Kód: Vybrat vše
27.2.2012 10:21:29 Kontrola při startu boot sektor aktivní boot sektor 0. fyzického disku pravděpodobně neznámý TSR.BOOT virus nelze léčitTen NTB mám něco přes měsíc, je to Acer, takže po zakoupení byl našlapaný acer-bordelem, který jsem z větší části odinstaloval. Dneska po probuzení z hibernace se objevilo tohle (bežně jej jen uspávám, ale tentokrát mi došla baterka). V pátek jsem dělal aktualizace Win.
Nevím, jestli je to podstatné, ale disk je SSD.
Přikládám log z RSIT:
Hledal jsem na fóru mezi podobnými problémy, ale nic z toho nesedělo na můj problém.Logfile of random's system information tool 1.09 (written by random/random)
Run by bukaJ at 2012-02-27 10:37:17
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 20 GB (20%) free of 99 GB
Total RAM: 8044 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:37:24, on 27.2.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\SQLyog Community\SQLyogCommunity.exe
C:\Program Files (x86)\Winamp\winamp.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\cvh.exe
C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe
C:\Program Files (x86)\NetBeans 7.1\bin\netbeans.exe
C:\Program Files (x86)\Acer\Acer VCM\Vc.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\bin\SysInt\procexp.exe
C:\Program Files\trend micro\bukaJ.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 81.0.235.166 domino.cz http://www.domino.cz
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: DebugBar BHO - {69FC0024-10EB-480A-BBF2-3BF4E78E17B1} - C:\Program Files (x86)\Core Services\DebugBar\DebugInfoBar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: DebugBar (Toolbar) - {3E1201F4-1707-409F-BB45-A5F192381DA0} - C:\Program Files (x86)\Core Services\DebugBar\DebugToolBar.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\bukaJ\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Global Startup: Acer VCM.lnk = ?
O4 - Global Startup: Monitor Apache Servers.lnk = C:\bin\Apache\bin\ApacheMonitor.exe
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Acer\Acer VCM\Skype4COM.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apache2.2 - Apache Software Foundation - C:\bin\Apache\bin\httpd.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: @C:\Windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: hMailServer - hMailServer - C:\Program Files (x86)\hMailServer\Bin\hMailServer.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MySQL - Unknown owner - C:\bin\mysql\bin\mysqld (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung UPD Service - Unknown owner - C:\Windows\System32\SUPDSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: stunnel - Michal Trojnara - C:\bin\stunnel\stunnel.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Vodafone Mobile Connect Service (VmbService) - Vodafone - C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10609 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\bin\Apache\bin\httpd.exe" -k runservice
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\Windows\system32\CxAudMsg64.exe
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\hMailServer\Bin\hMailServer.exe" RunAsService
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\bin\mysql\bin\mysqld" --defaults-file="C:\bin\mysql\my.ini" MySQL
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\bin\stunnel\stunnel.exe" -service -install
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe"
C:\bin\Apache\bin\httpd.exe -d C:/bin/Apache -f C:\bin\Apache\conf\httpd.conf -d C:\bin\Apache\.
