Tady je log. V 9:00 musim mazat do špitálu na kontrolu, tak se omlouvám pokud mne bude odpověď trvat déle.
SystemLook 30.07.11 by jpshortstuff
Log created at 08:33 on 15/06/2012 by Radek
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.
========== filefind ==========
Searching for "services.exe"
C:\Windows\ERDNT\cache64\services.exe --a---- 328704 bytes [18:40 13/06/2012] [01:39 14/07/2009] 24ACB7E5BE595468E3B9AA488B9B4FCB
C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe --a---- 328704 bytes [23:19 13/07/2009] [01:39 14/07/2009] 24ACB7E5BE595468E3B9AA488B9B4FCB
-= EOF =-
Trojan WIN32Generic!BT - Nerf
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Trojan WIN32Generic!BT - Nerf
Logy jiz vypadaji ciste, jak se chova nas pacient 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Trojan WIN32Generic!BT - Nerf
Uf, teď jsem dorazil. Notas naběhl v pohodě, vše funguje. Musím povypínat těch 40 zbytečně běžících procesů, aktivovat Comodo a uvidím. Je comodo ve verzi antivir,snadbox,defense a firewall dostačující jako ochrana? Uživatel je laik a tak nemůžu nastavit vše v comodu jak bych chtěl.
EDIT: všechno frčí, comodo nebéká že je něco špatně. Díky moc a doufám, že se dotyčná osoba poučí a bude si dávat bacha.
EDIT: všechno frčí, comodo nebéká že je něco špatně. Díky moc a doufám, že se dotyčná osoba poučí a bude si dávat bacha.
Re: Trojan WIN32Generic!BT - Nerf
Odinstalujte Combofix
- Prejmenujte ComboFix na Uninstall
- Spustte jej
- Tohle smaze Combofix a jeho slozky
T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
OTC http://oldtimer.geekstogo.com/OTC.exe
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
TFC http://oldtimer.geekstogo.com/TFC.exe
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
Poprosim o novy log z RSIT"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Trojan WIN32Generic!BT - Nerf
Díky za pokračování, ale musel jsem noťas vrátit. Domluvím se s dotyčným a včechno provedu dle návodu, akorát to nebude hned. Doufám, že to nevadí. Díky
Edit: existuje nějaký nějaký soupis toho, co má ve woknech běžet a nebo musíš celý log položku po položce prohlédnout, aby jsi našel co tam nepatří? Některé viry se dají poznat, ale ten kdo třeba nepřijde do styku s hrami, tak ani netuší co je například Punkbuster a jeho dva další podprocesy a tak ho klidně může zaměnit za vir. Když jsem viděl ty nesmysly co na tom notebooku běžely od asusu, intelu atd. tak mne šla hlava kolem. U notebooku je s tímhle marastem asi problém všeobecně, stačí jedna tiskárna HP a najednou přibyde i šest běžících procesů
Kde a jak se dá naučit číst logy a použít ten správný sw?
Edit: existuje nějaký nějaký soupis toho, co má ve woknech běžet a nebo musíš celý log položku po položce prohlédnout, aby jsi našel co tam nepatří? Některé viry se dají poznat, ale ten kdo třeba nepřijde do styku s hrami, tak ani netuší co je například Punkbuster a jeho dva další podprocesy a tak ho klidně může zaměnit za vir. Když jsem viděl ty nesmysly co na tom notebooku běžely od asusu, intelu atd. tak mne šla hlava kolem. U notebooku je s tímhle marastem asi problém všeobecně, stačí jedna tiskárna HP a najednou přibyde i šest běžících procesů
Kde a jak se dá naučit číst logy a použít ten správný sw?Re: Trojan WIN32Generic!BT - Nerf
Az se dostanete k notesu, tak provedte co jsem psal - je to jen uklid po pouzitych programech Logy je treba procist pekne radek po radku, zkuseny radce uz ma v oku co tam ma byt a co by je pochybne a je treba proverit na googlu ci nekde jinde ntb jsou specificke prave tim, ze vyrobci tam nacpou hodne sveho a kolikrat nepotrebneho SW Otazka pouziti spravneho postupu (utility atd) je uz veci zkusenosti a praxe. Jak se to naucit, mrknete treba sem http://forum.viry.cz/viewtopic.php?f=12&t=116819"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Trojan WIN32Generic!BT - Nerf
Zdravím, konečně se mi notebook dostal do pracek. Snad bude všechno v pořádku, zítra ráno ho musím odevzdat.
