Problem s Babylonem a nejen snim ?

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
igi222
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 12 Srp 2012 15:25

Problem s Babylonem a nejen snim ?

#1 Příspěvek od igi222 »

zdravim potreboval bych prosim poradit jak se zbavit babylonu a jinych smejdu ktere sem si vlastni blbosti nasoupal do pc :( pridavam log z RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by INTEL at 2012-08-12 16:34:25
Microsoft Windows 7 Ultimate
System drive C: has 133 GB (28%) free of 479 GB
Total RAM: 8169 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:34:35, on 12.8.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16447)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\INTEL.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O3 - Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - (no file)
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKUS\S-1-5-21-2856319707-1062130081-3205940845-1004\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2856319707-1062130081-3205940845-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\progra~3\browse~1\22565~1.25\{16cdf~1\browse~1.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5672 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
taskeng.exe {2B688631-33F9-4240-A68F-C43DE2B703E8}
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/9/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --extension-process --renderer-print-preview --channel="2384.1.76563641\1878900509" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/9/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --extension-process --renderer-print-preview --channel="2384.2.1131113204\353793042" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll" --lang=cs --channel="2384.3.2049472214\1877204245" /prefetch:4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2384.5.698209208\1235731419" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2384.6.979889145\1307103041" --gpu-vendor-id=0x10de --gpu-device-id=0x1201 --gpu-driver-version=8.17.13.142 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/9/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="2384.7.562485209\844286733" /prefetch:3
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\INTEL\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Spybot - Search & Destroy - Scheduled Task.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-07-03 1387952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-07-24 545264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-07-24 193520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-07-03 1387952]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{98889811-442D-49dd-99D7-DC866BE87DBC}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-02 11545192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AsioThk32Reg]
REGSVR32.EXE /S CTASIO.DLL []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray]
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-27 2184520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-12-15 103720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative MediaSource Go]
C:\Program Files (x86)\Creative\MediaSource5\Go\CTCMSGoU.exe [2006-11-09 204800]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2012-02-28 190768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-03-26 1516600]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [2012-07-23 296096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-02-17 218408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut]
C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [2010-04-20 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
C:\Windows\UpdReg.EXE [2000-05-11 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VolPanel]
C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [2006-12-06 180224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files (x86)\Winamp\winampa.exe [2012-06-28 74752]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-07-03 4273976]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotSnD"=C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe [2009-01-26 5365592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"midi5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.cpl - cplopen - %SystemRoot%\SysWow64\control.exe "%1",%*