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\bin\Apache\bin\ApacheMonitor.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\DOLBY PCEE4\pcee4.exe" -autostart
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\totalcmd\TOTALCMD.EXE"
"C:\Program Files (x86)\SQLyog Community\SQLyogCommunity.exe"
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Winamp\winamp.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\igfxsrvc.exe -Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\cvh.exe" "Microsoft Word Starter 2010 9014006604050000" /n "C:\Users\bukaJ\AppData\Local\Temp\Facebook.docx"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe" /start IDLE_APP_EVENT_{90140011-0066-0405-0000-0000000FF1CE}
"C:\Program Files (x86)\NetBeans 7.1\bin\netbeans.exe"
"C:\Program Files (x86)\Acer\Acer VCM\Vc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5168.19f6b4c0.1610084283 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 5168 "\\.\pipe\gecko-crash-server-pipe.5168" plugin
"C:\bin\SysInt\procexp.exe"
"C:\bin\SysInt\procexp.exe"
taskeng.exe {E7C4F567-567C-4E58-B70B-5C1C8078F356}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe156_ Global\UsGthrCtrlFltPipeMssGthrPipe156 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"c:\program files\windows defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey FB490EAB-F7AE-C272-E3A5-3E258C4A10D2 -Reinvoke
"C:\Users\bukaJ\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-50921528-883338473-2738170126-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-50921528-883338473-2738170126-1001UA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\bukaJ\AppData\Roaming\Mozilla\Firefox\Profiles\7bjrtyh3.default
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Users\bukaJ\AppData\Roaming\Mozilla\Firefox\Profiles\7bjrtyh3.default\extensions\
cs@dictionaries.addons.mozilla.org
dnssec@nic.cz
screencaptureelite@plugin
{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69FC0024-10EB-480A-BBF2-3BF4E78E17B1}]
DebugBar BHO - C:\Program Files (x86)\Core Services\DebugBar\DebugInfoBar.dll [2012-02-03 4082688]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2011-12-23 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-03 60576]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-12-23 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{3E1201F4-1707-409F-BB45-A5F192381DA0} - DebugBar (Toolbar) - C:\Program Files (x86)\Core Services\DebugBar\DebugToolBar.dll [2012-02-03 878592]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs []
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2010-11-12 2588968]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-03-03 615584]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-03-03 379552]
"Power Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2011-03-28 499304]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-10-21 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-10-21 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-10-21 416024]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-01-12 2918656]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\bukaJ\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-23 136176]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-01-13 283160]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-03-14 1081424]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]
"Dolby Home Theater v4"=C:\Dolby PCEE4\pcee4.exe [2011-02-03 506712]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Acer VCM.lnk - C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
Monitor Apache Servers.lnk - C:\bin\Apache\bin\ApacheMonitor.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-10-21 390144]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - C:\Windows\NOTEPAD.EXE %1
======List of files/folders created in the last 1 month======
2012-02-27 10:37:17 ----D---- C:\rsit
2012-02-27 10:37:17 ----D---- C:\Program Files\trend micro
2012-02-21 14:53:36 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2012-02-21 14:53:36 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2012-02-21 14:53:33 ----D---- C:\Program Files (x86)\hMailServer
2012-02-21 14:53:33 ----A---- C:\Windows\SYSWOW64\atl70.dll
2012-02-21 13:59:18 ----D---- C:\Users\bukaJ\AppData\Roaming\Miranda
2012-02-21 13:58:49 ----D---- C:\Program Files (x86)\Miranda IM
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\zh-TW
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\zh-CN
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\tr-TR
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\th-TH
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\sv-SE
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\ru-RU
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\ro-RO