Log RSIT
Logfile of random's system information tool 1.09 (written by random/random)
Run by Radek at 2012-06-25 17:18:00
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 153 GB (75%) free of 205 GB
Total RAM: 6054 MB (74% free)
HijackThis download failed
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
winlogon.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WLANExt.exe 22288064
\??\C:\Windows\system32\conhost.exe "936715311-143248887132690919-1865315186237935703-3551439062059944275-1050266041
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\TurboBoost\TurboBoost.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
C:\Windows\servicing\TrustedInstaller.exe
"taskhost.exe"
taskeng.exe {123CC00E-B9D8-4B64-9AB5-F30B9C3E3F22}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
taskeng.exe {803F0BA5-CCE6-47D4-839D-EB22E3A6CEA1}
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SF3
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe"
"C:\Program Files (x86)\ASUS\APRP\aprp.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\SysWOW64\ACEngSvr.exe -Embedding
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
C:\Windows\system32\wbem\wmiprvse.exe
ATKOSD.exe
KBFiltr.exe
WDC.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\DeviceDisplayObjectProvider.exe -Embedding
"C:\Windows\system32\wuauclt.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-421a5662-c090-4401-88eb-abb00b27931f -SystemEventPortName:HostProcess-57b14bd3-f518-47fa-9787-2b6a184ed9c0 -IoCancelEventPortName:HostProcess-343fa9ed-def3-4717-bbc1-ea749a4b080b -NonStateChangingEventPortName:HostProcess-7074fe34-4440-4f3d-91f4-9acb7b9db367 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a56964a5-99d9-4973-a936-0343b0056059
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Radek\Desktop\RSITx64.exe"
"C:\Windows\system32\rundll32.exe" "C:\Windows\system32\WININET.dll",DispatchAPICall 1
======Scheduled tasks folder======
C:\Windows\tasks\FreeFileViewerUpdateChecker.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-04-01 346736]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll [2011-04-01 318960]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-04-01 256112]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17 3855520]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2011-04-01 761840]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2011-04-01 458736]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-04-01 346736]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-04-01 256112]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]
{98889811-442D-49dd-99D7-DC866BE87DBC}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-06-03 2226280]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-05-05 2785064]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2011-05-05 97064]
"IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs []
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-03-11 9569096]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-07-07 12558440]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-04-12 392472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AmIcoSinglun64]
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-03-21 361984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2011-09-02 3058304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2010-11-12 75048]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BTMTrayAgent]
C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [2011-03-30 10372368]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelPAN]
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-05-02 1935120]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl10]
C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2010-02-03 87336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wireless Console 3]
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-09-24 1601536]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-21 5716608]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2010-10-07 170624]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"SonicMasterTray"=C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [2010-07-10 984400]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2011-04-01 2018032]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll C:\Windows\System32\guard64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-04-10 385024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-03-28 249344]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RkHit.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2012-06-25 17:18:00 ----D---- C:\rsit
2012-06-25 17:18:00 ----D---- C:\Program Files\trend micro
2012-06-22 23:16:59 ----A---- C:\Windows\system32\wups2.dll
2012-06-22 23:16:59 ----A---- C:\Windows\system32\wucltux.dll
2012-06-22 23:16:59 ----A---- C:\Windows\system32\wuaueng.dll
2012-06-22 23:16:59 ----A---- C:\Windows\system32\wuauclt.exe
