Problém s USB

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
jerry990
3. Stupeň Varování
Příspěvky: 87
Registrován: 04 Črv 2011 12:10

Problém s USB

#1 Příspěvek od jerry990 »

Dobrý deň. Opäť by som potreboval poradiť -> jedná sa o moje USB ktoré bolo zasiahnuté vírusom. AVAST tento vírus našiel a zničil, problém je v tom, že poškodený súbor bol spúšťač USB, v resp. vymazaný súbor.

K vírusu som prišiel najskôr v škole, ale problém je, že v mojej zložke na USB sa nachádzajú veci, ktoré by som nechcel stratiť - úlohy na informatiku, prezentácie a podobne.

Chcel by som si nechať poradiť, ako by som mohol preskúmať alebo nejak zachrániť súbory z toho USB poprípade opraviť USB? Vopred ďakujem za odpoveď a ospravedlňujem sa, pokiaľ som to dal do zlej sekcie ale tu mi to sedelo najviac.

Vypisuje mi táto hláška:
Obrázek
Samotný súbor, ktorý tam je vypísaný som na internete nenašiel.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Problém s USB

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=105895

:arrow: Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
jerry990
3. Stupeň Varování
Příspěvky: 87
Registrován: 04 Črv 2011 12:10

Re: Problém s USB

#3 Příspěvek od jerry990 »

Log z RSIT (bez pripojeného USB)
Logfile of random's system information tool 1.09 (written by random/random)
Run by Admin at 2013-04-09 18:58:43
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 39 GB (38%) free of 102 GB
Total RAM: 4094 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:58:49, on 9. 4. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Windows\PixArt\PAC7302\Monitor.exe
C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\PROGRA~2\MICROS~1\Office12\POWERPNT.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Admin\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTo0.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: uTorrentControl_v2 - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTo0.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTo0.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Hry\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [aswAhAScr.dll] "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\AhAScr.dll"
O4 - HKLM\..\RunOnce: [aswasOutExt.dll] "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\asOutExt.dll"
O4 - HKLM\..\RunOnce: [aswasOutExt64.dll] "C:\Program Files\AVAST Software\Avast\aswRegSvr64.exe" "C:\Program Files\AVAST Software\Avast\asOutExt64.dll"
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [Google Update] "C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [FixMyRegistry] D:\Hry\SmartTweak Software\FixMyRegistry\FixMyRegistry.exe /ot /as
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3644838229-2338041045-4258619671-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3644838229-2338041045-4258619671-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: CineForm Status.lnk = C:\Program Files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PACE License Services (PaceLicenseDServices) - PACE Anti-Piracy, Inc. - C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11259 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Windows\PixArt\PAC7302\Monitor.exe"
WLIDSvcM.exe 2624
"C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4968.0.344694826\126833996" --supports-dual-gpus=false --gpu-vendor-id=0x10de --gpu-device-id=0x1245 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.697 --ignored=" --type=renderer " /prefetch:12
C:\Windows\system32\AUDIODG.EXE 0x670
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4968.15.656732653\896265537" --lang=sk --ignored=" --type=renderer " /prefetch:13
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndDynamic/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4968.16.1939438869\1985622739" /prefetch:3
"C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE"
C:\Windows\splwow64.exe 12288
"C:\Windows\system32\mspaint.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndDynamic/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4968.36.955636892\1712154746" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndDynamic/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4968.37.1237290389\216605248" /prefetch:3
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndDynamic/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4968.39.1819195911\176039808" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndDynamic/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4968.42.398995572\541087611" /prefetch:3
C:\Windows\system32\prevhost.exe {914FEED8-267A-4BAA-B8AA-21E233792679} -Embedding
"C:\Program Files\Windows Media Player\wmprph.exe" -Embedding
C:\PROGRA~2\MICROS~1\Office12\POWERPNT.EXE -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndDynamic/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4968.47.1849439544\98611744" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Admin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll" --lang=sk --channel="4968.48.1249744980\64964967" /prefetch:4
"C:\Users\Admin\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe"
C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndDynamic/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4968.49.892319172\92618292" /prefetch:3
C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\system32\wbem\wmiprvse.exe
"D:\DOWNLOADS\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3644838229-2338041045-4258619671-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3644838229-2338041045-4258619671-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pti9u5ec.default