======List of files/folders created in the last 1 month======

2012-08-12 16:23:41 ----D---- C:\rsit
2012-08-12 16:23:41 ----D---- C:\Program Files\trend micro
2012-08-12 15:53:18 ----D---- C:\Windows\temp
2012-08-12 15:48:53 ----A---- C:\Windows\zip.exe
2012-08-12 15:48:53 ----A---- C:\Windows\SWSC.exe
2012-08-12 15:48:53 ----A---- C:\Windows\SWREG.exe
2012-08-12 15:48:53 ----A---- C:\Windows\sed.exe
2012-08-12 15:48:53 ----A---- C:\Windows\PEV.exe
2012-08-12 15:48:53 ----A---- C:\Windows\NIRCMD.exe
2012-08-12 15:48:53 ----A---- C:\Windows\MBR.exe
2012-08-12 15:48:53 ----A---- C:\Windows\grep.exe
2012-08-12 15:48:50 ----SD---- C:\ComboFix
2012-08-12 15:48:13 ----D---- C:\Qoobox
2012-08-12 13:20:28 ----A---- C:\Windows\SYSWOW64\drivers\rwsdhzck.sys
2012-08-12 13:20:28 ----A---- C:\Windows\dvkow.txt
2012-08-12 12:49:06 ----D---- C:\Windows\ERDNT
2012-08-12 02:35:05 ----D---- C:\Windows\SYSWOW64\searchplugins
2012-08-12 02:35:05 ----D---- C:\Windows\SYSWOW64\Extensions
2012-08-12 02:28:54 ----D---- C:\ProgramData\Browser Manager
2012-08-12 02:28:51 ----D---- C:\Users\INTEL\AppData\Roaming\vlc
2012-08-12 02:28:49 ----A---- C:\user.js
2012-08-12 02:25:36 ----D---- C:\ProgramData\Graboid Inc
2012-08-12 02:24:35 ----D---- C:\Program Files (x86)\Graboid
2012-08-08 22:40:32 ----A---- C:\mini-agent.txt
2012-07-24 09:52:57 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2012-07-24 09:52:41 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2012-07-24 09:52:41 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2012-07-24 09:26:29 ----D---- C:\Program Files (x86)\Adobe
2012-07-24 07:12:45 ----D---- C:\Program Files (x86)\PC Tools
2012-07-24 07:11:41 ----A---- C:\Windows\system32\drivers\Cat.DB
2012-07-24 07:11:36 ----A---- C:\Windows\system32\drivers\PCTSD64.sys
2012-07-24 07:11:23 ----D---- C:\Users\INTEL\AppData\Roaming\TestApp
2012-07-24 07:11:23 ----D---- C:\ProgramData\PC Tools
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\url.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-07-24 06:48:36 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-07-24 06:48:35 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\wininet.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\wextract.exe
2012-07-24 06:48:35 ----A---- C:\Windows\system32\webcheck.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\vbscript.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\urlmon.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\url.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-07-24 06:48:35 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-07-24 06:48:35 ----A---- C:\Windows\system32\pngfilt.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\occache.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\msrating.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\msls31.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\mshtmler.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\mshtmled.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\mshtml.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\mshta.exe
2012-07-24 06:48:35 ----A---- C:\Windows\system32\msfeedssync.exe
2012-07-24 06:48:35 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\msfeeds.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\licmgr10.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\jsproxy.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\jscript9.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\jscript.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\inseng.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\imgutil.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\iexpress.exe
2012-07-24 06:48:35 ----A---- C:\Windows\system32\ieUnatt.exe
2012-07-24 06:48:35 ----A---- C:\Windows\system32\ieui.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\iesysprep.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\iesetup.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\iertutil.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\iernonce.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\iepeers.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\ieframe.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\iedkcs32.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\ieapfltr.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\ieapfltr.dat