2012-06-22 23:16:46 ----A---- C:\Windows\system32\wups.dll
2012-06-22 23:16:46 ----A---- C:\Windows\system32\wudriver.dll
2012-06-22 23:16:46 ----A---- C:\Windows\system32\wuapi.dll
2012-06-22 23:16:35 ----A---- C:\Windows\system32\wuwebv.dll
2012-06-22 23:16:35 ----A---- C:\Windows\system32\wuapp.exe
2012-06-17 10:36:51 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-06-17 10:36:50 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2012-06-17 10:36:50 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-06-17 10:36:45 ----A---- C:\Windows\system32\cryptsvc.dll
2012-06-17 10:36:45 ----A---- C:\Windows\system32\cryptnet.dll
2012-06-17 10:36:45 ----A---- C:\Windows\system32\crypt32.dll
2012-06-16 12:55:44 ----N---- C:\Windows\system32\MpSigStub.exe
2012-06-16 12:55:38 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-06-16 12:55:38 ----A---- C:\Windows\system32\msi.dll
2012-06-16 12:44:02 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-06-16 12:44:02 ----A---- C:\Windows\system32\rdpwsx.dll
2012-06-16 12:44:02 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-06-16 12:44:00 ----A---- C:\Windows\system32\profsvc.dll
2012-06-16 12:43:56 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-06-16 12:43:56 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-06-16 12:43:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-06-16 12:43:52 ----A---- C:\Windows\system32\win32k.sys
2012-06-16 12:43:51 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-06-15 14:28:20 ----A---- C:\ATKPF.ini
2012-06-14 08:15:11 ----D---- C:\Windows\temp
2012-06-14 08:11:48 ----SHD---- C:\$RECYCLE.BIN
2012-06-13 21:54:22 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-06-13 21:54:22 ----A---- C:\Windows\system32\mshtmled.dll
2012-06-13 21:54:21 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-06-13 21:54:21 ----A---- C:\Windows\SYSWOW64\url.dll
2012-06-13 21:54:21 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-06-13 21:54:21 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-06-13 21:54:21 ----A---- C:\Windows\system32\urlmon.dll
2012-06-13 21:54:21 ----A---- C:\Windows\system32\url.dll
2012-06-13 21:54:21 ----A---- C:\Windows\system32\ieui.dll
2012-06-13 21:54:21 ----A---- C:\Windows\system32\iertutil.dll
2012-06-13 21:54:20 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-06-13 21:54:20 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-06-13 21:54:20 ----A---- C:\Windows\system32\wininet.dll
2012-06-13 21:54:20 ----A---- C:\Windows\system32\ieUnatt.exe
2012-06-13 21:54:19 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-06-13 21:54:19 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-06-13 21:54:19 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-06-13 21:54:19 ----A---- C:\Windows\system32\jsproxy.dll
2012-06-13 21:54:19 ----A---- C:\Windows\system32\jscript9.dll
2012-06-13 21:54:19 ----A---- C:\Windows\system32\jscript.dll
2012-06-13 21:54:18 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-06-13 21:54:17 ----A---- C:\Windows\system32\mshtml.dll
2012-06-13 21:54:16 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-06-13 21:54:16 ----A---- C:\Windows\system32\ieframe.dll
2012-06-13 20:28:23 ----D---- C:\Windows\ERDNT
2012-06-13 15:09:02 ----D---- C:\ProgramData\GFI Software
2012-06-13 12:41:01 ----D---- C:\Users\Radek\AppData\Roaming\MAGIX
2012-06-13 12:35:27 ----A---- C:\Windows\system32\drivers\stflt.sys
2012-06-13 09:45:34 ----D---- C:\ProgramData\Lavasoft
2012-06-13 09:45:33 ----D---- C:\Program Files (x86)\Ad-Aware Antivirus
2012-06-13 09:42:51 ----D---- C:\Users\Radek\AppData\Roaming\Ad-Aware Antivirus
2012-06-12 17:04:54 ----D---- C:\VritualRoot
2012-06-12 17:01:39 ----A---- C:\Windows\system32\drivers\sfi.dat
2012-06-12 17:00:31 ----D---- C:\ProgramData\Comodo
2012-06-12 17:00:30 ----D---- C:\Program Files\COMODO
2012-06-12 15:27:59 ----D---- C:\ProgramData\CPA_VA
2012-06-12 15:15:38 ----D---- C:\Program Files (x86)\Comodo
2012-06-12 15:15:37 ----A---- C:\Windows\SYSWOW64\mfc71.dll
2012-06-12 15:15:37 ----A---- C:\Windows\SYSWOW64\gdiplus.dll
2012-06-12 14:39:25 ----D---- C:\Users\Radek\AppData\Roaming\Malwarebytes
2012-06-12 14:39:19 ----D---- C:\ProgramData\Malwarebytes
2012-06-12 14:21:51 ----D---- C:\Users\Radek\AppData\Roaming\DriverCure
2012-06-12 14:21:50 ----D---- C:\Users\Radek\AppData\Roaming\SpeedyPC Software
2012-06-12 14:21:44 ----D---- C:\ProgramData\SpeedyPC Software
2012-06-12 13:27:50 ----D---- C:\Program Files\CCleaner
2012-06-11 18:36:04 ----D---- C:\Windows\Sun
2012-06-10 23:21:49 ----RD---- C:\Kernels
2012-06-10 23:21:49 ----D---- C:\PhoenixMiner
======List of files/folders modified in the last 1 month======
2012-06-25 17:18:00 ----RD---- C:\Program Files
2012-06-25 17:09:33 ----D---- C:\Windows\SoftwareDistribution
2012-06-25 17:08:46 ----D---- C:\Windows
2012-06-25 17:08:40 ----D---- C:\Windows\inf
2012-06-25 17:08:40 ----D---- C:\Users\Radek\AppData\Roaming\Skype
