Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Problém s NETB

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Worgens
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 03 led 2013 23:13

Problém s NETB

#1 Příspěvek od Worgens »

Ahojm před půlrokem jsem prodal svůj MSI notebook z důvodu že prostě už jsem hry atd hrát nechtěl a už mě nebavilo všude tahat tak velkou krávu když to tak řeknu proto jsem si koupil Netbook(NETB) od Asus jméno: Eee PC 1011px Asus 1gb Ram Intel Atom 32 bit systém Windows: po spuštění byl předinstlaovaný systém Windows 7 Starter ;-) nýbrž jsem zjistil že s Win 7 starter není power point atd :) koupil jsem si online klíč k Window 7 ultimate ;-) kde power point již je atd :)
záhadou mi je ale dodnes jistá věc kdymi při spuštění PC z nepochopitelných důvodů spadla plocha a ukazalo to že ASUSVIBE 2.0 přestal pracovat a je vhodne jej ukončit to jsem udělal na ASUS psali že j možnost tento program opravit a že se to opčas u 1011px stává ale omylem se mi vymazal soubor asusvibe 2.0 i když jsem klikl na repair tím se mi zablokoval i disk C ve kterém jsem měl rozepsaný seminář na biologii,chemii,přírodovědu
bylo mi doporučeno obnovit systém na určitý bod ale jediný bod který byl bylo 3.1.2013 8:34:21
tak jsem to udělal a stále nic obnovil jsem bohužel se vztekem Netbook do továrních dat a znova upgradoval systém z win 7 starter na Win 7 ultimat stáhl antivirový program Eset smart security 6 a zase vše aktivoval jak Anti theft tak i virovou databázi,nainstaloval jsem i o2 průvodce připojením jelikož použivám modem huawei e1750 od O2 ve škole a na cestách.problém je ten že systém se po obnově začal jak si sekat a při psaní ve wordu se to seká
při kontrole antivirem to vypíše chyba otevření disku C disku D a i přesto to zkontroluje soubory na disku C potřebuju poradit co mám dělat když otevřu Microsoft word že mám využití CPU najednou na 100% možnost výměni RAM na 2 GB mám ;-)
Nahoru
Worgens
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 03 led 2013 23:13

Re: Problém s NETB

#2 Příspěvek od Worgens »

Prosím poradte mi :((( zadal jsem i product key k Microsoft office 2010 ale místo plné verze mi to instalovalo jen zkušební :/// najednou mám využití CPU 100% a to jsem jen na ploše a když jsem ve správci uloh tak využití CPU mám na 6% - 25% :(( jsem amater takze kdo mi bude chtít pomoct tak varuju předem s PC moc neumím spíše vůbec ://
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NETB

#3 Příspěvek od Rudy »

Zdravím!
Dejte log RSIT: http://forum.viry.cz/viewtopic.php?f=13&t=105895 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Worgens
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 03 led 2013 23:13

Re: Problém s NETB

#4 Příspěvek od Worgens »

Logfile of random's system information tool 1.09 (written by random/random)
Run by Robin at 2013-01-04 20:26:21
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 79 GB (77%) free of 102 GB
Total RAM: 1014 MB (14% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:26:32, on 4.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\windows\system32\taskeng.exe
C:\Program Files\Common Files\InstantOn\InsOnWMI.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Asus\Eee Docking\Eee Docking.exe
C:\ExpressGateUtil\VAWinAgent.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Program Files\O2\O2CZ\EMMSN.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\O2\Nori\Nori.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\windows\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Robin\Downloads\RSIT.exe
C:\Program Files\trend micro\Robin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ETDWare] %ProgramFiles%\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [LiveUpdate] AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [VizorHtmlDialog.exe] "C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" "DEF" "EULA" "C:\Program Files\Trend Micro\Titanium\UI\Installer.cmpt\resources\preinstall_01_welcome_trial.html" "DEF" "DEF" "DEF"
O4 - HKLM\..\Run: [Trend Micro Client Framework] "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe"
O4 - HKLM\..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe -ReFlush "none" "none"
O4 - HKLM\..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [O2CZ] "C:\Program Files\O2\O2CZ\EMMSN.exe" -systray
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{54FF0D40-2D35-4EFD-8ED6-AB6D3988F683}: NameServer = 160.218.161.60 194.228.211.33
O17 - HKLM\System\CS1\Services\Tcpip\..\{54FF0D40-2D35-4EFD-8ED6-AB6D3988F683}: NameServer = 160.218.161.60 194.228.211.33
O17 - HKLM\System\CS2\Services\Tcpip\..\{54FF0D40-2D35-4EFD-8ED6-AB6D3988F683}: NameServer = 160.218.161.60 194.228.211.33
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\system32\AsusService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: VideAceWindowsService - Unknown owner - C:\ExpressGateUtil\VAWinService.exe