2012-07-24 06:48:35 ----A---- C:\Windows\system32\ieakui.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\ieaksie.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\ieakeng.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\ie4uinit.exe
2012-07-24 06:48:35 ----A---- C:\Windows\system32\icardie.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\dxtrans.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\dxtmsft.dll
2012-07-24 06:48:35 ----A---- C:\Windows\system32\admparse.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\mf.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2012-07-24 06:47:49 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\XpsRasterService.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\XpsPrint.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\WMVDECOD.DLL
2012-07-24 06:47:49 ----A---- C:\Windows\system32\mfreadwrite.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\mfps.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\mf.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\FntCache.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\ExplorerFrame.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\DWrite.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2012-07-24 06:47:49 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2012-07-24 06:47:49 ----A---- C:\Windows\system32\d3d10warp.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\d3d10_1core.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\d3d10_1.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\d2d1.dll
2012-07-24 06:47:49 ----A---- C:\Windows\system32\cdd.dll
2012-07-24 00:06:40 ----A---- C:\Windows\system32\npDeployJava1.dll
2012-07-24 00:06:40 ----A---- C:\Windows\system32\javaws.exe
2012-07-24 00:06:40 ----A---- C:\Windows\system32\deployJava1.dll
2012-07-24 00:06:33 ----A---- C:\Windows\system32\javaw.exe
2012-07-24 00:06:33 ----A---- C:\Windows\system32\java.exe
2012-07-24 00:06:28 ----D---- C:\Program Files\Java
2012-07-23 23:55:18 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-07-23 22:48:51 ----A---- C:\Windows\SYSWOW64\rmoc3260.dll
2012-07-23 22:48:46 ----A---- C:\Windows\SYSWOW64\pndx5032.dll
2012-07-23 22:48:46 ----A---- C:\Windows\SYSWOW64\pndx5016.dll
2012-07-23 22:48:45 ----A---- C:\Windows\SYSWOW64\pncrt.dll
2012-07-23 22:48:43 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2012-07-23 22:48:43 ----A---- C:\Windows\SYSWOW64\msvcp71.dll
2012-07-23 22:48:38 ----D---- C:\Program Files (x86)\Real
2012-07-23 22:48:37 ----D---- C:\Users\INTEL\AppData\Roaming\Real
2012-07-23 22:47:07 ----D---- C:\ProgramData\Real
2012-07-22 09:59:51 ----D---- C:\Program Files (x86)\Winamp Detect
2012-07-22 09:23:53 ----A---- C:\Windows\system32\nvhdap64.dll
2012-07-22 09:23:53 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2012-07-22 09:23:52 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2012-07-22 09:23:52 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2012-07-22 09:23:52 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2012-07-22 09:23:52 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2012-07-22 09:23:52 ----A---- C:\Windows\SYSWOW64\nvdecodemft.dll
2012-07-22 09:23:52 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2012-07-22 09:23:52 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2012-07-22 09:23:52 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2012-07-22 09:23:52 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2012-07-22 09:23:52 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2012-07-22 09:23:52 ----A---- C:\Windows\system32\nvwgf2umx.dll
2012-07-22 09:23:52 ----A---- C:\Windows\system32\nvoglv64.dll
2012-07-22 09:23:52 ----A---- C:\Windows\system32\nvinitx.dll
2012-07-22 09:23:52 ----A---- C:\Windows\system32\nvdecodemft.dll
2012-07-22 09:23:52 ----A---- C:\Windows\system32\nvd3dumx.dll
2012-07-22 09:23:52 ----A---- C:\Windows\system32\nvcuvid.dll
2012-07-22 09:23:52 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-07-22 09:23:52 ----A---- C:\Windows\system32\nvcuda.dll
2012-07-22 09:23:52 ----A---- C:\Windows\system32\nvcompiler.dll
2012-07-22 09:23:52 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys

======List of files/folders modified in the last 1 month======

2012-08-12 16:23:41 ----RD---- C:\Program Files
2012-08-12 16:19:49 ----SHD---- C:\System Volume Information
2012-08-12 16:13:44 ----D---- C:\Users\INTEL\AppData\Roaming\Mozilla
2012-08-12 16:13:44 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-08-12 16:04:42 ----D---- C:\Windows\System32
2012-08-12 16:04:42 ----D---- C:\Windows\inf
2012-08-12 16:04:42 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-08-12 16:02:31 ----D---- C:\ProgramData\Spybot - Search & Destroy
2012-08-12 16:02:00 ----D---- C:\Windows\SoftwareDistribution
2012-08-12 16:01:13 ----D---- C:\Windows
2012-08-12 15:59:25 ----D---- C:\Windows\system32\Tasks
2012-08-12 15:58:54 ----D---- C:\ProgramData\NVIDIA
2012-08-12 15:51:45 ----D---- C:\Windows\SYSWOW64\drivers
2012-08-12 15:51:45 ----D---- C:\Windows\SysWOW64
2012-08-12 15:51:45 ----D---- C:\Windows\AppPatch
2012-08-12 15:51:45 ----D---- C:\Program Files (x86)\Common Files
2012-08-12 15:48:14 ----D---- C:\Windows\system32\drivers
2012-08-12 13:05:34 ----RD---- C:\Program Files (x86)
2012-08-12 13:05:34 ----A---- C:\Windows\lgfwup.ini
2012-08-12 13:01:58 ----D---- C:\Windows\system32\drivers\etc
2012-08-12 04:34:19 ----D---- C:\w7lxe.exe
2012-08-12 03:34:17 ----D---- C:\Windows\Microsoft.NET
2012-08-12 03:34:16 ----RSD---- C:\Windows\assembly
2012-08-12 02:57:24 ----HD---- C:\ProgramData
2012-08-12 02:51:18 ----D---- C:\Windows\Tasks
2012-08-12 02:46:11 ----SHD---- C:\Windows\Installer
2012-08-12 02:44:54 ----AD---- C:\ProgramData\TEMP
2012-08-12 02:14:08 ----D---- C:\Users\INTEL\AppData\Roaming\ICQ
2012-08-12 00:52:13 ----D---- C:\Users\INTEL\AppData\Roaming\Skype
2012-08-10 19:45:05 ----D---- C:\ProgramData\Origin
2012-08-10 19:44:59 ----D---- C:\Users\INTEL\AppData\Roaming\Origin
2012-08-10 19:44:38 ----D---- C:\Program Files (x86)\Origin
2012-08-10 15:53:58 ----D---- C:\Users\INTEL\AppData\Roaming\Winamp
2012-08-08 23:17:41 ----D---- C:\Windows\ModemLogs
2012-08-08 22:41:25 ----D---- C:\Windows\system32\catroot
2012-08-08 22:41:04 ----D---- C:\Windows\system32\config
2012-08-08 22:40:48 ----D---- C:\Windows\system32\DriverStore
2012-08-08 22:40:16 ----D---- C:\Windows\system32\catroot2
2012-08-08 11:28:25 ----D---- C:\Users\INTEL\AppData\Roaming\TS3Client
2012-08-01 09:52:32 ----D---- C:\Program Files\CCleaner
2012-07-31 21:55:26 ----D---- C:\Program Files\TeamSpeak 3 Client
2012-07-29 15:14:01 ----D---- C:\ProgramData\Skype
2012-07-29 15:13:56 ----RD---- C:\Program Files (x86)\Skype
2012-07-24 09:42:07 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2012-07-24 09:28:29 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-07-24 09:26:30 ----D---- C:\ProgramData\Adobe
2012-07-24 07:28:22 ----D---- C:\Windows\Panther
2012-07-24 07:28:22 ----D---- C:\Windows\Logs
2012-07-24 06:52:14 ----D---- C:\Windows\Prefetch
2012-07-24 06:51:53 ----D---- C:\Windows\winsxs
2012-07-24 06:49:30 ----D---- C:\Windows\SYSWOW64\migration
2012-07-24 06:49:30 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-07-24 06:49:30 ----D---- C:\Windows\system32\cs-CZ
2012-07-24 06:49:30 ----D---- C:\Program Files\Internet Explorer
2012-07-24 06:49:30 ----D---- C:\Program Files (x86)\Internet Explorer
2012-07-24 06:49:29 ----D---- C:\Windows\SYSWOW64\en-US
2012-07-24 06:49:29 ----D---- C:\Windows\system32\migration
2012-07-24 06:49:29 ----D---- C:\Windows\system32\en-US
2012-07-24 06:49:29 ----D---- C:\Windows\PolicyDefinitions
2012-07-23 22:35:11 ----SD---- C:\Users\INTEL\AppData\Roaming\Microsoft
2012-07-22 09:59:59 ----D---- C:\Program Files (x86)\Winamp
2012-07-22 09:24:12 ----D---- C:\Program Files\NVIDIA Corporation
2012-07-22 09:15:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2012-07-22 09:15:39 ----D---- C:\Windows\system32\wfp
2012-07-22 09:15:38 ----D---- C:\Windows\SYSWOW64\Macromed
2012-07-22 09:15:36 ----D---- C:\Windows\system32\wbem
2012-07-22 09:15:36 ----D---- C:\Windows\system32\Macromed
2012-07-22 09:15:35 ----D---- C:\Windows\system32\drivers\UMDF
2012-07-22 09:15:35 ----D---- C:\Windows\system32\CodeIntegrity
2012-07-22 09:15:35 ----D---- C:\Windows\security
2012-07-22 09:15:34 ----D---- C:\Users\INTEL\AppData\Roaming\Ventrilo
2012-07-22 09:15:33 ----D---- C:\Program Files (x86)\Steam
2012-07-22 09:15:23 ----D---- C:\Users\INTEL\AppData\Roaming\OpenCandy
2012-07-22 09:15:23 ----D---- C:\Users\INTEL\AppData\Roaming\dvdcss
2012-07-22 09:15:19 ----D---- C:\Windows\registration
2012-07-22 09:14:53 ----D---- C:\ProgramData\Blizzard Entertainment
2012-07-22 09:14:17 ----D---- C:\Program Files (x86)\Realtek
2012-07-22 09:14:04 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-07-22 09:12:20 ----D---- C:\Windows\system32\LogFiles
2012-07-22 09:04:19 ----D---- C:\Program Files (x86)\Diablo III
2012-07-19 19:41:35 ----D---- C:\Users\INTEL\AppData\Roaming\Any DVD Converter Professional