prefs.js - "browser.startup.homepage" - "http://www.google.sk/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.170 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.13.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.170 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.10.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
NPOFF12.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pti9u5ec.default\extensions\
{7473b6bd-4691-4744-a82b-7854eb3d70b6}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-31 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-12-24 551400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-12-24 209384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTo0.dll [2012-11-06 183112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-02-18 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-31 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-02-18 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-31 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-31 1227736]
{7473b6bd-4691-4744-a82b-7854eb3d70b6} - uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTo0.dll [2012-11-06 183112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"PAC7302_Monitor"=C:\Windows\PixArt\PAC7302\Monitor.exe [2007-12-10 323584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2007-12-13 1688872]
"AdobeBridge"= []
"Google Update"=C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-12-15 116648]
"FixMyRegistry"=D:\Hry\SmartTweak Software\FixMyRegistry\FixMyRegistry.exe /ot /as []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-10-31 4297136]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-11-28 59280]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2012-12-12 152544]
"QuickTime Task"=D:\Hry\QuickTime\QTTask.exe [2012-10-25 421888]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"aswAhAScr.dll"=C:\Program Files\AVAST Software\Avast\aswRegSvr.exe [2013-03-07 51880]
"aswasOutExt.dll"=C:\Program Files\AVAST Software\Avast\aswRegSvr.exe [2013-03-07 51880]
"aswasOutExt64.dll"=C:\Program Files\AVAST Software\Avast\aswRegSvr64.exe [2013-03-07 50904]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
CineForm Status.lnk - C:\Program Files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.l3codecp"=l3codecp.acm
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.CFHD"=CFHD.dll
"VIDC.FPS1"=frapsv64.dll
"MSVideo8"=VfWWDM32.dll
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux2"=wdmaud.drv
"wave8"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-04-09 18:58:43 ----D---- C:\rsit
2013-04-09 18:58:43 ----D---- C:\Program Files\trend micro
2013-04-09 18:15:10 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-04-09 18:15:10 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2013-04-06 13:51:23 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-04-06 13:51:23 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-04-06 13:51:23 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-04-06 13:51:23 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-04-06 13:51:22 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-04-06 13:51:22 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-04-06 13:51:21 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-04-06 13:51:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-04-06 13:51:21 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-04-06 13:51:21 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-04-06 13:51:20 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-04-06 13:51:20 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-04-06 13:51:20 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-04-06 13:51:20 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-04-06 13:51:19 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-04-06 13:51:19 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-04-06 13:51:18 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-04-06 13:51:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-04-06 13:51:18 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-04-06 13:51:18 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-04-06 13:51:18 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-04-06 13:51:18 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-04-06 13:51:17 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-04-06 13:51:17 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-04-06 13:51:17 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-04-06 13:51:16 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-04-06 13:51:16 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-04-06 13:51:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-04-06 13:51:15 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-04-06 13:51:14 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-04-06 13:51:14 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-04-06 13:51:13 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-04-06 13:51:13 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-04-06 13:51:12 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-04-06 13:51:12 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-04-06 13:51:11 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-04-06 13:51:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-04-06 13:51:11 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-04-06 13:51:11 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-04-06 13:51:10 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-04-06 13:51:10 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-04-06 13:51:09 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-04-06 13:51:09 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-04-06 13:51:09 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-04-06 13:51:08 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-04-06 13:51:08 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-04-06 13:51:08 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-04-06 13:51:08 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-04-06 13:51:07 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-04-06 13:51:07 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-04-06 13:51:07 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-04-06 