--
End of file - 9025 bytes

======Scheduled tasks folder======

C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 185680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 548744]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe []
"LiveUpdate"=AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto []
"CapsHook"=AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [2011-01-06 414384]
"ASUSWebStorage"=C:\Program Files\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [2011-02-23 731472]
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 112632]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 218448]
"VAWinAgent"=C:\ExpressGateUtil\VAWinAgent.exe [2011-03-24 45448]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-05-10 141848]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-05-10 173592]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-05-10 150552]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-08-24 9722472]
"ASUSPRP"=C:\Program Files\ASUS\APRP\APRP.EXE [2011-04-30 2018032]
"O2CZ"=C:\Program Files\O2\O2CZ\EMMSN.exe [2009-11-30 4050632]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-11-26 5074384]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\SYSTEM32\igfxdev.dll [2010-05-10 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-04 20:18:41 ----D---- C:\rsit
2013-01-04 14:43:36 ----SHD---- C:\Config.Msi
2013-01-04 14:31:22 ----D---- C:\Program Files\Common Files\DESIGNER
2013-01-04 14:15:11 ----D---- C:\Program Files\Microsoft Analysis Services
2013-01-04 14:14:07 ----D---- C:\ProgramData\Microsoft Help
2013-01-04 14:13:07 ----RHD---- C:\MSOCache
2013-01-04 03:06:37 ----A---- C:\windows\system32\Wdfres.dll
2013-01-04 03:06:37 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-01-04 03:06:37 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-01-04 03:05:25 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-01-04 03:05:25 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-01-04 03:05:23 ----A---- C:\windows\system32\WUDFSvc.dll
2013-01-04 03:05:23 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-01-04 03:05:21 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-01-04 03:05:20 ----A---- C:\windows\system32\WUDFx.dll
2013-01-04 03:05:20 ----A---- C:\windows\system32\WUDFHost.exe
2013-01-04 01:02:05 ----D---- C:\Program Files\CCleaner
2013-01-03 23:27:46 ----D---- C:\Users\Robin\AppData\Roaming\WinRAR
2013-01-03 23:27:18 ----D---- C:\Program Files\WinRAR
2013-01-03 16:22:43 ----D---- C:\Program Files\Microsoft.NET
2013-01-03 16:16:42 ----D---- C:\Program Files\Microsoft SkyDrive
2013-01-03 16:15:49 ----D---- C:\ProgramData\Microsoft SkyDrive
2013-01-03 12:39:25 ----D---- C:\windows\system32\Wat
2013-01-03 12:39:23 ----SHD---- C:\windows\BitLockerDiscoveryVolumeContents
2013-01-03 12:39:23 ----D---- C:\windows\RemotePackages
2013-01-03 12:02:54 ----A---- C:\windows\system32\win32spl.dll
2013-01-03 12:02:54 ----A---- C:\windows\system32\spoolsv.exe
2013-01-03 12:02:50 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-01-03 12:02:50 ----A---- C:\windows\system32\drivers\ndis.sys
2013-01-03 12:02:48 ----A---- C:\windows\system32\xmllite.dll
2013-01-03 12:02:46 ----A---- C:\windows\system32\prevhost.exe
2013-01-03 12:02:45 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbport.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbd.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-01-03 12:00:44 ----A---- C:\windows\system32\esent.dll
2013-01-03 12:00:44 ----A---- C:\windows\system32\drivers\storport.sys
2013-01-03 12:00:43 ----A---- C:\windows\system32\fsutil.exe
2013-01-03 12:00:43 ----A---- C:\windows\system32\drivers\nvstor.sys
2013-01-03 12:00:43 ----A---- C:\windows\system32\drivers\nvraid.sys
2013-01-03 12:00:43 ----A---- C:\windows\system32\drivers\iaStorV.sys
2013-01-03 12:00:43 ----A---- C:\windows\system32\drivers\amdxata.sys
2013-01-03 12:00:43 ----A---- C:\windows\system32\drivers\amdsata.sys
2013-01-03 12:00:42 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2013-01-03 12:00:20 ----A---- C:\windows\system32\OxpsConverter.exe
2013-01-03 12:00:01 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2013-01-03 12:00:01 ----A---- C:\windows\system32\drivers\bthport.sys
2013-01-03 11:58:42 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-01-03 11:58:19 ----A---- C:\windows\system32\ncsi.dll
2013-01-03 11:58:19 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-01-03 11:58:18 ----A---- C:\windows\system32\nlasvc.dll
2013-01-03 11:58:18 ----A---- C:\windows\system32\netcorehc.dll
2013-01-03 11:58:18 ----A---- C:\windows\system32\iphlpsvc.dll
2013-01-03 11:58:17 ----A---- C:\windows\system32\nlaapi.dll
2013-01-03 11:58:17 ----A---- C:\windows\system32\netevent.dll
2013-01-03 11:58:17 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-01-03 11:57:51 ----A---- C:\windows\system32\tquery.dll
2013-01-03 11:57:51 ----A---- C:\windows\system32\mssrch.dll
2013-01-03 11:57:50 ----A---- C:\windows\system32\SearchProtocolHost.exe
2013-01-03 11:57:50 ----A---- C:\windows\system32\SearchIndexer.exe
2013-01-03 11:57:50 ----A---- C:\windows\system32\mssph.dll
2013-01-03 11:57:49 ----A---- C:\windows\system32\SearchFilterHost.exe
2013-01-03 11:57:49 ----A---- C:\windows\system32\mssvp.dll
2013-01-03 11:57:49 ----A---- C:\windows\system32\mssphtb.dll
2013-01-03 11:57:48 ----A---- C:\windows\system32\msscntrs.dll
2013-01-03 11:57:17 ----A---- C:\windows\system32\srcore.dll
2013-01-03 11:57:14 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-01-03 11:57:12 ----A---- C:\windows\system32\XpsPrint.dll
2013-01-03 11:57:10 ----A---- C:\windows\explorer.exe
2013-01-03 11:57:08 ----A---- C:\windows\system32\msi.dll
2013-01-03 11:57:06 ----A---- C:\windows\system32\d3d10level9.dll
2013-01-03 11:57:03 ----A---- C:\windows\system32\profsvc.dll
2013-01-03 11:56:57 ----A---- C:\windows\system32\ntshrui.dll
2013-01-03 11:56:50 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-01-03 11:56:50 ----A---- C:\windows\system32\dhcpcore6.dll
2013-01-03 11:56:40 ----A---- C:\windows\system32\drivers\Diskdump.sys
2013-01-03 11:56:37 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-01-03 10:46:47 ----D---- C:\Program Files\Windows Journal
2013-01-03 10:46:40 ----D---- C:\windows\ShellNew
2013-01-03 10:46:40 ----D---- C:\windows\ehome
2013-01-03 10:46:40 ----D---- C:\windows\CSC
2013-01-02 22:24:01 ----A---- C:\windows\system32\fontsub.dll
2013-01-02 22:24:01 ----A---- C:\windows\system32\atmlib.dll
2013-01-02 22:24:01 ----A---- C:\windows\system32\atmfd.dll
2013-01-02 22:14:30 ----A---- C:\windows\system32\mshtmled.dll
2013-01-02 22:14:29 ----A---- C:\windows\system32\vbscript.dll
2013-01-02 22:14:29 ----A---- C:\windows\system32\jsproxy.dll
2013-01-02 22:14:28 ----A---- C:\windows\system32\ieui.dll
2013-01-02 22:14:27 ----A---- C:\windows\system32\msfeeds.dll
2013-01-02 22:14:27 ----A---- C:\windows\system32\ieUnatt.exe
2013-01-02 22:14:26 ----A---- C:\windows\system32\wininet.dll
2013-01-02 22:14:26 ----A---- C:\windows\system32\jscript.dll
2013-01-02 22:14:24 ----A---- C:\windows\system32\url.dll
2013-01-02 22:14:24 ----A---- C:\windows\system32\jscript9.dll
2013-01-02 22:14:23 ----A---- C:\windows\system32\iertutil.dll
2013-01-02 22:14:22 ----A---- C:\windows\system32\urlmon.dll
2013-01-02 22:14:20 ----A---- C:\windows\system32\ieframe.dll
2013-01-02 22:14:15 ----A---- C:\windows\system32\mshtml.dll
2013-01-02 22:01:45 ----A---- C:\windows\system32\wmi.dll
2013-01-02 22:01:45 ----A---- C:\windows\system32\imagehlp.dll
2013-01-02 22:01:45 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-01-02 22:01:34 ----A---- C:\windows\system32\browserchoice.exe
2013-01-02 21:53:04 ----A---- C:\windows\system32\MRT.exe
