NonStateChangingEventPortName:HostProcess-a98bcdb7-26f0-4a9f-8c5f-4070acefee21 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c4cd6f29-dce4-44fa-afae-375c2dd9e2b5
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {3eef301f-b596-4c0b-bd92-013beafce793} -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\explorer.exe /factory,{682159d9-c321-47ca-b3f1-30e36b2ec8b9} -Embedding
"C:\Windows\EXPLORER.EXE"
"C:\Program Files (x86)\Opera\opera.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\michal\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\SlimDrivers Startup.job
=========Mozilla firefox=========
ProfilePath - C:\Users\michal\AppData\Roaming\Mozilla\Firefox\Profiles\fnx3sc22.default
prefs.js - "extensions.enabledItems" - "{e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
NPOFFICE.DLL
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Users\michal\AppData\Roaming\Mozilla\Firefox\Profiles\fnx3sc22.default\extensions\
toolbar@ask.com
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files (x86)\Free Download Manager\iefdm2.dll [2008-12-30 98304]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
MyPlayCity Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-08-03 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - MyPlayCity Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-09-03 11464296]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-26 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-26 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-26 418840]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-07-12 9048392]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2011-03-29 399736]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2011-08-04 1955208]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2011-01-10 281768]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2011-05-17 395144]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
""= []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-26 385024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-07-03 249344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0
"NoDriveTypeAutoRun"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0
"NoDriveTypeAutoRun"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2011-09-06 23:00:17 ----D---- C:\Users\michal\AppData\Roaming\rockbox.org
2011-09-04 16:55:21 ----D---- C:\_OTL
2011-09-03 15:34:28 ----D---- C:\Program Files (x86)\Microsoft WSE
2011-09-03 12:52:55 ----D---- C:\Program Files (x86)\DOSBox-0.74
2011-09-03 12:50:47 ----AD---- C:\Alone in the Dark
2011-09-02 14:15:46 ----D---- C:\Users\michal\AppData\Roaming\GNU Solfege
2011-09-02 14:14:47 ----D---- C:\Program Files (x86)\GNU Solfege
2011-09-02 14:04:47 ----D---- C:\Users\michal\AppData\Roaming\be.miles.FunctionalEarTrainer
2011-09-02 14:04:27 ----D---- C:\Program Files (x86)\Functional Ear Trainer
2011-08-26 09:36:58 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-08-26 09:36:58 ----A---- C:\Windows\system32\tzres.dll
2011-08-19 23:22:18 ----D---- C:\Users\michal\AppData\Roaming\Ableton
2011-08-19 23:22:03 ----A---- C:\Windows\SYSWOW64\REX Shared Library.dll
2011-08-19 23:22:03 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2011-08-19 23:22:03 ----A---- C:\Windows\SYSWOW64\msvcp71.dll
2011-08-19 23:22:03 ----A---- C:\Windows\SYSWOW64\MFC71.dll
2011-08-19 23:21:50 ----D---- C:\Program Files (x86)\Ableton
2011-08-19 20:56:49 ----D---- C:\Program Files (x86)\Arturia
2011-08-19 20:56:49 ----A---- C:\Windows\SYSWOW64\ArtFfct.dll
2011-08-19 10:06:55 ----D---- C:\Program Files (x86)\Barbie(TM) Dobrodruzstvi s konmi(TM)
2011-08-15 20:51:21 ----D---- C:\Users\michal\AppData\Roaming\cacaoweb
2011-08-15 17:58:54 ----A---- C:\Windows\SYSWOW64\SYNSOEMU.DLL
2011-08-15 17:57:47 ----D---- C:\ProgramData\VST3 Presets
2011-08-15 17:52:02 ----D---- C:\ProgramData\Steinberg
2011-08-14 19:31:32 ----D---- C:\Users\michal\AppData\Roaming\FreeCommander
2011-08-14 19:31:32 ----D---- C:\Program Files (x86)\FreeCommander
2011-08-14 18:39:34 ----D---- C:\Program Files (x86)\Gmail Notifier