13:51:07 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-04-06 13:51:05 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-04-06 13:51:05 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-04-06 13:51:05 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-04-06 13:51:05 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-04-06 13:51:05 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-04-06 13:51:05 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-04-06 13:51:04 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-04-06 13:51:04 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-04-06 13:51:04 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-04-06 13:51:04 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-04-06 13:51:03 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-04-06 13:51:03 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-04-06 13:51:03 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-04-06 13:51:03 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-04-06 13:51:02 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-04-06 13:51:02 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-04-06 13:51:01 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-04-06 13:51:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-04-06 13:51:01 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-04-06 13:51:01 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-04-06 13:50:59 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-04-06 13:50:59 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-04-06 13:50:59 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-04-06 13:50:59 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-04-06 13:50:58 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-04-06 13:50:58 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-04-06 13:50:58 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-04-06 13:50:58 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-04-06 13:50:58 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-04-06 13:50:58 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-04-06 13:50:57 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-04-06 13:50:57 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-04-06 13:50:57 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-04-06 13:50:57 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-04-06 13:50:55 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-04-06 13:50:55 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-04-06 13:50:55 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-04-06 13:50:55 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-04-06 13:50:54 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-04-06 13:50:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-04-06 13:50:54 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-04-06 13:50:54 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-04-06 13:50:53 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-04-06 13:50:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-04-06 13:50:53 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-04-06 13:50:53 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-04-06 13:50:52 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-04-06 13:50:52 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-04-06 13:50:51 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-04-06 13:50:51 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-04-06 13:50:50 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-04-06 13:50:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-04-06 13:50:50 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-04-06 13:50:50 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-04-06 13:50:49 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-04-06 13:50:49 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-04-06 13:50:48 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-04-06 13:50:48 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-04-06 13:50:47 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-04-06 13:50:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-04-06 13:50:47 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-04-06 13:50:47 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-04-06 13:50:46 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-04-06 13:50:46 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-04-06 13:50:45 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-04-06 13:50:45 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-04-06 13:50:45 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-04-06 13:50:45 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-04-06 13:50:43 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-04-06 13:50:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-04-06 13:50:43 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-04-06 13:50:43 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-04-06 13:50:42 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-04-06 13:50:42 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-04-06 13:50:42 ----A---- C:\Windows\system32\xinput1_3.dll
2013-04-06 13:50:42 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-04-06 13:50:41 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-04-06 13:50:41 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-04-06 13:50:40 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-04-06 13:50:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-04-06 13:50:40 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-04-06 13:50:40 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-04-06 13:50:39 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-04-06 13:50:39 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-04-06 13:50:38 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-04-06 13:50:38 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-04-06 13:50:38 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-04-06 13:50:38 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-04-06 13:50:37 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-04-06 13:50:37 ----A---- C:\Windows\system32\d3dx10.dll