2013-01-02 21:49:19 ----A---- C:\windows\system32\win32k.sys
2013-01-02 21:48:32 ----A---- C:\windows\system32\wintrust.dll
2013-01-02 21:48:15 ----A---- C:\windows\system32\kernel32.dll
2013-01-02 21:48:14 ----A---- C:\windows\system32\winsrv.dll
2013-01-02 21:48:14 ----A---- C:\windows\system32\KernelBase.dll
2013-01-02 21:48:13 ----A---- C:\windows\system32\conhost.exe
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-01-02 21:48:09 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-01-02 21:48:09 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-02 21:48:09 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-01-02 21:48:09 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-01-02 21:48:09 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-01-02 21:47:37 ----A---- C:\windows\system32\dpnet.dll
2013-01-02 21:47:34 ----A---- C:\windows\system32\drivers\netio.sys
2013-01-02 21:47:33 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-01-02 21:47:20 ----A---- C:\windows\system32\rdpcorets.dll
2013-01-02 21:47:20 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-01-02 21:47:16 ----A---- C:\windows\system32\schannel.dll
2013-01-02 21:47:16 ----A---- C:\windows\system32\ncrypt.dll
2013-01-02 21:47:16 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-01-02 21:47:16 ----A---- C:\windows\system32\drivers\cng.sys
2013-01-02 21:47:15 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-01-02 21:47:12 ----A---- C:\windows\system32\msxml6.dll
2013-01-02 21:47:11 ----A---- C:\windows\system32\msxml3r.dll
2013-01-02 21:47:11 ----A---- C:\windows\system32\msxml3.dll
2013-01-02 21:47:05 ----A---- C:\windows\system32\cdosys.dll
2013-01-02 21:46:58 ----A---- C:\windows\system32\netapi32.dll
2013-01-02 21:46:58 ----A---- C:\windows\system32\browser.dll
2013-01-02 21:46:58 ----A---- C:\windows\system32\browcli.dll
2013-01-02 21:46:56 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-01-02 21:46:56 ----A---- C:\windows\system32\rdpwsx.dll
2013-01-02 21:46:56 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-01-02 21:46:50 ----A---- C:\windows\system32\ntkrnlpa.exe
2013-01-02 21:46:49 ----A---- C:\windows\system32\ntoskrnl.exe
2013-01-02 21:46:46 ----A---- C:\windows\system32\kerberos.dll
2013-01-02 21:46:44 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-01-02 21:46:42 ----A---- C:\windows\system32\synceng.dll
2013-01-02 21:46:40 ----A---- C:\windows\system32\localspl.dll
2013-01-02 21:46:33 ----A---- C:\windows\system32\shell32.dll
2013-01-02 21:46:16 ----A---- C:\windows\system32\tzres.dll
2013-01-02 21:45:48 ----A---- C:\windows\system32\drivers\srvnet.sys
2013-01-02 21:45:48 ----A---- C:\windows\system32\drivers\srv2.sys
2013-01-02 21:45:48 ----A---- C:\windows\system32\drivers\srv.sys
2013-01-02 21:45:44 ----A---- C:\windows\system32\drivers\afd.sys
2013-01-02 21:45:42 ----A---- C:\windows\system32\ntdll.dll
2013-01-02 21:44:42 ----A---- C:\windows\system32\dnsrslvr.dll
2013-01-02 21:44:42 ----A---- C:\windows\system32\dnsapi.dll
2013-01-02 21:44:41 ----A---- C:\windows\system32\dnscacheugc.exe
2013-01-02 21:44:22 ----A---- C:\windows\system32\cryptsvc.dll
2013-01-02 21:44:22 ----A---- C:\windows\system32\cryptnet.dll
2013-01-02 21:44:22 ----A---- C:\windows\system32\crypt32.dll
2013-01-02 21:43:46 ----A---- C:\windows\system32\psisdecd.dll
2013-01-02 21:43:43 ----A---- C:\windows\system32\umpnpmgr.dll
2013-01-02 21:43:40 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2013-01-02 21:43:40 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2013-01-02 21:43:40 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2013-01-02 21:43:38 ----A---- C:\windows\system32\oleacc.dll
2013-01-02 21:43:37 ----A---- C:\windows\system32\oleaut32.dll
2013-01-02 21:43:26 ----A---- C:\windows\system32\inetcomm.dll
2013-01-02 21:43:20 ----A---- C:\windows\system32\packager.dll
2013-01-02 21:43:10 ----A---- C:\windows\system32\FXSCOVER.exe
2013-01-02 21:43:07 ----A---- C:\windows\system32\EncDec.dll
2013-01-02 21:43:05 ----A---- C:\windows\system32\csrsrv.dll
2013-01-02 21:43:03 ----A---- C:\windows\system32\CPFilters.dll
2013-01-02 21:43:02 ----A---- C:\windows\system32\sbe.dll
2013-01-02 21:42:58 ----A---- C:\windows\system32\quartz.dll
2013-01-02 21:42:58 ----A---- C:\windows\system32\qdvd.dll
2013-01-02 21:42:11 ----A---- C:\windows\system32\lsasrv.dll
2013-01-02 21:42:10 ----A---- C:\windows\system32\webio.dll
2013-01-02 21:42:10 ----A---- C:\windows\system32\sspisrv.dll
2013-01-02 21:42:10 ----A---- C:\windows\system32\sspicli.dll
2013-01-02 21:42:10 ----A---- C:\windows\system32\secur32.dll
2013-01-02 21:42:10 ----A---- C:\windows\system32\lsass.exe
2013-01-02 21:42:07 ----A---- C:\windows\system32\odbcjt32.dll
2013-01-02 21:42:07 ----A---- C:\windows\system32\odbccu32.dll
2013-01-02 21:42:07 ----A---- C:\windows\system32\odbccr32.dll
2013-01-02 21:42:06 ----A---- C:\windows\system32\odbctrac.dll
2013-01-02 21:42:06 ----A---- C:\windows\system32\odbccp32.dll
2013-01-02 21:42:03 ----A---- C:\windows\system32\mfc42.dll
2013-01-02 21:42:02 ----A---- C:\windows\system32\mfc42u.dll
2013-01-02 21:42:00 ----A---- C:\windows\system32\msvcrt.dll
2013-01-02 21:41:57 ----A---- C:\windows\system32\DWrite.dll
2013-01-02 21:41:53 ----A---- C:\windows\system32\drivers\bowser.sys
2013-01-02 21:27:40 ----A---- C:\windows\system32\poqexec.exe
2013-01-02 21:13:19 ----A---- C:\windows\system32\rdpcore.dll
2013-01-02 21:13:19 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-01-02 09:36:58 ----SHD---- C:\Boot
2013-01-02 08:40:47 ----D---- C:\windows\SoftwareDistribution
2013-01-02 08:37:56 ----SHD---- C:\System Volume Information
2013-01-02 08:37:56 ----ASH---- C:\pagefile.sys
2013-01-02 08:37:56 ----ASH---- C:\hiberfil.sys
2013-01-02 03:19:46 ----A---- C:\windows\system32\wups2.dll
2013-01-02 03:19:46 ----A---- C:\windows\system32\wucltux.dll
2013-01-02 03:19:46 ----A---- C:\windows\system32\wuaueng.dll
2013-01-02 03:19:46 ----A---- C:\windows\system32\wuauclt.exe
2013-01-02 03:19:13 ----A---- C:\windows\system32\wups.dll
2013-01-02 03:19:13 ----A---- C:\windows\system32\wudriver.dll
2013-01-02 03:19:13 ----A---- C:\windows\system32\wuapi.dll
2013-01-02 03:18:55 ----A---- C:\windows\system32\wuwebv.dll
2013-01-02 03:18:55 ----A---- C:\windows\system32\wuapp.exe
2013-01-02 03:12:18 ----N---- C:\windows\system32\MpSigStub.exe
2013-01-02 02:57:05 ----D---- C:\Users\Robin\AppData\Roaming\ESET
2013-01-02 02:54:43 ----D---- C:\ProgramData\ESET
2013-01-02 02:54:43 ----D---- C:\Program Files\ESET
2013-01-02 01:06:44 ----D---- C:\Program Files\Google
2013-01-01 23:54:44 ----D---- C:\Users\Robin\AppData\Roaming\Telefónica Móviles
2013-01-01 23:54:14 ----A---- C:\windows\system32\drivers\ewusbnet.sys
2013-01-01 23:54:14 ----A---- C:\windows\system32\drivers\ewusbmdm.sys
2013-01-01 23:54:13 ----A---- C:\windows\system32\drivers\ewusbdev.sys
2013-01-01 23:54:13 ----A---- C:\windows\system32\drivers\ewdcsc.sys
2013-01-01 23:54:04 ----D---- C:\Program Files\O2
2013-01-01 23:52:06 ----SHD---- C:\$RECYCLE.BIN
2013-01-01 23:49:42 ----A---- C:\windows\Language.ini
2013-01-01 23:49:20 ----D---- C:\windows\ConfigSetRoot
2013-01-01 23:48:38 ----A---- C:\windows\system32\drivers\RTEQEX0.dat
2013-01-01 23:46:55 ----SD---- C:\Users\Robin\AppData\Roaming\Microsoft
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\Macromedia
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\InstallShield
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\Identities
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\E-Cam
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\ASUS WebStorage
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\Adobe
2013-01-01 23:45:32 ----SHD---- C:\Recovery