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\pt-PT
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\pt-BR
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\pl-PL
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\nl-NL
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\nb-NO
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\ko-KR
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\ja-JP
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\it-IT
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\hu-HU
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\he-IL
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\fr-FR
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\fi-FI
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\es-ES
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\el-GR
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\de-DE
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\da-DK
2012-02-21 09:23:32 ----D---- C:\Windows\system32\drivers\ar-SA
2012-02-21 09:23:32 ----D---- C:\Program Files (x86)\Windows Virtual PC
2012-02-21 09:22:29 ----A---- C:\Windows\system32\drivers\vpcnfltr.sys
2012-02-21 09:22:28 ----A---- C:\Windows\SYSWOW64\vmsal.exe
2012-02-21 09:22:28 ----A---- C:\Windows\system32\VPCWizard.exe
2012-02-21 09:22:27 ----A---- C:\Windows\system32\vpchbuspipe.dll
2012-02-21 09:22:27 ----A---- C:\Windows\system32\VPCSettings.exe
2012-02-21 09:22:27 ----A---- C:\Windows\system32\VMCPropertyHandler.dll
2012-02-21 09:22:27 ----A---- C:\Windows\system32\drivers\vpchbus.sys
2012-02-21 09:22:27 ----A---- C:\Windows\system32\drivers\vpcvmm.sys
2012-02-21 09:22:27 ----A---- C:\Windows\system32\drivers\vpcusb.sys
2012-02-21 09:22:26 ----A---- C:\Windows\system32\vpc.exe
2012-02-21 09:22:26 ----A---- C:\Windows\system32\VMWindow.exe
2012-02-21 09:22:26 ----A---- C:\Windows\system32\vmsal.exe
2012-02-21 09:15:01 ----D---- C:\Program Files\Windows XP Mode
2012-02-20 15:13:01 ----D---- C:\Program Files (x86)\MSECache
2012-02-20 10:33:43 ----D---- C:\Program Files (x86)\Core Services
2012-02-16 13:53:06 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-02-16 13:53:06 ----A---- C:\Windows\system32\mshtmled.dll
2012-02-16 13:53:06 ----A---- C:\Windows\system32\iertutil.dll
2012-02-16 13:53:05 ----A---- C:\Windows\SYSWOW64\url.dll
2012-02-16 13:53:05 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-02-16 13:53:05 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-02-16 13:53:05 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-02-16 13:53:05 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-02-16 13:53:05 ----A---- C:\Windows\system32\url.dll
2012-02-16 13:53:05 ----A---- C:\Windows\system32\jscript9.dll
2012-02-16 13:53:05 ----A---- C:\Windows\system32\jscript.dll
2012-02-16 13:53:05 ----A---- C:\Windows\system32\ieui.dll
2012-02-16 13:53:04 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-02-16 13:53:04 ----A---- C:\Windows\system32\urlmon.dll
2012-02-16 13:53:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-02-16 13:53:03 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-02-16 13:53:03 ----A---- C:\Windows\system32\wininet.dll
2012-02-16 13:53:03 ----A---- C:\Windows\system32\jsproxy.dll
2012-02-16 13:53:02 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-02-16 13:53:01 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-02-16 13:53:01 ----A---- C:\Windows\system32\mshtml.dll
2012-02-16 13:53:00 ----A---- C:\Windows\system32\ieframe.dll
2012-02-16 10:15:33 ----A---- C:\Windows\system32\shell32.dll
2012-02-16 10:15:28 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-02-16 10:15:27 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-02-16 10:15:27 ----A---- C:\Windows\system32\ntshrui.dll
2012-02-16 10:15:18 ----A---- C:\Windows\system32\win32k.sys
2012-02-16 10:15:18 ----A---- C:\Windows\system32\drivers\afd.sys
2012-02-16 10:15:14 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-02-16 10:15:14 ----A---- C:\Windows\system32\msvcrt.dll
2012-02-15 15:13:57 ----D---- C:\Program Files\TortoiseSVN
2012-02-15 15:13:57 ----D---- C:\Program Files\Common Files\TortoiseOverlays
======List of files/folders modified in the last 1 month======
2012-02-27 10:37:24 ----D---- C:\Windows\Temp
2012-02-27 10:37:17 ----RD---- C:\Program Files
2012-02-27 10:35:43 ----D---- C:\Windows\system32\drivers
2012-02-27 10:23:26 ----D---- C:\Users\bukaJ\AppData\Roaming\Skype
2012-02-27 09:30:03 ----D---- C:\Windows\system32\config
2012-02-26 19:25:29 ----D---- C:\Windows\system32\NDF
2012-02-26 05:26:03 ----D---- C:\Users\bukaJ\AppData\Roaming\SQLyog
2012-02-26 03:16:35 ----D---- C:\Users\bukaJ\AppData\Roaming\XnView
2012-02-24 14:23:24 ----D---- C:\ProgramData\Microsoft Help
2012-02-24 14:19:00 ----D---- C:\Windows\System32