2011-08-14 15:03:09 ----D---- C:\Users\michal\AppData\Roaming\Steinberg
2011-08-14 14:59:42 ----D---- C:\Users\michal\AppData\Roaming\Gmail Notifier Plus
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\rmbe3260.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\ra32sipr.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\ra32dnet.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\ra3228_8.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\ra3214_4.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\pngu3263.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\pneng50.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\pnc3250.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\msvcr70.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\msvcp70.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\encdnet.dll
2011-08-14 14:41:35 ----A---- C:\Windows\SYSWOW64\decdnet.dll
2011-08-14 14:41:08 ----D---- C:\Program Files (x86)\Steinberg
2011-08-14 14:40:26 ----A---- C:\Windows\SYSWOW64\drivers\synUSB64.sys
2011-08-14 14:40:25 ----D---- C:\Program Files (x86)\Syncrosoft
2011-08-14 14:40:25 ----A---- C:\Windows\SYSWOW64\SynsoLChk.dll
2011-08-14 14:40:25 ----A---- C:\Windows\SYSWOW64\SYNSOACC.dll
2011-08-13 23:11:27 ----D---- C:\Users\michal\AppData\Roaming\Miranda
2011-08-13 23:11:16 ----D---- C:\Program Files (x86)\Miranda IM
2011-08-13 16:49:56 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-08-13 16:49:56 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-08-13 16:49:56 ----A---- C:\Windows\SYSWOW64\java.exe
2011-08-13 14:22:41 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2011-08-13 14:19:56 ----D---- C:\Users\michal\AppData\Roaming\.minecraft
2011-08-13 14:16:30 ----A---- C:\Program Files\MinecraftSP.exe
2011-08-12 14:51:08 ----D---- C:\ProgramData\Boss Media
2011-08-12 12:33:00 ----D---- C:\Users\michal\AppData\Roaming\Plogue
2011-08-12 12:33:00 ----D---- C:\Users\michal\AppData\Roaming\Garritan
2011-08-12 12:31:41 ----D---- C:\Users\michal\AppData\Roaming\MakeMusic
2011-08-12 12:21:14 ----D---- C:\Program Files\vstplugins
2011-08-12 12:20:15 ----D---- C:\Program Files\Plogue
2011-08-12 12:20:09 ----D---- C:\Program Files\Garritan
2011-08-12 12:18:46 ----D---- C:\ProgramData\MakeMusic
2011-08-12 12:18:41 ----D---- C:\Program Files (x86)\Finale 2011
2011-08-12 11:49:23 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2011-08-11 11:04:11 ----D---- C:\Program Files (x86)\Docx Reader
2011-08-10 23:33:51 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-10 23:33:50 ----A---- C:\Windows\SYSWOW64\url.dll
2011-08-10 23:33:50 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-08-10 23:33:50 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-08-10 23:33:50 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-08-10 23:33:50 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-08-10 23:33:50 ----A---- C:\Windows\system32\url.dll
2011-08-10 23:33:50 ----A---- C:\Windows\system32\jscript9.dll
2011-08-10 23:33:50 ----A---- C:\Windows\system32\ieui.dll
2011-08-10 23:33:50 ----A---- C:\Windows\system32\iertutil.dll
2011-08-10 23:33:49 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-08-10 23:33:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-08-10 23:33:49 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-08-10 23:33:49 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-08-10 23:33:49 ----A---- C:\Windows\system32\wininet.dll
2011-08-10 23:33:49 ----A---- C:\Windows\system32\urlmon.dll
2011-08-10 23:33:49 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-10 23:33:49 ----A---- C:\Windows\system32\jscript.dll
2011-08-10 23:33:48 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-08-10 23:33:47 ----A---- C:\Windows\system32\mshtml.dll
2011-08-10 23:33:46 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-08-10 23:33:46 ----A---- C:\Windows\system32\ieframe.dll
2011-08-10 21:22:29 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-08-10 21:22:29 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-08-10 21:22:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-08-10 21:11:20 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2011-08-10 21:11:20 ----A---- C:\Windows\system32\xmllite.dll