2013-04-06 13:50:36 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-04-06 13:50:36 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-04-06 13:34:05 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-04-06 13:34:05 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-04-06 13:34:03 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-04-06 13:34:03 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-04-06 13:34:03 ----A---- C:\Windows\system32\xinput1_2.dll
2013-04-06 13:34:03 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-04-06 13:34:02 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-04-06 13:34:02 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-04-06 13:34:02 ----A---- C:\Windows\system32\xinput1_1.dll
2013-04-06 13:34:02 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-04-06 13:34:01 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-04-06 13:34:01 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-04-06 13:33:55 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-04-06 13:33:54 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-04-06 13:33:54 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-04-06 13:33:54 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-04-06 13:33:54 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-04-06 13:33:53 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-04-06 13:33:53 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-04-06 13:33:52 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-04-06 13:33:51 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-04-06 13:33:51 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-04-06 13:33:48 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-04-06 13:33:48 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-04-06 13:33:46 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-04-06 13:33:46 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-04-06 13:33:45 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-04-06 13:33:45 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-04-04 19:41:07 ----D---- C:\Users\Admin\AppData\Roaming\Foxreal
2013-04-02 18:41:00 ----D---- C:\ProgramData\RegClean
2013-04-02 18:35:56 ----D---- C:\ProgramData\Logs
2013-03-31 01:36:29 ----D---- C:\Users\Admin\AppData\Roaming\Youtube to MP3 Converter
2013-03-20 12:35:52 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2013-04-09 18:58:49 ----D---- C:\Windows\Prefetch
2013-04-09 18:58:47 ----D---- C:\Windows\Temp
2013-04-09 18:58:43 ----RD---- C:\Program Files
2013-04-09 18:49:42 ----D---- C:\Windows\System32
2013-04-09 18:49:42 ----D---- C:\Windows\inf
2013-04-09 18:49:42 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-09 18:15:11 ----D---- C:\Windows\system32\Tasks
2013-04-09 18:15:10 ----D---- C:\Windows\system32\drivers
2013-04-09 18:15:06 ----D---- C:\Windows
2013-04-09 15:15:03 ----D---- C:\ProgramData\NVIDIA
2013-04-08 18:35:35 ----RSD---- C:\Windows\Fonts
2013-04-08 14:56:17 ----D---- C:\Users\Admin\AppData\Roaming\.minecraft
2013-04-07 21:14:51 ----D---- C:\Windows\system32\config
2013-04-07 02:41:35 ----D---- C:\Users\Admin\AppData\Roaming\TS3Client
2013-04-07 01:09:55 ----D---- C:\Users\Admin\AppData\Roaming\Skype
2013-04-06 21:23:41 ----D---- C:\Users\Admin\AppData\Roaming\Audacity
2013-04-06 19:35:24 ----D---- C:\Windows\SysWOW64
2013-04-06 19:35:21 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-04-06 13:50:31 ----RSD---- C:\Windows\assembly
2013-04-06 13:49:52 ----SHD---- C:\System Volume Information
2013-04-06 13:34:07 ----D---- C:\Windows\Logs
2013-04-06 13:33:57 ----D---- C:\Windows\Microsoft.NET
2013-04-06 13:23:42 ----D---- C:\Users\Admin\AppData\Roaming\DAEMON Tools Lite
2013-04-06 13:17:10 ----D---- C:\Users\Admin\AppData\Roaming\uTorrent
2013-04-04 20:49:14 ----A---- C:\Windows\NeroDigital.ini
2013-04-04 16:15:27 ----HD---- C:\ProgramData
2013-04-03 15:14:44 ----SHD---- C:\Windows\Installer
2013-04-03 13:24:30 ----RD---- C:\Program Files (x86)
2013-04-03 13:24:30 ----D---- C:\Windows\Tasks
2013-04-02 22:46:53 ----D---- C:\Users\Admin\AppData\Roaming\Mozilla
2013-04-02 19:04:12 ----A---- C:\Windows\win.ini
2013-03-21 15:41:44 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-03-20 10:17:14 ----D---- C:\Windows\system32\catroot2
2013-03-16 16:49:02 ----SD---- C:\Users\Admin\AppData\Roaming\Microsoft
2013-03-13 20:07:03 ----D---- C:\Users\Admin\AppData\Roaming\Apple Computer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 Tpkd;Tpkd; C:\Windows\system32\drivers\Tpkd.sys [2012-05-16 105624]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-03-07 70992]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-03-07 1025808]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-03-07 377920]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-03-07 68920]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-13 283200]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2012-12-19 237992]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2012-12-19 120232]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-03-07 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-03-07 80816]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-06-19 4065296]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-07-03 189288]
R3 PAC7302;i-Look 317; C:\Windows\system32\DRIVERS\PAC7302.SYS [2009-04-28 532480]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2012-12-19 132008]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2012-12-19 146856]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-03-07 65336]
S0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-03-07 178624]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-10-31 44808]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-10-02 891240]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-03 1258856]
R2 PaceLicenseDServices;PACE License Services; C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2012-05-18 2938880]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2012-12-12 641504]
R3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-15 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-06 256904]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-15 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-03-20 115608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-12-14 1255736]