======List of files/folders modified in the last 1 month======

2013-01-04 20:26:28 ----D---- C:\windows\Temp
2013-01-04 20:26:28 ----D---- C:\Program Files\Trend Micro
2013-01-04 18:31:13 ----D---- C:\windows\system32\config
2013-01-04 18:13:05 ----D---- C:\Windows
2013-01-04 15:29:39 ----D---- C:\windows\Microsoft.NET
2013-01-04 15:29:34 ----RSD---- C:\windows\assembly
2013-01-04 14:52:27 ----SHD---- C:\windows\Installer
2013-01-04 14:47:09 ----A---- C:\windows\win.ini
2013-01-04 14:43:49 ----SD---- C:\ProgramData\Microsoft
2013-01-04 14:43:45 ----D---- C:\Program Files\Microsoft Office
2013-01-04 14:40:13 ----D---- C:\windows\winsxs
2013-01-04 14:38:53 ----D---- C:\windows\system32\Tasks
2013-01-04 14:34:44 ----RSD---- C:\windows\Fonts
2013-01-04 14:34:41 ----D---- C:\windows\System32
2013-01-04 14:33:58 ----D---- C:\Program Files\Common Files\microsoft shared
2013-01-04 14:31:22 ----D---- C:\Program Files\Common Files
2013-01-04 14:15:24 ----D---- C:\Program Files\Common Files\System
2013-01-04 14:15:11 ----RD---- C:\Program Files
2013-01-04 14:14:07 ----HD---- C:\ProgramData
2013-01-04 12:53:43 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-01-04 12:53:40 ----D---- C:\windows\inf
2013-01-04 12:42:01 ----D---- C:\windows\AppPatch
2013-01-04 12:42:01 ----AD---- C:\windows\system32\drivers
2013-01-04 12:42:00 ----D---- C:\windows\system32\pl-PL
2013-01-04 12:42:00 ----D---- C:\windows\system32\hu-HU
2013-01-04 12:42:00 ----D---- C:\windows\system32\en-US
2013-01-04 12:42:00 ----D---- C:\windows\system32\cs-CZ
2013-01-04 12:41:56 ----D---- C:\windows\PolicyDefinitions
2013-01-04 12:41:55 ----D---- C:\windows\system32\migration
2013-01-04 12:41:53 ----D---- C:\windows\system32\drivers\pl-PL
2013-01-04 12:41:53 ----D---- C:\windows\system32\drivers\hu-HU
2013-01-04 12:41:53 ----D---- C:\windows\system32\drivers\en-US
2013-01-04 12:41:53 ----D---- C:\windows\system32\drivers\cs-CZ
2013-01-04 12:41:52 ----D---- C:\windows\system32\wbem
2013-01-04 12:41:50 ----D---- C:\windows\system32\sk-SK
2013-01-04 12:41:41 ----D---- C:\windows\system32\DriverStore
2013-01-04 03:12:48 ----D---- C:\windows\system32\wdi
2013-01-04 03:07:07 ----D---- C:\windows\system32\catroot2
2013-01-04 03:07:07 ----D---- C:\windows\system32\catroot
2013-01-04 01:08:59 ----D---- C:\windows\panther
2013-01-04 01:08:53 ----D---- C:\windows\Logs
2013-01-04 01:08:52 ----D---- C:\windows\debug
2013-01-03 16:15:48 ----D---- C:\Program Files\Windows Live
2013-01-03 12:41:30 ----D---- C:\Program Files\Microsoft Silverlight
2013-01-03 12:39:22 ----D---- C:\windows\system32\drivers\UMDF
2013-01-03 12:38:05 ----D---- C:\windows\system32\restore
2013-01-03 10:46:55 ----D---- C:\Program Files\DVD Maker
2013-01-03 10:46:40 ----D---- C:\windows\security
2013-01-02 22:53:36 ----D---- C:\windows\Prefetch
2013-01-02 22:29:05 ----D---- C:\Program Files\Internet Explorer
2013-01-02 08:44:35 ----D---- C:\windows\rescache
2013-01-02 08:40:10 ----D---- C:\windows\system32\RTCOM
2013-01-02 08:37:56 ----D---- C:\Program Files\Elantech
2013-01-02 01:06:46 ----D---- C:\windows\Tasks
2013-01-02 01:01:16 ----D---- C:\windows\system32\CodeIntegrity
2013-01-01 23:57:28 ----HD---- C:\ExpressGateUtil
2013-01-01 23:57:13 ----D---- C:\windows\ModemLogs
2013-01-01 23:49:48 ----D---- C:\ProgramData\Trend Micro
2013-01-01 23:48:38 ----D---- C:\Program Files\Asus
2013-01-01 23:46:54 ----RD---- C:\Users

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\windows\system32\DRIVERS\epfwwfp.sys [2012-11-28 47056]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 435736]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 AsIO;AsIO; C:\windows\system32\drivers\AsIO.sys [2010-06-28 11456]
R1 AsUpIO;AsUpIO; C:\windows\system32\drivers\AsUpIO.sys [2010-08-03 11832]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2012-10-08 170656]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2012-10-08 121216]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\windows\system32\DRIVERS\EpfwLWF.sys [2012-10-08 46056]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 80464]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 189520]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 64080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 epfw;epfw; C:\windows\system32\DRIVERS\epfw.sys [2012-10-08 149568]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 92112]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2010-04-13 109960]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\windows\system32\DRIVERS\ewdcsc.sys [2009-12-15 23424]
R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\windows\system32\DRIVERS\ewusbmdm.sys [2009-12-15 102912]
R3 hwusbdev;Huawei DataCard USB PNP Device; C:\windows\system32\DRIVERS\ewusbdev.sys [2009-12-15 101120]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2010-05-10 4806144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2010-08-24 3178472]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 13880]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x86.sys [2010-09-27 68208]
S2 Parvdm;Parvdm; C:\windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys []
S3 btwrchid;btwrchid; C:\windows\system32\drivers\btwrchid.sys []
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 Synth3dVsc;Synth3dVsc; C:\windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-22 81704]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AsusService;Asus Launcher Service; C:\windows\system32\AsusService.exe [2011-03-04 224680]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2012-11-26 1329304]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 161104]
R2 VideAceWindowsService;VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [2011-01-13 91464]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-02 116648]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 196320]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-02 116648]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-01-03 1343400]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NETB