2011-08-10 21:11:19 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-08-10 21:11:19 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\system32\odbctrac.dll
2011-08-10 21:11:19 ----A---- C:\Windows\system32\odbccu32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\system32\odbccr32.dll
2011-08-10 21:11:19 ----A---- C:\Windows\system32\odbccp32.dll
2011-08-10 21:11:18 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-08-10 21:11:14 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-08-10 21:11:14 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-08-10 21:11:14 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-08-10 21:11:14 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-08-10 21:11:14 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-08-10 21:11:14 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\wow64win.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\wow64cpu.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\wow64.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\winsrv.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\ntvdm64.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\KernelBase.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\kernel32.dll
2011-08-10 21:11:14 ----A---- C:\Windows\system32\conhost.exe
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-08-10 21:11:13 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-08-10 21:11:13 ----A---- C:\Windows\SYSWOW64\user.exe
2011-08-10 21:11:13 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-08-10 21:11:10 ----A---- C:\Windows\system32\drivers\tcpip.sys
======List of files/folders modified in the last 1 month======
2011-09-07 23:43:18 ----D---- C:\Windows\Prefetch
2011-09-07 23:43:17 ----D---- C:\Program Files\trend micro
2011-09-07 23:40:52 ----A---- C:\UsbFix.txt
2011-09-07 22:37:49 ----D---- C:\UsbFix
2011-09-07 22:37:49 ----D---- C:\Autorun.inf
2011-09-07 22:37:47 ----SHD---- C:\$RECYCLE.BIN
2011-09-07 22:35:46 ----A---- C:\Windows\SYSWOW64\log.txt
2011-09-07 22:35:31 ----D---- C:\Users\michal\AppData\Roaming\uTorrent
2011-09-07 22:23:38 ----D---- C:\Windows\System32
2011-09-07 22:23:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-09-07 21:38:24 ----SHD---- C:\System Volume Information
2011-09-07 20:42:12 ----D---- C:\Windows\temp
2011-09-07 20:36:23 ----D---- C:\Windows\system32\drivers
2011-09-07 19:57:04 ----D---- C:\Windows\system32\config
2011-09-06 05:42:33 ----D---- C:\Users\michal\AppData\Roaming\foobar2000
2011-09-05 18:31:03 ----D---- C:\Windows
2011-09-04 19:48:17 ----RD---- C:\Program Files
2011-09-04 19:46:33 ----D---- C:\Users\michal\AppData\Roaming\Media Player Classic
2011-09-04 19:43:03 ----RD---- C:\Program Files (x86)
2011-09-04 19:43:03 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-09-04 12:55:19 ----D---- C:\Program Files (x86)\AC
2011-09-03 15:34:35 ----SHD---- C:\Windows\Installer
2011-09-03 15:34:35 ----RSD---- C:\Windows\assembly
2011-09-03 12:57:49 ----SD---- C:\ProgramData\Microsoft
2011-09-02 23:10:30 ----D---- C:\Users\michal\AppData\Roaming\Audacity
2011-09-02 14:04:37 ----D---- C:\ProgramData\Adobe
2011-09-02 14:04:29 ----D---- C:\Program Files (x86)\Common Files
2011-09-02 14:04:29 ----D---- C:\Program Files (x86)\Adobe
2011-09-02 13:42:59 ----D---- C:\Users\michal\AppData\Roaming\Adobe
2011-09-01 18:11:39 ----D---- C:\Program Files (x86)\Opera
2011-08-28 11:29:51 ----D---- C:\Windows\rescache
2011-08-28 09:08:37 ----D---- C:\Windows\winsxs
2011-08-28 09:08:32 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-08-28 09:08:32 ----D---- C:\Windows\SysWOW64
2011-08-28 09:08:32 ----D---- C:\Windows\system32\cs-CZ
2011-08-26 09:36:13 ----D---- C:\Windows\system32\catroot2
2011-08-26 09:36:13 ----D---- C:\Windows\system32\catroot
2011-08-19 23:39:25 ----D---- C:\Windows\system32\Tasks
2011-08-19 20:56:50 ----D---- C:\Program Files (x86)\VstPlugins