-----------------EOF-----------------





LOG s UsbFix
############################## | UsbFix V 7.096 | [Deletion]

User: Admin (Administrator) # GA-P31-DS3L
Updated 15/08/2012 by El Desaparecido
Started at 19:08:51 | 09/04/2013

Website: http://eldesaparecido.com
Forum: http://forum.eldesaparecido.com
Suspicious file ? : http://eldesaparecido.com/upload.php
Contact: contact@eldesaparecido.com

PC: Gigabyte Technology Co., Ltd. (P31-DS3L) (x64-based PC) # Desktop Computer
CPU: Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz (2205)
RAM -> [Total : 4094 | Free : 2375]
BIOS: Award Modular BIOS v6.00PG
BOOT: Normal boot

OS: Microsoft Windows 7 Ultimate (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.0.8112.16421

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: avast! Antivirus [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]

A:\ -> Removable drive # 1 Mb (1 Mb free - 70%) [] # FAT
C:\ (%systemdrive%) -> Fixed drive # 100 Gb (38 Mb free - 38%) [Win7 64bit SYSTEM] # NTFS
D:\ -> Fixed drive # 831 Gb (537 Mb free - 65%) [Nový zväzok] # NTFS
E:\ -> Fixed drive # 34 Gb (11 Mb free - 32%) [Win Stary] # NTFS
F:\ -> Fixed drive # 199 Gb (114 Mb free - 57%) [VIDEOMAKING] # NTFS
G:\ -> Removable drive # 117 Mb (23 Mb free - 19%) [USB DISK] # FAT32
I:\ -> Removable drive # 1006 Mb (334 Mb free - 33%) [] # FAT
O:\ -> CD-ROM
X:\ -> CD-ROM

################## | Active Processes |

C:\Windows\system32\csrss.exe (480)
C:\Windows\system32\wininit.exe (540)
C:\Windows\system32\csrss.exe (548)
C:\Windows\system32\services.exe (616)
C:\Windows\system32\lsass.exe (624)
C:\Windows\system32\lsm.exe (632)
C:\Windows\system32\winlogon.exe (672)
C:\Windows\system32\svchost.exe (784)
C:\Windows\system32\nvvsvc.exe (868)
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (892)
C:\Windows\system32\svchost.exe (928)
C:\Windows\System32\svchost.exe (1000)
C:\Windows\System32\svchost.exe (356)
C:\Windows\system32\svchost.exe (536)
C:\Windows\system32\svchost.exe (1104)
C:\Windows\system32\svchost.exe (1160)
C:\Windows\system32\svchost.exe (1260)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (1332)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1368)
C:\Windows\system32\nvvsvc.exe (1380)
C:\Windows\System32\spoolsv.exe (1572)
C:\Windows\system32\svchost.exe (1608)
C:\Windows\system32\taskhost.exe (1696)
C:\Windows\system32\Dwm.exe (1764)
C:\Windows\Explorer.EXE (1788)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (2012)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2044)
C:\Program Files\Bonjour\mDNSResponder.exe (1848)
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe (2456)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (2464)
C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (2532)
C:\Windows\system32\svchost.exe (2584)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2624)
C:\Windows\PixArt\PAC7302\Monitor.exe (2852)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2864)
C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe (2912)
C:\Program Files\AVAST Software\Avast\AvastUI.exe (2356)
C:\Program Files (x86)\iTunes\iTunesHelper.exe (2452)
C:\Windows\system32\SearchIndexer.exe (488)
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (3176)
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (3300)
C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe (3468)
C:\Program Files\Windows Media Player\wmpnetwk.exe (3724)
C:\Program Files\iPod\bin\iPodService.exe (3872)
C:\Windows\system32\svchost.exe (4040)
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (1280)
C:\Windows\System32\svchost.exe (3004)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4968)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2976)
C:\Windows\system32\AUDIODG.EXE (2384)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (1688)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2580)
C:\Windows\splwow64.exe (4448)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5080)
C:\Windows\system32\wbem\wmiprvse.exe (2956)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4748)
C:\Windows\sysWOW64\wbem\wmiprvse.exe (3652)
C:\Windows\system32\wbem\wmiprvse.exe (4716)
C:\Windows\System32\WUDFHost.exe (3648)
C:\Windows\System32\svchost.exe (4516)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (360)
C:\UsbFix\Go.exe (2440)