#5 Příspěvek od Rudy »

Stáhněte AdwCleaner http://stahnu.cz/tag/adw-cleaner-free-download
Uložte na plochu
Ukončete všechny programy
Klikněte na Search
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Worgens
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 03 led 2013 23:13

Re: Problém s NETB

#6 Příspěvek od Worgens »

# AdwCleaner v2.007 - Logfile created 01/04/2013 at 20:51:10
# Updated 06/11/2012 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (32 bits)
# User : Robin - ROBIN-PC
# Boot Mode : Normal
# Running from : C:\Users\Robin\Downloads\adwcleaner_2.103.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [672 octets] - [04/01/2013 20:51:10]

########## EOF - C:\AdwCleaner[R1].txt - [731 octets] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NETB

#7 Příspěvek od Rudy »

OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

:services
BBSvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Worgens
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 03 led 2013 23:13

Re: Problém s NETB

#8 Příspěvek od Worgens »

Logfile of random's system information tool 1.09 (written by random/random)
Run by Robin at 2013-01-04 22:07:47
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 79 GB (77%) free of 102 GB
Total RAM: 1014 MB (15% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:07:59, on 4.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\windows\system32\taskeng.exe
C:\Program Files\Common Files\InstantOn\InsOnWMI.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Asus\Eee Docking\Eee Docking.exe
C:\ExpressGateUtil\VAWinAgent.exe
C:\Windows\System32\igfxtray.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\O2\O2CZ\EMMSN.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\O2\Nori\Nori.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\windows\system32\wuauclt.exe
C:\windows\system32\SearchProtocolHost.exe
C:\windows\system32\SearchFilterHost.exe
C:\Users\Robin\Downloads\RSIT.exe
C:\Program Files\trend micro\Robin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O4 - HKLM\..\Run: [ETDWare] %ProgramFiles%\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [LiveUpdate] AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [VizorHtmlDialog.exe] "C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" "DEF" "EULA" "C:\Program Files\Trend Micro\Titanium\UI\Installer.cmpt\resources\preinstall_01_welcome_trial.html" "DEF" "DEF" "DEF"
O4 - HKLM\..\Run: [Trend Micro Client Framework] "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe"
O4 - HKLM\..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe -ReFlush "none" "none"
O4 - HKLM\..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [O2CZ] "C:\Program Files\O2\O2CZ\EMMSN.exe" -systray
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{54FF0D40-2D35-4EFD-8ED6-AB6D3988F683}: NameServer = 160.218.167.5 160.218.161.60
O17 - HKLM\System\CS1\Services\Tcpip\..\{54FF0D40-2D35-4EFD-8ED6-AB6D3988F683}: NameServer = 160.218.167.5 160.218.161.60
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\system32\AsusService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: VideAceWindowsService - Unknown owner - C:\ExpressGateUtil\VAWinService.exe