2012-06-25 17:06:48 ----D---- C:\Windows\system32\config
2012-06-25 17:02:22 ----A---- C:\Windows\SYSWOW64\acovcnt.exe
2012-06-25 16:59:24 ----SHD---- C:\System Volume Information
2012-06-25 16:57:50 ----D---- C:\Windows\system32\drivers
2012-06-25 16:54:57 ----D---- C:\Windows\System32
2012-06-25 16:54:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-06-23 14:55:00 ----D---- C:\Windows\rescache
2012-06-23 09:41:27 ----SHD---- C:\Windows\Installer
2012-06-23 08:43:53 ----D---- C:\Windows\winsxs
2012-06-23 08:43:21 ----D---- C:\Windows\system32\cs-CZ
2012-06-22 23:17:11 ----D---- C:\Windows\system32\catroot
2012-06-22 23:16:53 ----D---- C:\Windows\system32\catroot2
2012-06-18 08:00:18 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-06-18 08:00:17 ----D---- C:\Windows\SysWOW64
2012-06-15 15:50:48 ----D---- C:\Windows\system32\Tasks
2012-06-15 15:50:34 ----D---- C:\Program Files (x86)\ASUS
2012-06-15 15:33:35 ----D---- C:\Windows\Prefetch
2012-06-15 15:27:19 ----SD---- C:\Users\Radek\AppData\Roaming\Microsoft
2012-06-15 15:13:51 ----D---- C:\ProgramData\Trend Micro
2012-06-15 15:12:14 ----D---- C:\Program Files (x86)\CyberLink
2012-06-15 15:11:19 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-06-15 14:04:52 ----A---- C:\Windows\SYSWOW64\log.txt
2012-06-15 08:44:18 ----RSD---- C:\Windows\assembly
2012-06-15 08:44:18 ----D---- C:\Windows\Microsoft.NET
2012-06-14 08:11:27 ----A---- C:\Windows\system.ini
2012-06-14 08:11:23 ----D---- C:\Windows\system32\drivers\etc
2012-06-14 08:09:45 ----D---- C:\ProgramData
2012-06-14 08:08:17 ----D---- C:\Windows\SYSWOW64\drivers
2012-06-14 08:08:17 ----D---- C:\Windows\AppPatch
2012-06-14 08:08:15 ----D---- C:\Program Files\Common Files
2012-06-14 08:08:15 ----D---- C:\Program Files (x86)\Common Files
2012-06-14 07:56:18 ----RD---- C:\Program Files (x86)
2012-06-14 07:56:17 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2012-06-14 07:54:10 ----D---- C:\ProgramData\USBChargerPlus
2012-06-14 07:54:09 ----DC---- C:\Windows\system32\DRVSTORE
2012-06-14 07:52:42 ----D---- C:\Program Files\P4G
2012-06-14 07:48:18 ----D---- C:\Program Files (x86)\Internet Explorer
2012-06-14 07:48:17 ----D---- C:\Windows\SYSWOW64\migration
2012-06-14 07:48:16 ----D---- C:\Windows\system32\migration
2012-06-14 07:48:16 ----D---- C:\Program Files\Internet Explorer
2012-06-13 20:40:40 ----D---- C:\Windows\Tasks
2012-06-13 12:38:00 ----D---- C:\ASUS.DAT
2012-06-13 12:17:04 ----D---- C:\ProgramData\Nuance
2012-06-13 12:16:19 ----D---- C:\Program Files (x86)\Windows Live
2012-06-13 11:59:46 ----D---- C:\Program Files (x86)\RewardsArcadeSuite
2012-06-13 09:45:41 ----D---- C:\Windows\system32\DriverStore
2012-06-13 07:25:50 ----D---- C:\ProgramData\NVIDIA
2012-06-13 00:48:54 ----D---- C:\Windows\system32\LogFiles
2012-06-12 16:59:47 ----D---- C:\Users\Radek\AppData\Roaming\Systweak
2012-06-12 15:16:26 ----SD---- C:\ProgramData\Microsoft
2012-06-12 13:28:47 ----D---- C:\Windows\Panther
2012-06-12 13:28:47 ----D---- C:\Windows\Minidump
2012-06-12 13:28:47 ----D---- C:\Windows\Logs
2012-06-12 13:28:47 ----D---- C:\Windows\debug
2012-06-11 18:53:56 ----RD---- C:\Program Files (x86)\Skype
2012-06-11 18:53:56 ----D---- C:\ProgramData\Skype
2012-06-11 09:04:16 ----D---- C:\Windows\system32\wdi
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-04-26 557848]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-06-09 25960]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2012-03-11 22696]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-03-11 577824]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-03-11 43248]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-02-03 93200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2010-11-30 16120]
R3 AMPPAL;Intel(R) Centrino(R) Bluetooth 3.0 + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2011-04-21 294912]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-01-27 125416]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-01-27 385512]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2011-03-08 51712]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2011-03-08 274944]
R3 iBtFltCoex;iBtFltCoex; C:\Windows\system32\DRIVERS\iBtFltCoex.sys [2011-03-23 59904]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-04-10 12223936]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-07-07 2914408]
R3 iwdbus;IWD Bus Enumerator; C:\Windows\system32\DRIVERS\iwdbus.sys [2011-03-24 25496]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-08-24 76912]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-05-01 8593920]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-05-05 1439792]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 SBRE;SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys []
S3 AMPPALP;Intel(R) Centrino(R) Bluetooth 3.0 + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2011-04-21 294912]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2011-03-18 74840]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2011-03-24 34200]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 31232]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2009-12-15 96896]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-03-11 2815496]
R2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2012-06-12 412304]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
R2 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-30 149504]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-05-02 340240]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-09 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S4 AMPPALR3;Intel® Centrino® Bluetooth 3.0 + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-04-21 1136640]
S4 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe [2011-06-02 64128]
S4 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
S4 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-03-30 923984]
S4 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2011-03-30 1321296]
S4 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2011-03-30 1001808]
S4 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-04-21 134928]
S4 CLKMSVC10_38F51D56;CyberLink Product - 2011/09/02 02:07:00; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2010-11-13 241648]
S4 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-05-02 1517328]
S4 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-01 135664]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-01 135664]
S4 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-04-01 182768]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-06 325656]
S4 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-05-27 1007208]
S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-27 1997416]
S4 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-01-03 66872]
S4 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-05-02 844560]
S4 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-04-17 247152]
S4 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856]
S4 Splashtop MDES;Splashtop Meta Data Export Service; C:\ASUS.SYS\SIONExportService.exe [2011-05-11 338208]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-27 378472]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
Log RSIT
Logfile of random's system information tool 1.09 (written by random/random)
Run by Radek at 2012-06-25 17:18:00
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 153 GB (75%) free of 205 GB
Total RAM: 6054 MB (74% free)
HijackThis download failed
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
winlogon.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WLANExt.exe 22288064
\??\C:\Windows\system32\conhost.exe "936715311-143248887132690919-1865315186237935703-3551439062059944275-1050266041
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\TurboBoost\TurboBoost.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
C:\Windows\servicing\TrustedInstaller.exe
"taskhost.exe"
taskeng.exe {123CC00E-B9D8-4B64-9AB5-F30B9C3E3F22}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
taskeng.exe {803F0BA5-CCE6-47D4-839D-EB22E3A6CEA1}
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SF3
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe"
"C:\Program Files (x86)\ASUS\APRP\aprp.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\SysWOW64\ACEngSvr.exe -Embedding
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
C:\Windows\system32\wbem\wmiprvse.exe
ATKOSD.exe
KBFiltr.exe
WDC.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\DeviceDisplayObjectProvider.exe -Embedding
"C:\Windows\system32\wuauclt.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-421a5662-c090-4401-88eb-abb00b27931f -SystemEventPortName:HostProcess-57b14bd3-f518-47fa-9787-2b6a184ed9c0 -IoCancelEventPortName:HostProcess-343fa9ed-def3-4717-bbc1-ea749a4b080b -NonStateChangingEventPortName:HostProcess-7074fe34-4440-4f3d-91f4-9acb7b9db367 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a56964a5-99d9-4973-a936-0343b0056059
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Radek\Desktop\RSITx64.exe"
"C:\Windows\system32\rundll32.exe" "C:\Windows\system32\WININET.dll",DispatchAPICall 1
======Scheduled tasks folder======
C:\Windows\tasks\FreeFileViewerUpdateChecker.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-04-01 346736]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll [2011-04-01 318960]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-04-01 256112]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17 3855520]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2011-04-01 761840]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2011-04-01 458736]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-04-01 346736]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-04-01 256112]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]