################## | Stopped processes |

Stopped! C:\Windows\system32\nvvsvc.exe (868)
Stopped! C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (892)
Stopped! C:\Program Files\AVAST Software\Avast\AvastSvc.exe (1332)
Stopped! C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1368)
Stopped! C:\Windows\system32\nvvsvc.exe (1380)
Stopped! C:\Windows\System32\spoolsv.exe (1572)
Stopped! C:\Windows\system32\taskhost.exe (1696)
Stopped! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (2012)
Stopped! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2044)
Stopped! C:\Program Files\Bonjour\mDNSResponder.exe (1848)
Stopped! C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe (2456)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (2464)
Stopped! C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (2532)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2624)
Stopped! C:\Windows\PixArt\PAC7302\Monitor.exe (2852)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2864)
Stopped! C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe (2912)
Stopped! C:\Program Files\AVAST Software\Avast\AvastUI.exe (2356)
Stopped! C:\Program Files (x86)\iTunes\iTunesHelper.exe (2452)
Stopped! C:\Windows\system32\SearchIndexer.exe (488)
Stopped! C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (3176)
Stopped! C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (3300)
Stopped! C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe (3468)
Stopped! C:\Program Files\Windows Media Player\wmpnetwk.exe (3724)
Stopped! C:\Program Files\iPod\bin\iPodService.exe (3872)
Stopped! C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (1280)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4968)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2976)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (1688)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2580)
Stopped! C:\Windows\splwow64.exe (4448)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5080)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4748)
Stopped! C:\Windows\System32\WUDFHost.exe (3648)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (360)
Stopped! C:\Windows\system32\taskhost.exe (1548)

################## | Files # Infected Folders |

Deleted ! A:\Removable Disk (1GB).lnk
Deleted ! G:\USB DISK (1GB).lnk
Deleted ! I:\Removable Disk (1GB).lnk
Deleted ! C:\$RECYCLE.BIN\S-1-5-21-3644838229-2338041045-4258619671-1000
Deleted ! D:\$RECYCLE.BIN\S-1-5-21-3644838229-2338041045-4258619671-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3644838229-2338041045-4258619671-1000
Deleted ! E:\Recycler\S-1-5-21-220523388-789336058-1801674531-1003
Deleted ! F:\$RECYCLE.BIN\S-1-5-21-3644838229-2338041045-4258619671-1000
Deleted ! F:\$RECYCLE.BIN\S-1-5-21-731427467-179101427-1012170129-1000
Deleted ! F:\Recycler\S-1-5-21-220523388-789336058-1801674531-1003
Deleted ! F:\Recycler\S-1-5-21-220523388-789336058-1801674531-500
Deleted ! F:\Recycler\S-1-5-21-343818398-1078081533-682003330-1003
Deleted ! F:\Recycler\S-1-5-21-343818398-1078081533-682003330-500
Deleted ! F:\Recycler\S-1-5-21-725345543-1035525444-839522115-1003
Deleted ! A:\autorun.inf
Deleted ! G:\autorun.inf
Deleted ! I:\autorun.inf

(!) Temporary files deleted.

################## | Registry |


################## | Mountpoints2 |

Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{788a8f71-452c-11e2-9c58-001d7d913e96}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{f3cf5631-6634-11e2-88e8-001d7d913e96}