--
End of file - 8720 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 185680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 548744]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe []
"LiveUpdate"=AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto []
"CapsHook"=AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [2011-01-06 414384]
"ASUSWebStorage"=C:\Program Files\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [2011-02-23 731472]
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 112632]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 218448]
"VAWinAgent"=C:\ExpressGateUtil\VAWinAgent.exe [2011-03-24 45448]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-05-10 141848]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-05-10 173592]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-05-10 150552]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-08-24 9722472]
"ASUSPRP"=C:\Program Files\ASUS\APRP\APRP.EXE [2011-04-30 2018032]
"O2CZ"=C:\Program Files\O2\O2CZ\EMMSN.exe [2009-11-30 4050632]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-11-26 5074384]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\SYSTEM32\igfxdev.dll [2010-05-10 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-04 21:58:34 ----D---- C:\_OTM
2013-01-04 20:51:10 ----A---- C:\AdwCleaner[R1].txt
2013-01-04 20:18:41 ----D---- C:\rsit
2013-01-04 14:43:36 ----SHD---- C:\Config.Msi
2013-01-04 14:31:22 ----D---- C:\Program Files\Common Files\DESIGNER
2013-01-04 14:15:11 ----D---- C:\Program Files\Microsoft Analysis Services
2013-01-04 14:14:07 ----D---- C:\ProgramData\Microsoft Help
2013-01-04 14:13:07 ----RHD---- C:\MSOCache
2013-01-04 03:06:37 ----A---- C:\windows\system32\Wdfres.dll
2013-01-04 03:06:37 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-01-04 03:06:37 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-01-04 03:05:25 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-01-04 03:05:25 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-01-04 03:05:23 ----A---- C:\windows\system32\WUDFSvc.dll
2013-01-04 03:05:23 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-01-04 03:05:21 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-01-04 03:05:20 ----A---- C:\windows\system32\WUDFx.dll
2013-01-04 03:05:20 ----A---- C:\windows\system32\WUDFHost.exe
2013-01-04 01:02:05 ----D---- C:\Program Files\CCleaner
2013-01-03 23:27:46 ----D---- C:\Users\Robin\AppData\Roaming\WinRAR
2013-01-03 23:27:18 ----D---- C:\Program Files\WinRAR
2013-01-03 16:22:43 ----D---- C:\Program Files\Microsoft.NET
2013-01-03 16:16:42 ----D---- C:\Program Files\Microsoft SkyDrive
2013-01-03 16:15:49 ----D---- C:\ProgramData\Microsoft SkyDrive
2013-01-03 12:39:25 ----D---- C:\windows\system32\Wat
2013-01-03 12:39:23 ----SHD---- C:\windows\BitLockerDiscoveryVolumeContents
2013-01-03 12:39:23 ----D---- C:\windows\RemotePackages
2013-01-03 12:02:54 ----A---- C:\windows\system32\win32spl.dll
2013-01-03 12:02:54 ----A---- C:\windows\system32\spoolsv.exe
2013-01-03 12:02:50 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-01-03 12:02:50 ----A---- C:\windows\system32\drivers\ndis.sys
2013-01-03 12:02:48 ----A---- C:\windows\system32\xmllite.dll
2013-01-03 12:02:46 ----A---- C:\windows\system32\prevhost.exe
2013-01-03 12:02:45 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbport.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbd.sys
2013-01-03 12:02:44 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-01-03 12:00:44 ----A---- C:\windows\system32\esent.dll
2013-01-03 12:00:44 ----A---- C:\windows\system32\drivers\storport.sys
2013-01-03 12:00:43 ----A---- C:\windows\system32\fsutil.exe
2013-01-03 12:00:43 ----A---- C:\windows\system32\drivers\nvstor.sys
2013-01-03 12:00:43 ----A---- C:\windows\system32\drivers\nvraid.sys
2013-01-03 12:00:43 ----A---- C:\windows\system32\drivers\iaStorV.sys
2013-01-03 12:00:43 ----A---- C:\windows\system32\drivers\amdxata.sys
2013-01-03 12:00:43 ----A---- C:\windows\system32\drivers\amdsata.sys
2013-01-03 12:00:42 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2013-01-03 12:00:20 ----A---- C:\windows\system32\OxpsConverter.exe
2013-01-03 12:00:01 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2013-01-03 12:00:01 ----A---- C:\windows\system32\drivers\bthport.sys
2013-01-03 11:58:42 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-01-03 11:58:19 ----A---- C:\windows\system32\ncsi.dll
2013-01-03 11:58:19 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-01-03 11:58:18 ----A---- C:\windows\system32\nlasvc.dll
2013-01-03 11:58:18 ----A---- C:\windows\system32\netcorehc.dll
2013-01-03 11:58:18 ----A---- C:\windows\system32\iphlpsvc.dll
2013-01-03 11:58:17 ----A---- C:\windows\system32\nlaapi.dll
2013-01-03 11:58:17 ----A---- C:\windows\system32\netevent.dll
2013-01-03 11:58:17 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-01-03 11:57:51 ----A---- C:\windows\system32\tquery.dll
2013-01-03 11:57:51 ----A---- C:\windows\system32\mssrch.dll
2013-01-03 11:57:50 ----A---- C:\windows\system32\SearchProtocolHost.exe
2013-01-03 11:57:50 ----A---- C:\windows\system32\SearchIndexer.exe
2013-01-03 11:57:50 ----A---- C:\windows\system32\mssph.dll
2013-01-03 11:57:49 ----A---- C:\windows\system32\SearchFilterHost.exe
2013-01-03 11:57:49 ----A---- C:\windows\system32\mssvp.dll
2013-01-03 11:57:49 ----A---- C:\windows\system32\mssphtb.dll
2013-01-03 11:57:48 ----A---- C:\windows\system32\msscntrs.dll
2013-01-03 11:57:17 ----A---- C:\windows\system32\srcore.dll
2013-01-03 11:57:14 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-01-03 11:57:12 ----A---- C:\windows\system32\XpsPrint.dll
2013-01-03 11:57:10 ----A---- C:\windows\explorer.exe
2013-01-03 11:57:08 ----A---- C:\windows\system32\msi.dll
2013-01-03 11:57:06 ----A---- C:\windows\system32\d3d10level9.dll
2013-01-03 11:57:03 ----A---- C:\windows\system32\profsvc.dll
2013-01-03 11:56:57 ----A---- C:\windows\system32\ntshrui.dll
2013-01-03 11:56:50 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-01-03 11:56:50 ----A---- C:\windows\system32\dhcpcore6.dll
2013-01-03 11:56:40 ----A---- C:\windows\system32\drivers\Diskdump.sys
2013-01-03 11:56:37 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-01-03 10:46:47 ----D---- C:\Program Files\Windows Journal
2013-01-03 10:46:40 ----D---- C:\windows\ShellNew
2013-01-03 10:46:40 ----D---- C:\windows\ehome
2013-01-03 10:46:40 ----D---- C:\windows\CSC
2013-01-02 22:24:01 ----A---- C:\windows\system32\fontsub.dll
2013-01-02 22:24:01 ----A---- C:\windows\system32\atmlib.dll
2013-01-02 22:24:01 ----A---- C:\windows\system32\atmfd.dll
2013-01-02 22:14:30 ----A---- C:\windows\system32\mshtmled.dll
2013-01-02 22:14:29 ----A---- C:\windows\system32\vbscript.dll
2013-01-02 22:14:29 ----A---- C:\windows\system32\jsproxy.dll
2013-01-02 22:14:28 ----A---- C:\windows\system32\ieui.dll
2013-01-02 22:14:27 ----A---- C:\windows\system32\msfeeds.dll
2013-01-02 22:14:27 ----A---- C:\windows\system32\ieUnatt.exe
2013-01-02 22:14:26 ----A---- C:\windows\system32\wininet.dll
2013-01-02 22:14:26 ----A---- C:\windows\system32\jscript.dll
2013-01-02 22:14:24 ----A---- C:\windows\system32\url.dll
2013-01-02 22:14:24 ----A---- C:\windows\system32\jscript9.dll
2013-01-02 22:14:23 ----A---- C:\windows\system32\iertutil.dll
2013-01-02 22:14:22 ----A---- C:\windows\system32\urlmon.dll
2013-01-02 22:14:20 ----A---- C:\windows\system32\ieframe.dll
2013-01-02 22:14:15 ----A---- C:\windows\system32\mshtml.dll
2013-01-02 22:01:45 ----A---- C:\windows\system32\wmi.dll
2013-01-02 22:01:45 ----A---- C:\windows\system32\imagehlp.dll
2013-01-02 22:01:45 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-01-02 22:01:34 ----A---- C:\windows\system32\browserchoice.exe
2013-01-02 21:53:04 ----A---- C:\windows\system32\MRT.exe