{98889811-442D-49dd-99D7-DC866BE87DBC}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-06-03 2226280]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-05-05 2785064]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2011-05-05 97064]
"IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs []
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-03-11 9569096]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-07-07 12558440]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-04-12 392472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AmIcoSinglun64]
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-03-21 361984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2011-09-02 3058304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2010-11-12 75048]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BTMTrayAgent]
C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [2011-03-30 10372368]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelPAN]
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-05-02 1935120]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl10]
C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2010-02-03 87336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wireless Console 3]
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-09-24 1601536]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-21 5716608]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2010-10-07 170624]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"SonicMasterTray"=C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [2010-07-10 984400]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2011-04-01 2018032]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll C:\Windows\System32\guard64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-04-10 385024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-03-28 249344]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RkHit.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2012-06-25 17:18:00 ----D---- C:\rsit
2012-06-25 17:18:00 ----D---- C:\Program Files\trend micro
2012-06-22 23:16:59 ----A---- C:\Windows\system32\wups2.dll
2012-06-22 23:16:59 ----A---- C:\Windows\system32\wucltux.dll
2012-06-22 23:16:59 ----A---- C:\Windows\system32\wuaueng.dll
2012-06-22 23:16:59 ----A---- C:\Windows\system32\wuauclt.exe
2012-06-22 23:16:46 ----A---- C:\Windows\system32\wups.dll
2012-06-22 23:16:46 ----A---- C:\Windows\system32\wudriver.dll
2012-06-22 23:16:46 ----A---- C:\Windows\system32\wuapi.dll
2012-06-22 23:16:35 ----A---- C:\Windows\system32\wuwebv.dll
2012-06-22 23:16:35 ----A---- C:\Windows\system32\wuapp.exe
2012-06-17 10:36:51 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-06-17 10:36:50 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2012-06-17 10:36:50 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-06-17 10:36:45 ----A---- C:\Windows\system32\cryptsvc.dll
2012-06-17 10:36:45 ----A---- C:\Windows\system32\cryptnet.dll
2012-06-17 10:36:45 ----A---- C:\Windows\system32\crypt32.dll
2012-06-16 12:55:44 ----N---- C:\Windows\system32\MpSigStub.exe
2012-06-16 12:55:38 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-06-16 12:55:38 ----A---- C:\Windows\system32\msi.dll
2012-06-16 12:44:02 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-06-16 12:44:02 ----A---- C:\Windows\system32\rdpwsx.dll
2012-06-16 12:44:02 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-06-16 12:44:00 ----A---- C:\Windows\system32\profsvc.dll
2012-06-16 12:43:56 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-06-16 12:43:56 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-06-16 12:43:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-06-16 12:43:52 ----A---- C:\Windows\system32\win32k.sys
2012-06-16 12:43:51 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-06-15 14:28:20 ----A---- C:\ATKPF.ini
2012-06-14 08:15:11 ----D---- C:\Windows\temp
2012-06-14 08:11:48 ----SHD---- C:\$RECYCLE.BIN
2012-06-13 21:54:22 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-06-13 21:54:22 ----A---- C:\Windows\system32\mshtmled.dll
2012-06-13 21:54:21 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-06-13 21:54:21 ----A---- C:\Windows\SYSWOW64\url.dll
2012-06-13 21:54:21 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-06-13 21:54:21 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-06-13 21:54:21 ----A---- C:\Windows\system32\urlmon.dll
2012-06-13 21:54:21 ----A---- C:\Windows\system32\url.dll
2012-06-13 21:54:21 ----A---- C:\Windows\system32\ieui.dll
2012-06-13 21:54:21 ----A---- C:\Windows\system32\iertutil.dll
2012-06-13 21:54:20 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-06-13 21:54:20 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-06-13 21:54:20 ----A---- C:\Windows\system32\wininet.dll
2012-06-13 21:54:20 ----A---- C:\Windows\system32\ieUnatt.exe