################## | Listing |

[09/04/2013 - 13:06:44 | D ] A:\ 
[09/04/2013 - 13:06:46 | N | 16384] A:\~$WVPTVGM.FAT
[09/04/2013 - 13:06:48 | RASH | 2694] A:\desktop.ini
[09/04/2013 - 13:06:48 | RASH | 275962] A:\Thumbs.db
[09/04/2013 - 19:15:21 | SHD ] C:\$Recycle.Bin
[14/12/2012 - 16:15:47 | N | 3] C:\7Loader.TAG
[23/02/2013 - 12:58:08 | N | 1067666] C:\commands.log
[21/03/2013 - 17:09:55 | N | 96] C:\config.yml
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[09/04/2013 - 15:14:58 | ASH | 3220037632] C:\hiberfil.sys
[13/12/2012 - 15:34:23 | D ] C:\Intel
[19/12/2012 - 20:56:57 | N | 723] C:\Miško dokumenty.lnk
[13/12/2012 - 16:27:45 | RHD ] C:\MSOCache
[17/02/2013 - 13:20:14 | N | 6642] C:\notifyCommands.log
[13/12/2012 - 15:48:20 | D ] C:\NVIDIA
[09/04/2013 - 15:15:00 | ASH | 4293386240] C:\pagefile.sys
[14/07/2009 - 05:20:08 | D ] C:\PerfLogs
[21/03/2013 - 17:10:20 | N | 33332] C:\permissions.yml
[09/04/2013 - 18:58:43 | D ] C:\Program Files
[03/04/2013 - 13:24:30 | D ] C:\Program Files (x86)
[04/04/2013 - 16:15:27 | HD ] C:\ProgramData
[12/12/2012 - 16:50:21 | SHD ] C:\Recovery
[09/04/2013 - 18:58:54 | D ] C:\rsit
[23/02/2013 - 13:00:31 | N | 18823] C:\sima.log
[06/04/2013 - 13:49:52 | SHD ] C:\System Volume Information
[09/04/2013 - 19:15:21 | D ] C:\UsbFix
[09/04/2013 - 19:09:49 | A | 9912] C:\UsbFix.txt
[13/12/2012 - 15:51:16 | D ] C:\Users
[19/02/2013 - 21:06:47 | N | 26729] C:\Waazap.log
[09/04/2013 - 18:15:06 | D ] C:\Windows
[14/02/2013 - 22:08:23 | N | 3260] C:\worth.yml
[09/04/2013 - 19:15:21 | SHD ] D:\$RECYCLE.BIN
[03/03/2013 - 14:00:36 | N | 70915] D:\Background.jpeg
[10/02/2013 - 00:35:56 | N | 58853] D:\Bez názvu.wma
[09/02/2013 - 23:44:30 | N | 607934] D:\c-strike.png
[19/01/2013 - 22:44:21 | N | 10394] D:\caption-english.yml
[04/04/2013 - 16:15:27 | D ] D:\Config.Msi
[19/01/2013 - 22:44:26 | N | 1473] D:\config.yml
[09/04/2013 - 19:04:13 | D ] D:\DOWNLOADS
[31/03/2013 - 01:37:25 | N | 0] D:\Eric Prydz - Call On Me (MQ 128kb).flv
[19/01/2013 - 16:21:50 | N | 24795] D:\FireworkFX.jar
[20/01/2013 - 13:12:20 | N | 23143] D:\FireworkFXv02.zip
[09/02/2013 - 03:39:42 | N | 159662723] D:\Gangnam-style.wmv
[10/01/2013 - 16:35:57 | N | 1736261] D:\GOPR0628.jpg
[06/04/2013 - 12:33:55 | D ] D:\Hry
[04/04/2013 - 19:23:46 | D ] D:\Miško dokumenty
[25/03/2013 - 20:50:53 | D ] D:\Monika-dokumenty
[10/02/2013 - 19:56:42 | N | 221494] D:\nove-pozadie0046.jpg
[29/03/2013 - 20:08:55 | D ] D:\Program files
[27/02/2013 - 21:33:43 | N | 717798] D:\rea.png
[27/02/2013 - 21:37:57 | N | 462606] D:\rea2t.jpg
[19/01/2013 - 16:31:40 | N | 498] D:\readme.txt
[08/02/2013 - 23:48:07 | N | 31017] D:\robbie.schematic
[27/01/2013 - 20:41:51 | N | 2354680] D:\STANO.mp3
[15/12/2012 - 14:14:15 | SHD ] D:\System Volume Information
[08/02/2013 - 22:40:49 | N | 29448] D:\train.schematic
[10/02/2013 - 16:09:07 | N | 14901553] D:\Untitled.wmv
[18/03/2013 - 19:28:53 | N | 32986] D:\VirtualDJ Local Database v6.xml
[09/04/2013 - 19:15:21 | SHD ] E:\$RECYCLE.BIN
[22/07/2012 - 10:08:21 | N | 1705] E:\aaw7boot.log