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-07-03 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-07-03 958400]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-07-03 355856]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-07-03 59728]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-11-07 270912]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-07-03 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-07-03 71064]
R3 athur;Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2010-01-05 1847296]
R3 CT20XUT.DLL;CT20XUT.DLL; C:\Windows\system32\CT20XUT.DLL [2007-10-25 252440]
R3 ctaud2k;Creative Audio Driver (WDM); C:\Windows\system32\drivers\ctaud2k.sys [2007-10-25 864920]
R3 CTEXFIFX.DLL;CTEXFIFX.DLL; C:\Windows\system32\CTEXFIFX.DLL [2007-10-25 1570328]
R3 CTHWIUT.DLL;CTHWIUT.DLL; C:\Windows\system32\CTHWIUT.DLL [2007-10-25 123416]
R3 ctprxy2k;Creative Proxy Driver; C:\Windows\system32\drivers\ctprxy2k.sys [2007-10-25 16920]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\Windows\system32\drivers\ctsfm2k.sys [2007-10-25 290328]
R3 emupia;E-mu Plug-in Architecture Driver; C:\Windows\system32\drivers\emupia2k.sys [2007-10-25 147480]
R3 ha20x2k;Creative 20X HAL Driver; C:\Windows\system32\drivers\ha20x2k.sys [2007-10-25 2051096]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-02 2536040]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-04-18 188736]
R3 ossrv;Creative OS Services Driver; C:\Windows\system32\drivers\ctoss2k.sys [2007-10-25 219160]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-28 412776]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S0 mv91xx;mv91xx; C:\Windows\system32\DRIVERS\mv91xx.sys []
S0 onisg;onisg; C:\Windows\system32\drivers\rwsdhzck.sys []
S3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-02-24 126952]
S3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-02-24 389608]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys []
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-10-27 55336]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys []
S3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys []
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys []
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys []
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys []
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys []
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
S3 COMMONFX.DLL;COMMONFX.DLL; C:\Windows\system32\COMMONFX.DLL [2007-10-25 157208]
S3 ctac32k;Creative AC3 Software Decoder; C:\Windows\system32\drivers\ctac32k.sys [2007-10-25 580632]
S3 CTAUDFX.DLL;CTAUDFX.DLL; C:\Windows\system32\CTAUDFX.DLL [2007-10-25 699928]
S3 CTEAPSFX.DLL;CTEAPSFX.DLL; C:\Windows\system32\CTEAPSFX.DLL [2007-10-25 219160]
S3 CTEDSPFX.DLL;CTEDSPFX.DLL; C:\Windows\system32\CTEDSPFX.DLL [2007-10-25 321560]
S3 CTEDSPIO.DLL;CTEDSPIO.DLL; C:\Windows\system32\CTEDSPIO.DLL [2007-10-25 189976]
S3 CTEDSPSY.DLL;CTEDSPSY.DLL; C:\Windows\system32\CTEDSPSY.DLL [2007-10-25 363032]
S3 CTERFXFX.DLL;CTERFXFX.DLL; C:\Windows\system32\CTERFXFX.DLL [2007-10-25 141848]
S3 CTSBLFX.DLL;CTSBLFX.DLL; C:\Windows\system32\CTSBLFX.DLL [2007-10-25 680984]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2012-01-09 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2012-01-09 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-07-03 44808]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 NVSvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-05-15 889664]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-15 382272]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-12-15 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-02 250056]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-12-15 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe []
S4 Browser Manager;Browser Manager; C:\ProgramData\Browser Manager\2.2.565.25\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe [2012-08-12 1697312]
S4 Creative ALchemy AL1 Licensing Service;Creative ALchemy AL1 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL1Licensing.exe [2012-02-18 79360]
S4 ICQ Service;ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-11-21 247608]
S4 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-07-24 76888]
S4 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-01-04 718888]
S4 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-03-24 489256]