2012-06-13 21:54:19 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-06-13 21:54:19 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-06-13 21:54:19 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-06-13 21:54:19 ----A---- C:\Windows\system32\jsproxy.dll
2012-06-13 21:54:19 ----A---- C:\Windows\system32\jscript9.dll
2012-06-13 21:54:19 ----A---- C:\Windows\system32\jscript.dll
2012-06-13 21:54:18 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-06-13 21:54:17 ----A---- C:\Windows\system32\mshtml.dll
2012-06-13 21:54:16 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-06-13 21:54:16 ----A---- C:\Windows\system32\ieframe.dll
2012-06-13 20:28:23 ----D---- C:\Windows\ERDNT
2012-06-13 15:09:02 ----D---- C:\ProgramData\GFI Software
2012-06-13 12:41:01 ----D---- C:\Users\Radek\AppData\Roaming\MAGIX
2012-06-13 12:35:27 ----A---- C:\Windows\system32\drivers\stflt.sys
2012-06-13 09:45:34 ----D---- C:\ProgramData\Lavasoft
2012-06-13 09:45:33 ----D---- C:\Program Files (x86)\Ad-Aware Antivirus
2012-06-13 09:42:51 ----D---- C:\Users\Radek\AppData\Roaming\Ad-Aware Antivirus
2012-06-12 17:04:54 ----D---- C:\VritualRoot
2012-06-12 17:01:39 ----A---- C:\Windows\system32\drivers\sfi.dat
2012-06-12 17:00:31 ----D---- C:\ProgramData\Comodo
2012-06-12 17:00:30 ----D---- C:\Program Files\COMODO
2012-06-12 15:27:59 ----D---- C:\ProgramData\CPA_VA
2012-06-12 15:15:38 ----D---- C:\Program Files (x86)\Comodo
2012-06-12 15:15:37 ----A---- C:\Windows\SYSWOW64\mfc71.dll
2012-06-12 15:15:37 ----A---- C:\Windows\SYSWOW64\gdiplus.dll
2012-06-12 14:39:25 ----D---- C:\Users\Radek\AppData\Roaming\Malwarebytes
2012-06-12 14:39:19 ----D---- C:\ProgramData\Malwarebytes
2012-06-12 14:21:51 ----D---- C:\Users\Radek\AppData\Roaming\DriverCure
2012-06-12 14:21:50 ----D---- C:\Users\Radek\AppData\Roaming\SpeedyPC Software
2012-06-12 14:21:44 ----D---- C:\ProgramData\SpeedyPC Software
2012-06-12 13:27:50 ----D---- C:\Program Files\CCleaner
2012-06-11 18:36:04 ----D---- C:\Windows\Sun
2012-06-10 23:21:49 ----RD---- C:\Kernels
2012-06-10 23:21:49 ----D---- C:\PhoenixMiner
======List of files/folders modified in the last 1 month======
2012-06-25 17:18:00 ----RD---- C:\Program Files
2012-06-25 17:09:33 ----D---- C:\Windows\SoftwareDistribution
2012-06-25 17:08:46 ----D---- C:\Windows
2012-06-25 17:08:40 ----D---- C:\Windows\inf
2012-06-25 17:08:40 ----D---- C:\Users\Radek\AppData\Roaming\Skype
2012-06-25 17:06:48 ----D---- C:\Windows\system32\config
2012-06-25 17:02:22 ----A---- C:\Windows\SYSWOW64\acovcnt.exe
2012-06-25 16:59:24 ----SHD---- C:\System Volume Information
2012-06-25 16:57:50 ----D---- C:\Windows\system32\drivers
2012-06-25 16:54:57 ----D---- C:\Windows\System32
2012-06-25 16:54:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-06-23 14:55:00 ----D---- C:\Windows\rescache
2012-06-23 09:41:27 ----SHD---- C:\Windows\Installer
2012-06-23 08:43:53 ----D---- C:\Windows\winsxs
2012-06-23 08:43:21 ----D---- C:\Windows\system32\cs-CZ
2012-06-22 23:17:11 ----D---- C:\Windows\system32\catroot
2012-06-22 23:16:53 ----D---- C:\Windows\system32\catroot2
2012-06-18 08:00:18 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-06-18 08:00:17 ----D---- C:\Windows\SysWOW64
2012-06-15 15:50:48 ----D---- C:\Windows\system32\Tasks
2012-06-15 15:50:34 ----D---- C:\Program Files (x86)\ASUS
2012-06-15 15:33:35 ----D---- C:\Windows\Prefetch
2012-06-15 15:27:19 ----SD---- C:\Users\Radek\AppData\Roaming\Microsoft
2012-06-15 15:13:51 ----D---- C:\ProgramData\Trend Micro
2012-06-15 15:12:14 ----D---- C:\Program Files (x86)\CyberLink
2012-06-15 15:11:19 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-06-15 14:04:52 ----A---- C:\Windows\SYSWOW64\log.txt
2012-06-15 08:44:18 ----RSD---- C:\Windows\assembly
2012-06-15 08:44:18 ----D---- C:\Windows\Microsoft.NET
2012-06-14 08:11:27 ----A---- C:\Windows\system.ini
2012-06-14 08:11:23 ----D---- C:\Windows\system32\drivers\etc
2012-06-14 08:09:45 ----D---- C:\ProgramData
2012-06-14 08:08:17 ----D---- C:\Windows\SYSWOW64\drivers
2012-06-14 08:08:17 ----D---- C:\Windows\AppPatch
2012-06-14 08:08:15 ----D---- C:\Program Files\Common Files
2012-06-14 08:08:15 ----D---- C:\Program Files (x86)\Common Files
2012-06-14 07:56:18 ----RD---- C:\Program Files (x86)
2012-06-14 07:56:17 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2012-06-14 07:54:10 ----D---- C:\ProgramData\USBChargerPlus
2012-06-14 07:54:09 ----DC---- C:\Windows\system32\DRVSTORE
2012-06-14 07:52:42 ----D---- C:\Program Files\P4G
2012-06-14 07:48:18 ----D---- C:\Program Files (x86)\Internet Explorer
2012-06-14 07:48:17 ----D---- C:\Windows\SYSWOW64\migration
2012-06-14 07:48:16 ----D---- C:\Windows\system32\migration
2012-06-14 07:48:16 ----D---- C:\Program Files\Internet Explorer
2012-06-13 20:40:40 ----D---- C:\Windows\Tasks
2012-06-13 12:38:00 ----D---- C:\ASUS.DAT
2012-06-13 12:17:04 ----D---- C:\ProgramData\Nuance
2012-06-13 12:16:19 ----D---- C:\Program Files (x86)\Windows Live
2012-06-13 11:59:46 ----D---- C:\Program Files (x86)\RewardsArcadeSuite