2012-02-24 14:19:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-02-24 14:18:59 ----D---- C:\Windows\inf
2012-02-24 11:39:07 ----D---- C:\Windows\rescache
2012-02-24 10:44:38 ----A---- C:\Windows\SYSWOW64\log.txt
2012-02-24 10:44:09 ----D---- C:\Windows\system32\wdi
2012-02-24 07:58:21 ----SHD---- C:\Windows\Installer
2012-02-24 07:58:14 ----SHD---- C:\System Volume Information
2012-02-22 15:20:40 ----D---- C:\Users\bukaJ\AppData\Roaming\KeePass
2012-02-21 14:53:37 ----RSD---- C:\Windows\assembly
2012-02-21 14:53:36 ----RD---- C:\Program Files (x86)
2012-02-21 14:53:33 ----D---- C:\Windows\SysWOW64
2012-02-21 09:24:37 ----D---- C:\Windows\winsxs
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\zh-TW
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\zh-CN
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\tr-TR
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\th-TH
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\sv-SE
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\ru-RU
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\ro-RO
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\pt-PT
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\pt-BR
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\pl-PL
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\nl-NL
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\nb-NO
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\ko-KR
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\ja-JP
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\it-IT
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\hu-HU
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\he-IL
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\fr-FR
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\fi-FI
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\es-ES
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\en-US
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\el-GR
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\de-DE
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\da-DK
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-02-21 09:23:33 ----D---- C:\Windows\SYSWOW64\ar-SA
2012-02-21 09:23:33 ----D---- C:\Windows\system32\zh-TW
2012-02-21 09:23:33 ----D---- C:\Windows\system32\zh-CN
2012-02-21 09:23:33 ----D---- C:\Windows\system32\tr-TR
2012-02-21 09:23:33 ----D---- C:\Windows\system32\th-TH
2012-02-21 09:23:33 ----D---- C:\Windows\system32\sv-SE
2012-02-21 09:23:33 ----D---- C:\Windows\system32\ru-RU
2012-02-21 09:23:33 ----D---- C:\Windows\system32\ro-RO
2012-02-21 09:23:33 ----D---- C:\Windows\system32\pt-PT
2012-02-21 09:23:33 ----D---- C:\Windows\system32\pt-BR
2012-02-21 09:23:33 ----D---- C:\Windows\system32\pl-PL
2012-02-21 09:23:33 ----D---- C:\Windows\system32\nl-NL
2012-02-21 09:23:33 ----D---- C:\Windows\system32\nb-NO
2012-02-21 09:23:33 ----D---- C:\Windows\system32\ko-KR
2012-02-21 09:23:33 ----D---- C:\Windows\system32\ja-JP
2012-02-21 09:23:33 ----D---- C:\Windows\system32\it-IT
2012-02-21 09:23:33 ----D---- C:\Windows\system32\hu-HU
2012-02-21 09:23:33 ----D---- C:\Windows\system32\he-IL
2012-02-21 09:23:33 ----D---- C:\Windows\system32\fr-FR
2012-02-21 09:23:33 ----D---- C:\Windows\system32\fi-FI
2012-02-21 09:23:33 ----D---- C:\Windows\system32\es-ES
2012-02-21 09:23:33 ----D---- C:\Windows\system32\en-US
2012-02-21 09:23:33 ----D---- C:\Windows\system32\el-GR
2012-02-21 09:23:33 ----D---- C:\Windows\system32\drivers\en-US
2012-02-21 09:23:33 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-02-21 09:23:33 ----D---- C:\Windows\system32\de-DE
2012-02-21 09:23:33 ----D---- C:\Windows\system32\da-DK
2012-02-21 09:23:33 ----D---- C:\Windows\system32\cs-CZ
2012-02-21 09:23:33 ----D---- C:\Windows\system32\ar-SA
2012-02-21 09:23:32 ----D---- C:\Windows\system32\DriverStore
2012-02-21 09:23:28 ----D---- C:\Users\bukaJ\AppData\Roaming\SoftGrid Client
2012-02-21 09:23:15 ----D---- C:\Windows
2012-02-21 09:22:54 ----D---- C:\Windows\system32\catroot2
2012-02-21 09:22:54 ----D---- C:\Windows\system32\catroot
2012-02-21 06:58:55 ----D---- C:\Users\bukaJ\AppData\Roaming\.dsgui
2012-02-18 20:55:23 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2012-02-17 17:16:36 ----SD---- C:\Users\bukaJ\AppData\Roaming\Microsoft
2012-02-17 15:01:41 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-02-16 18:31:34 ----D---- C:\Windows\Microsoft.NET
2012-02-16 14:02:06 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-02-16 14:01:36 ----D---- C:\Windows\SYSWOW64\migration
2012-02-16 14:01:36 ----D---- C:\Windows\system32\migration
2012-02-16 14:01:36 ----D---- C:\Program Files\Internet Explorer
2012-02-16 14:01:36 ----D---- C:\Program Files (x86)\Internet Explorer
2012-02-16 13:53:38 ----A---- C:\Windows\system32\MRT.exe