2013-01-02 21:49:19 ----A---- C:\windows\system32\win32k.sys
2013-01-02 21:48:32 ----A---- C:\windows\system32\wintrust.dll
2013-01-02 21:48:15 ----A---- C:\windows\system32\kernel32.dll
2013-01-02 21:48:14 ----A---- C:\windows\system32\winsrv.dll
2013-01-02 21:48:14 ----A---- C:\windows\system32\KernelBase.dll
2013-01-02 21:48:13 ----A---- C:\windows\system32\conhost.exe
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-01-02 21:48:11 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-01-02 21:48:10 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-01-02 21:48:09 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-01-02 21:48:09 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-02 21:48:09 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-01-02 21:48:09 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-01-02 21:48:09 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-01-02 21:47:37 ----A---- C:\windows\system32\dpnet.dll
2013-01-02 21:47:34 ----A---- C:\windows\system32\drivers\netio.sys
2013-01-02 21:47:33 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-01-02 21:47:20 ----A---- C:\windows\system32\rdpcorets.dll
2013-01-02 21:47:20 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-01-02 21:47:16 ----A---- C:\windows\system32\schannel.dll
2013-01-02 21:47:16 ----A---- C:\windows\system32\ncrypt.dll
2013-01-02 21:47:16 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-01-02 21:47:16 ----A---- C:\windows\system32\drivers\cng.sys
2013-01-02 21:47:15 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-01-02 21:47:12 ----A---- C:\windows\system32\msxml6.dll
2013-01-02 21:47:11 ----A---- C:\windows\system32\msxml3r.dll
2013-01-02 21:47:11 ----A---- C:\windows\system32\msxml3.dll
2013-01-02 21:47:05 ----A---- C:\windows\system32\cdosys.dll
2013-01-02 21:46:58 ----A---- C:\windows\system32\netapi32.dll
2013-01-02 21:46:58 ----A---- C:\windows\system32\browser.dll
2013-01-02 21:46:58 ----A---- C:\windows\system32\browcli.dll
2013-01-02 21:46:56 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-01-02 21:46:56 ----A---- C:\windows\system32\rdpwsx.dll
2013-01-02 21:46:56 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-01-02 21:46:50 ----A---- C:\windows\system32\ntkrnlpa.exe
2013-01-02 21:46:49 ----A---- C:\windows\system32\ntoskrnl.exe
2013-01-02 21:46:46 ----A---- C:\windows\system32\kerberos.dll
2013-01-02 21:46:44 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-01-02 21:46:42 ----A---- C:\windows\system32\synceng.dll
2013-01-02 21:46:40 ----A---- C:\windows\system32\localspl.dll
2013-01-02 21:46:33 ----A---- C:\windows\system32\shell32.dll
2013-01-02 21:46:16 ----A---- C:\windows\system32\tzres.dll
2013-01-02 21:45:48 ----A---- C:\windows\system32\drivers\srvnet.sys
2013-01-02 21:45:48 ----A---- C:\windows\system32\drivers\srv2.sys
2013-01-02 21:45:48 ----A---- C:\windows\system32\drivers\srv.sys
2013-01-02 21:45:44 ----A---- C:\windows\system32\drivers\afd.sys
2013-01-02 21:45:42 ----A---- C:\windows\system32\ntdll.dll
2013-01-02 21:44:42 ----A---- C:\windows\system32\dnsrslvr.dll
2013-01-02 21:44:42 ----A---- C:\windows\system32\dnsapi.dll
2013-01-02 21:44:41 ----A---- C:\windows\system32\dnscacheugc.exe
2013-01-02 21:44:22 ----A---- C:\windows\system32\cryptsvc.dll
2013-01-02 21:44:22 ----A---- C:\windows\system32\cryptnet.dll
2013-01-02 21:44:22 ----A---- C:\windows\system32\crypt32.dll
2013-01-02 21:43:46 ----A---- C:\windows\system32\psisdecd.dll
2013-01-02 21:43:43 ----A---- C:\windows\system32\umpnpmgr.dll
2013-01-02 21:43:40 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2013-01-02 21:43:40 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2013-01-02 21:43:40 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2013-01-02 21:43:38 ----A---- C:\windows\system32\oleacc.dll
2013-01-02 21:43:37 ----A---- C:\windows\system32\oleaut32.dll
2013-01-02 21:43:26 ----A---- C:\windows\system32\inetcomm.dll
2013-01-02 21:43:20 ----A---- C:\windows\system32\packager.dll
2013-01-02 21:43:10 ----A---- C:\windows\system32\FXSCOVER.exe
2013-01-02 21:43:07 ----A---- C:\windows\system32\EncDec.dll
2013-01-02 21:43:05 ----A---- C:\windows\system32\csrsrv.dll
2013-01-02 21:43:03 ----A---- C:\windows\system32\CPFilters.dll
2013-01-02 21:43:02 ----A---- C:\windows\system32\sbe.dll
2013-01-02 21:42:58 ----A---- C:\windows\system32\quartz.dll
2013-01-02 21:42:58 ----A---- C:\windows\system32\qdvd.dll
2013-01-02 21:42:11 ----A---- C:\windows\system32\lsasrv.dll
2013-01-02 21:42:10 ----A---- C:\windows\system32\webio.dll
2013-01-02 21:42:10 ----A---- C:\windows\system32\sspisrv.dll
2013-01-02 21:42:10 ----A---- C:\windows\system32\sspicli.dll
2013-01-02 21:42:10 ----A---- C:\windows\system32\secur32.dll
2013-01-02 21:42:10 ----A---- C:\windows\system32\lsass.exe
2013-01-02 21:42:07 ----A---- C:\windows\system32\odbcjt32.dll
2013-01-02 21:42:07 ----A---- C:\windows\system32\odbccu32.dll
2013-01-02 21:42:07 ----A---- C:\windows\system32\odbccr32.dll
2013-01-02 21:42:06 ----A---- C:\windows\system32\odbctrac.dll
2013-01-02 21:42:06 ----A---- C:\windows\system32\odbccp32.dll
2013-01-02 21:42:03 ----A---- C:\windows\system32\mfc42.dll
2013-01-02 21:42:02 ----A---- C:\windows\system32\mfc42u.dll
2013-01-02 21:42:00 ----A---- C:\windows\system32\msvcrt.dll
2013-01-02 21:41:57 ----A---- C:\windows\system32\DWrite.dll
2013-01-02 21:41:53 ----A---- C:\windows\system32\drivers\bowser.sys
2013-01-02 21:27:40 ----A---- C:\windows\system32\poqexec.exe
2013-01-02 21:13:19 ----A---- C:\windows\system32\rdpcore.dll
2013-01-02 21:13:19 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-01-02 09:36:58 ----SHD---- C:\Boot
2013-01-02 08:40:47 ----D---- C:\windows\SoftwareDistribution
2013-01-02 08:37:56 ----SHD---- C:\System Volume Information
2013-01-02 08:37:56 ----ASH---- C:\pagefile.sys
2013-01-02 08:37:56 ----ASH---- C:\hiberfil.sys
2013-01-02 03:19:46 ----A---- C:\windows\system32\wups2.dll
2013-01-02 03:19:46 ----A---- C:\windows\system32\wucltux.dll
2013-01-02 03:19:46 ----A---- C:\windows\system32\wuaueng.dll
2013-01-02 03:19:46 ----A---- C:\windows\system32\wuauclt.exe
2013-01-02 03:19:13 ----A---- C:\windows\system32\wups.dll
2013-01-02 03:19:13 ----A---- C:\windows\system32\wudriver.dll
2013-01-02 03:19:13 ----A---- C:\windows\system32\wuapi.dll
2013-01-02 03:18:55 ----A---- C:\windows\system32\wuwebv.dll
2013-01-02 03:18:55 ----A---- C:\windows\system32\wuapp.exe
2013-01-02 03:12:18 ----N---- C:\windows\system32\MpSigStub.exe
2013-01-02 02:57:05 ----D---- C:\Users\Robin\AppData\Roaming\ESET
2013-01-02 02:54:43 ----D---- C:\ProgramData\ESET
2013-01-02 02:54:43 ----D---- C:\Program Files\ESET
2013-01-02 01:06:44 ----D---- C:\Program Files\Google
2013-01-01 23:54:44 ----D---- C:\Users\Robin\AppData\Roaming\Telefónica Móviles
2013-01-01 23:54:14 ----A---- C:\windows\system32\drivers\ewusbnet.sys
2013-01-01 23:54:14 ----A---- C:\windows\system32\drivers\ewusbmdm.sys
2013-01-01 23:54:13 ----A---- C:\windows\system32\drivers\ewusbdev.sys
2013-01-01 23:54:13 ----A---- C:\windows\system32\drivers\ewdcsc.sys
2013-01-01 23:54:04 ----D---- C:\Program Files\O2
2013-01-01 23:52:06 ----SHD---- C:\$RECYCLE.BIN
2013-01-01 23:49:42 ----A---- C:\windows\Language.ini
2013-01-01 23:49:20 ----D---- C:\windows\ConfigSetRoot
2013-01-01 23:48:38 ----A---- C:\windows\system32\drivers\RTEQEX0.dat
2013-01-01 23:46:55 ----SD---- C:\Users\Robin\AppData\Roaming\Microsoft
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\Macromedia
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\InstallShield
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\Identities
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\E-Cam
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\ASUS WebStorage
2013-01-01 23:46:55 ----D---- C:\Users\Robin\AppData\Roaming\Adobe
2013-01-01 23:45:32 ----SHD---- C:\Recovery