2012-06-13 09:45:41 ----D---- C:\Windows\system32\DriverStore
2012-06-13 07:25:50 ----D---- C:\ProgramData\NVIDIA
2012-06-13 00:48:54 ----D---- C:\Windows\system32\LogFiles
2012-06-12 16:59:47 ----D---- C:\Users\Radek\AppData\Roaming\Systweak
2012-06-12 15:16:26 ----SD---- C:\ProgramData\Microsoft
2012-06-12 13:28:47 ----D---- C:\Windows\Panther
2012-06-12 13:28:47 ----D---- C:\Windows\Minidump
2012-06-12 13:28:47 ----D---- C:\Windows\Logs
2012-06-12 13:28:47 ----D---- C:\Windows\debug
2012-06-11 18:53:56 ----RD---- C:\Program Files (x86)\Skype
2012-06-11 18:53:56 ----D---- C:\ProgramData\Skype
2012-06-11 09:04:16 ----D---- C:\Windows\system32\wdi
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-04-26 557848]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-06-09 25960]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2012-03-11 22696]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-03-11 577824]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-03-11 43248]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-02-03 93200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2010-11-30 16120]
R3 AMPPAL;Intel(R) Centrino(R) Bluetooth 3.0 + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2011-04-21 294912]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-01-27 125416]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-01-27 385512]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2011-03-08 51712]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2011-03-08 274944]
R3 iBtFltCoex;iBtFltCoex; C:\Windows\system32\DRIVERS\iBtFltCoex.sys [2011-03-23 59904]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-04-10 12223936]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-07-07 2914408]
R3 iwdbus;IWD Bus Enumerator; C:\Windows\system32\DRIVERS\iwdbus.sys [2011-03-24 25496]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-08-24 76912]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-05-01 8593920]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-05-05 1439792]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 SBRE;SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys []
S3 AMPPALP;Intel(R) Centrino(R) Bluetooth 3.0 + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2011-04-21 294912]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2011-03-18 74840]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2011-03-24 34200]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 31232]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2009-12-15 96896]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-03-11 2815496]
R2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2012-06-12 412304]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
R2 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-30 149504]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-05-02 340240]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-09 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S4 AMPPALR3;Intel® Centrino® Bluetooth 3.0 + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-04-21 1136640]
S4 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe [2011-06-02 64128]
S4 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
S4 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-03-30 923984]
S4 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2011-03-30 1321296]
S4 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2011-03-30 1001808]
S4 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-04-21 134928]
S4 CLKMSVC10_38F51D56;CyberLink Product - 2011/09/02 02:07:00; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2010-11-13 241648]
S4 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-05-02 1517328]
S4 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-01 135664]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-01 135664]
S4 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-04-01 182768]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-06 325656]
S4 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-05-27 1007208]
S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-27 1997416]
S4 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-01-03 66872]
S4 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-05-02 844560]
S4 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-04-17 247152]
S4 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856]
S4 Splashtop MDES;Splashtop Meta Data Export Service; C:\ASUS.SYS\SIONExportService.exe [2011-05-11 338208]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-27 378472]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
Re: Trojan WIN32Generic!BT - Nerf
Na havet se zda log cisty 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Trojan WIN32Generic!BT - Nerf
Super, díky moc 
Re: Trojan WIN32Generic!BT - Nerf
Nemate zac, rad jsem pomohl Zase nekdy 
Zase nekdy "Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.
Přispějete na provoz fóra?