2012-02-15 15:13:58 ----D---- C:\Program Files (x86)\Common Files
2012-02-15 15:13:57 ----D---- C:\Program Files\Common Files
2012-01-29 05:10:42 ----N---- C:\Windows\system32\MpSigStub.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 BMLoad;Bytemobile Boot Time Load Driver; C:\Windows\system32\drivers\BMLoad.sys [2011-12-30 16512]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-01-13 439320]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-02-21 25960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 tcpipBM;Bytemobile Kernel Network Provider; \??\C:\Windows\system32\drivers\tcpipBM.sys [2011-12-30 39552]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-12-21 170640]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-12-21 50624]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-03-03 36000]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-11 2229608]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-03-03 298656]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-03-03 28832]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-03-03 201376]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-03-03 55456]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-03-03 154272]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-03-03 280224]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2011-03-25 1583744]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-12-21 34144]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-11-12 138024]
R3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys [2010-12-30 85504]
R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2010-12-30 219008]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-10-21 12310112]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-11-08 76912]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2010-10-20 56344]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-09-30 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-09-30 180736]
R3 PROCEXP151;PROCEXP151; \??\C:\Windows\system32\Drivers\PROCEXP151.SYS []
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2011-01-12 333928]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2009-12-02 721768]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2009-12-02 269672]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2009-12-02 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2009-12-02 22376]
R3 vodafone_K3805-z_dc_enum;vodafone_K3805-z_dc_enum; C:\Windows\system32\DRIVERS\vodafone_K3805-z_dc_enum.sys [2010-09-01 75776]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-03-10 17408]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 Apache2.2;Apache2.2; C:\bin\Apache\bin\httpd.exe [2011-09-24 21504]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-03-03 76448]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 CxAudMsg;@C:\Windows\system32\CxAudMsg64.exe,-100; C:\Windows\system32\CxAudMsg64.exe [2010-12-17 198784]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-03-14 352336]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-01-12 810144]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2011-03-28 799848]
R2 hMailServer;hMailServer; C:\Program Files (x86)\hMailServer\Bin\hMailServer.exe [2010-06-07 5395968]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-13 13336]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2010-12-27 1817088]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-01-31 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 MySQL;MySQL; C:\bin\mysql\bin\mysqld --defaults-file=C:\bin\mysql\my.ini MySQL []
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-02-15 257344]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-02-18 993896]
R2 RS_Service;Raw Socket Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [2010-01-30 260640]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-02 483688]
R2 stunnel;stunnel; C:\bin\stunnel\stunnel.exe [2011-12-03 117248]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R2 VmbService;Vodafone Mobile Connect Service; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [2010-12-31 9216]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-11-19 4925184]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-02 209768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2011-01-12 42360]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 Samsung UPD Service;Samsung UPD Service; C:\Windows\System32\SUPDSvc.exe [2010-08-09 166704]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-23 1255736]
S4 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-05-28 655624]
S4 uvnc_service;uvnc_service; C:\Program Files\UltraVNC\WinVNC.exe [2011-05-18 2169592]
-----------------EOF-----------------
Díky, Jakub
Přispějete na provoz fóra?