======List of files/folders modified in the last 1 month======

2013-01-04 22:07:52 ----D---- C:\Program Files\Trend Micro
2013-01-04 22:07:51 ----D---- C:\windows\Temp
2013-01-04 22:03:55 ----D---- C:\windows\system32\config
2013-01-04 21:58:40 ----D---- C:\windows\Tasks
2013-01-04 18:13:05 ----D---- C:\Windows
2013-01-04 15:29:39 ----D---- C:\windows\Microsoft.NET
2013-01-04 15:29:34 ----RSD---- C:\windows\assembly
2013-01-04 14:52:27 ----SHD---- C:\windows\Installer
2013-01-04 14:47:09 ----A---- C:\windows\win.ini
2013-01-04 14:43:49 ----SD---- C:\ProgramData\Microsoft
2013-01-04 14:43:45 ----D---- C:\Program Files\Microsoft Office
2013-01-04 14:40:13 ----D---- C:\windows\winsxs
2013-01-04 14:38:53 ----D---- C:\windows\system32\Tasks
2013-01-04 14:34:44 ----RSD---- C:\windows\Fonts
2013-01-04 14:34:41 ----D---- C:\windows\System32
2013-01-04 14:33:58 ----D---- C:\Program Files\Common Files\microsoft shared
2013-01-04 14:31:22 ----D---- C:\Program Files\Common Files
2013-01-04 14:15:24 ----D---- C:\Program Files\Common Files\System
2013-01-04 14:15:11 ----RD---- C:\Program Files
2013-01-04 14:14:07 ----HD---- C:\ProgramData
2013-01-04 12:53:43 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-01-04 12:53:40 ----D---- C:\windows\inf
2013-01-04 12:42:01 ----D---- C:\windows\AppPatch
2013-01-04 12:42:01 ----AD---- C:\windows\system32\drivers
2013-01-04 12:42:00 ----D---- C:\windows\system32\pl-PL
2013-01-04 12:42:00 ----D---- C:\windows\system32\hu-HU
2013-01-04 12:42:00 ----D---- C:\windows\system32\en-US
2013-01-04 12:42:00 ----D---- C:\windows\system32\cs-CZ
2013-01-04 12:41:56 ----D---- C:\windows\PolicyDefinitions
2013-01-04 12:41:55 ----D---- C:\windows\system32\migration
2013-01-04 12:41:53 ----D---- C:\windows\system32\drivers\pl-PL
2013-01-04 12:41:53 ----D---- C:\windows\system32\drivers\hu-HU
2013-01-04 12:41:53 ----D---- C:\windows\system32\drivers\en-US
2013-01-04 12:41:53 ----D---- C:\windows\system32\drivers\cs-CZ
2013-01-04 12:41:52 ----D---- C:\windows\system32\wbem
2013-01-04 12:41:50 ----D---- C:\windows\system32\sk-SK
2013-01-04 12:41:41 ----D---- C:\windows\system32\DriverStore
2013-01-04 03:12:48 ----D---- C:\windows\system32\wdi
2013-01-04 03:07:07 ----D---- C:\windows\system32\catroot2
2013-01-04 03:07:07 ----D---- C:\windows\system32\catroot
2013-01-04 01:08:59 ----D---- C:\windows\panther
2013-01-04 01:08:53 ----D---- C:\windows\Logs
2013-01-04 01:08:52 ----D---- C:\windows\debug
2013-01-03 16:15:48 ----D---- C:\Program Files\Windows Live
2013-01-03 12:41:30 ----D---- C:\Program Files\Microsoft Silverlight
2013-01-03 12:39:22 ----D---- C:\windows\system32\drivers\UMDF
2013-01-03 12:38:05 ----D---- C:\windows\system32\restore
2013-01-03 10:46:55 ----D---- C:\Program Files\DVD Maker
2013-01-03 10:46:40 ----D---- C:\windows\security
2013-01-02 22:53:36 ----D---- C:\windows\Prefetch
2013-01-02 22:29:05 ----D---- C:\Program Files\Internet Explorer
2013-01-02 08:44:35 ----D---- C:\windows\rescache
2013-01-02 08:40:10 ----D---- C:\windows\system32\RTCOM
2013-01-02 08:37:56 ----D---- C:\Program Files\Elantech
2013-01-02 01:01:16 ----D---- C:\windows\system32\CodeIntegrity
2013-01-01 23:57:28 ----HD---- C:\ExpressGateUtil
2013-01-01 23:57:13 ----D---- C:\windows\ModemLogs
2013-01-01 23:49:48 ----D---- C:\ProgramData\Trend Micro
2013-01-01 23:48:38 ----D---- C:\Program Files\Asus
2013-01-01 23:46:54 ----RD---- C:\Users

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\windows\system32\DRIVERS\epfwwfp.sys [2012-11-28 47056]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 435736]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 AsIO;AsIO; C:\windows\system32\drivers\AsIO.sys [2010-06-28 11456]
R1 AsUpIO;AsUpIO; C:\windows\system32\drivers\AsUpIO.sys [2010-08-03 11832]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2012-10-08 170656]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2012-10-08 121216]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\windows\system32\DRIVERS\EpfwLWF.sys [2012-10-08 46056]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 80464]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 189520]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 64080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 epfw;epfw; C:\windows\system32\DRIVERS\epfw.sys [2012-10-08 149568]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 92112]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2010-04-13 109960]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\windows\system32\DRIVERS\ewdcsc.sys [2009-12-15 23424]
R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\windows\system32\DRIVERS\ewusbmdm.sys [2009-12-15 102912]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2010-05-10 4806144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2010-08-24 3178472]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 13880]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x86.sys [2010-09-27 68208]
S2 Parvdm;Parvdm; C:\windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys []
S3 btwrchid;btwrchid; C:\windows\system32\drivers\btwrchid.sys []
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\windows\system32\DRIVERS\ewusbdev.sys [2009-12-15 101120]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 Synth3dVsc;Synth3dVsc; C:\windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-22 81704]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AsusService;Asus Launcher Service; C:\windows\system32\AsusService.exe [2011-03-04 224680]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2012-11-26 1329304]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 161104]
R2 VideAceWindowsService;VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [2011-01-13 91464]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-02 116648]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 196320]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-02 116648]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-01-03 1343400]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NETB

#9 Příspěvek od Rudy »

Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Worgens
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 03 led 2013 23:13

Re: Problém s NETB

#10 Příspěvek od Worgens »

Ok PC Restartováno a to je vše? :???:
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NETB

#11 Příspěvek od Rudy »

Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Worgens
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 03 led 2013 23:13

Re: Problém s NETB

#12 Příspěvek od Worgens »

Změna pouze v rychlém načtení Win 7 ultimate SP1 načtení ESETU a o2průvodce připojením ale stále využité CPU na 100% při otevření správce uloh cpu na 2% -6% ;-)

EDIT: též rychlém načtení stránek a asi jen 560 mb využítí ram ;-) místou zvyklích 800 mb
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NETB

#13 Příspěvek od Rudy »

Nainstalujte ProcessExplorer (je to sofistikovanější správce úloh) a zjistěte, který proces zatížení způsobuje.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Worgens
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 03 led 2013 23:13

Re: Problém s NETB

#14 Příspěvek od Worgens »

Explo a cože? o.O a seženu to normálně na uloz.to? či tak nějak?
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NETB

#15 Příspěvek od Rudy »

Pardon, zapoměl jsem dát odkaz: http://www.stahuj.centrum.cz/utility_a_ ... -explorer/ .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“