-----------------EOF-----------------

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Problem s Babylonem a nejen snim ?

#2 Příspěvek od vyosek »

Zdravim a pekny den preji :)

:arrow: Mate docela zajimavy nick, mohu vedet, jak vas napadl :???:

:arrow: Mohu mit dotaz, proc si bezny uzivatel kupuje nejvyssi licenci Windows Ultimate, ktera je urcena spise pro velke korporace, kdyz stejne nevyuzije nic vic nez nabizi verze Home Premium :???: A nebo byla "koupena" nekde na internetu :?:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

igi222
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 12 Srp 2012 15:25

Re: Problem s Babylonem a nejen snim ?

#3 Příspěvek od igi222 »

ano je "koupena" na internetu a nick me napadl protoze to nejvice vystihuje mou situaci :)

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Problem s Babylonem a nejen snim ?

#4 Příspěvek od vyosek »

Jak to myslite vystihuje situaci :???: :?:

Pravidla fora jste si cetl :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

igi222
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 12 Srp 2012 15:25

Re: Problem s Babylonem a nejen snim ?

#5 Příspěvek od igi222 »

ano cetl zadny problem stim nevidim akorat sem si neuvedomil ze muzu takto oznacit jineho clena (igi( taky ten nick mam rad : ) provedu zmenu .)

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Problem s Babylonem a nejen snim ?

#6 Příspěvek od vyosek »

:arrow:
igilamer napsal:provedu zmenu .)
Sam ji neudelate, menit nicky mohou jen uricti clenove tymu, ale kdyz mi napisete, jaky chcete, tak jej zmenim :wink:

:arrow: Pravidla fora
3. Zvláště utilitu ComboFix nespouštějte i když Vám mi poradil kamarád\nějaký rádoby odborný web. Naše fórum je jediné z CZ-SK antivirových fór, která mají právo luštit logy z ComboFixu a mámě též plnou podporu autora této utility a přístup k nejaktuálnějším informacím a návodům.

8. Dotazy, které směřují k porušování autorských práv, dále dotazy, obsahující invektivy a osobní útoky, reklama na stránky nesouvisející s problematikou bezpečnosti a politická agitace všeho druhu budou nekompromisně mazány a autoři postihováni v rámci možností fóra.
:arrow: A dale http://forum.viry.cz/viewtopic.php?f=12&t=115512
Pomáhat NELZE:
2) Pokud stroj uživatele prokazatelně obsahuje nelegální hostitelský čí ochranný software
(operační systém, antivir, firewall, atd.), je nutné navést uživatele k nápravě, např. skrze neplacený software,
a začít řešit, až v době kdy je PC "v pořádku". V případě že uživatel nechce na pravidla přistoupit,
je nutné jej vyzvat ať fórum opustí, a vrátí se až je splní.
:arrow: Nejaky napad jak z toho ven :???: :)
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Problem s Babylonem a nejen snim ?

#7 Příspěvek od vyosek »

Poruseni pravidel fora :closed:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Zamčeno