2011-08-19 15:32:25 ----D---- C:\Users\michal\AppData\Roaming\dvdcss
2011-08-19 10:07:28 ----A---- C:\Windows\KA.ini
2011-08-17 19:59:04 ----D---- C:\Users\michal\AppData\Roaming\InImages
2011-08-15 17:57:47 ----D---- C:\ProgramData
2011-08-15 11:50:23 ----D---- C:\Users\michal\AppData\Roaming\Mp3tag
2011-08-14 20:32:29 ----RSD---- C:\Windows\Fonts
2011-08-14 14:40:26 ----D---- C:\Windows\SYSWOW64\drivers
2011-08-14 14:40:26 ----D---- C:\Windows\inf
2011-08-13 16:49:53 ----D---- C:\Program Files (x86)\Java
2011-08-13 15:40:40 ----D---- C:\Users\michal\AppData\Roaming\Free Download Manager
2011-08-13 15:40:29 ----D---- C:\Windows\Minidump
2011-08-13 15:40:29 ----D---- C:\Windows\debug
2011-08-13 13:19:57 ----D---- C:\Windows\ERDNT
2011-08-12 12:01:13 ----D---- C:\Windows\system32\DriverStore
2011-08-12 11:49:23 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2011-08-11 09:35:29 ----D---- C:\Windows\Microsoft.NET
2011-08-11 08:32:52 ----D---- C:\Windows\SYSWOW64\migration
2011-08-11 08:32:52 ----D---- C:\Windows\system32\migration
2011-08-11 08:32:52 ----D---- C:\Windows\AppPatch
2011-08-11 08:32:52 ----D---- C:\Program Files\Internet Explorer
2011-08-11 08:32:52 ----D---- C:\Program Files (x86)\Internet Explorer
2011-08-10 23:37:37 ----A---- C:\Windows\system32\MRT.exe
2011-08-10 23:37:17 ----A---- C:\Windows\win.ini
2011-08-08 15:49:52 ----SD---- C:\Users\michal\AppData\Roaming\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2007-02-07 14104]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-08-07 526392]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2010-04-27 21544]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2011-06-28 123784]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2011-07-12 252344]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2011-07-12 41712]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-08-12 270912]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2011-07-12 92688]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2011-06-28 88288]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35344]
R3 appliandMP;appliandMP; C:\Windows\system32\DRIVERS\appliand.sys [2010-06-24 33888]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-26 12262336]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-09-03 2480104]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-07-27 78848]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-07-27 180224]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-09-03 349800]
S3 aaaiyumg;aaaiyumg; C:\Windows\system32\drivers\aaaiyumg.sys []
S3 appliand;Applian Network Service; C:\Windows\system32\DRIVERS\appliand.sys [2010-06-24 33888]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-06-28 269480]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-28 136360]
R2 cmdagent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-07-12 2528096]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-08-04 2329480]
S2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-07-09 75136]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2010-06-25 117264]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-04 1255736]
-----------------EOF-----------------
Re: Autorun.inf
Spustte znovu USBFix a dejte volbu vaccinate s OTL jste provadel co prosim 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Autorun.inf
Provedl jsem. V OTL jsme s jedním moderatorem řešili problém ohlédně registru řídící asociace souboru .exe.
Re: Autorun.inf
Jop, uz vidim, kolega Naughty Jak se chova PC nyni "Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Autorun.inf
Avira teď nešílí. Myslím,že by to mělo být v pořádku. Děkují moc!
Re: Autorun.inf
T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
OTC http://oldtimer.geekstogo.com/OTC.exe
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
TFC http://oldtimer.geekstogo.com/TFC.exe
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Stahnete Ccleaner (viz muj podpis)Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
A je to vse 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.
Přispějete na provoz fóra?