[31/10/2012 - 21:55:27 | N | 0] E:\as.dat
[24/03/2012 - 00:16:52 | N | 196] E:\Boot.bak
[22/11/2012 - 21:37:20 | N | 310] E:\boot.ini
[22/11/2012 - 21:37:20 | D ] E:\cmdcons
[04/08/2004 - 00:00:00 | N | 260272] E:\cmldr
[22/11/2012 - 21:44:42 | N | 17235] E:\ComboFix.txt
[28/11/2012 - 20:35:38 | D ] E:\Config.Msi
[16/06/2011 - 06:11:45 | N | 0] E:\CONFIG.SYS
[16/06/2011 - 06:29:29 | N | 197] E:\csb.log
[20/12/2011 - 20:13:09 | N | 50270] E:\csssss.JPG
[20/12/2011 - 20:04:05 | N | 100318] E:\csstart.JPG
[03/09/2012 - 16:07:56 | D ] E:\Documents and Settings
[16/06/2011 - 06:25:40 | D ] E:\Intel
[16/06/2011 - 06:11:45 | N | 0] E:\IO.SYS
[28/12/2011 - 23:48:48 | D ] E:\Minecraft_Backup
[16/06/2011 - 06:11:45 | N | 0] E:\MSDOS.SYS
[03/08/2004 - 22:38:34 | N | 47564] E:\NTDETECT.COM
[16/06/2011 - 08:06:33 | N | 250048] E:\ntldr
[16/09/2011 - 10:08:35 | D ] E:\NVIDIA
[05/05/2012 - 16:20:25 | N | 230432] E:\PA7302.DAT
[15/12/2012 - 14:13:45 | N | 2145386496] E:\pagefile.sys
[16/11/2012 - 18:37:04 | D ] E:\Program Files
[20/09/2011 - 21:47:03 | D ] E:\ProgramData
[22/11/2012 - 21:44:43 | D ] E:\Qoobox
[22/11/2012 - 23:38:04 | SHD ] E:\RECYCLER
[16/06/2011 - 06:29:26 | N | 423] E:\RHDSetup.log
[05/08/2012 - 21:53:07 | D ] E:\rsit
[01/03/2012 - 23:14:18 | D ] E:\SERVER
[23/11/2012 - 09:06:35 | SHD ] E:\System Volume Information
[16/06/2011 - 07:01:20 | D ] E:\totalcmd
[13/07/2011 - 00:18:35 | D ] E:\users
[15/12/2012 - 14:15:36 | D ] E:\WINDOWS
[09/04/2013 - 19:15:21 | D ] F:\$RECYCLE.BIN
[19/10/2010 - 09:06:46 | D ] F:\Audiograbber_zgrabbovane
[28/02/2011 - 19:41:09 | D ] F:\Babka
[12/06/2012 - 15:15:51 | D ] F:\Banks
[11/02/2012 - 14:19:25 | N | 122440] F:\c-strike.schematic
[03/02/2013 - 21:06:24 | D ] F:\CCrack
[17/07/2011 - 08:10:26 | D ] F:\Data na triedenie
[21/03/2012 - 19:28:48 | D ] F:\FOTO
[28/03/2009 - 22:51:07 | D ] F:\FPC
[16/12/2012 - 00:32:38 | D ] F:\Hry
[12/02/2012 - 22:09:44 | N | 275807] F:\meme.schematic
[12/02/2012 - 22:13:22 | N | 1798] F:\memecomics.schematic
[12/02/2012 - 22:16:25 | N | 807] F:\memecomics2.schematic
[12/02/2012 - 22:19:06 | N | 1311] F:\memecomics3.schematic
[01/11/2009 - 19:46:57 | D ] F:\Napoveda_graf.kart
[17/12/2012 - 19:42:28 | D ] F:\Ocko-dokumenty
[20/01/2009 - 23:04:00 | D ] F:\PFiles
[17/12/2011 - 19:21:00 | D ] F:\PHP fusion
[12/06/2012 - 15:15:53 | D ] F:\Presets
[24/03/2012 - 20:17:14 | D ] F:\Program Files
[01/11/2009 - 19:49:12 | D ] F:\Recepty
[09/04/2013 - 19:15:19 | SHD ] F:\RECYCLER
[28/05/2011 - 21:09:36 | D ] F:\SAMSUNG_kamera
[31/05/2010 - 20:42:21 | D ] F:\Sony Vegas+zoner 10
[08/11/2012 - 20:50:21 | SHD ] F:\System Volume Information
[15/06/2011 - 05:49:40 | D ] F:\temp
[16/02/2012 - 16:37:21 | ASH | 51712] F:\Thumbs.db
[06/02/2013 - 22:07:17 | N | 12096] F:\Track 1 - 1.sfk
[06/02/2013 - 22:07:17 | N | 3081750] F:\Track 1 - 1.wav
[06/02/2013 - 22:08:46 | N | 8128] F:\Track 1 - 2.sfk
[06/02/2013 - 22:08:46 | N | 2067002] F:\Track 1 - 2.wav
[17/02/2013 - 23:38:38 | D ] F:\Zartik
[16/01/2013 - 17:49:39 | D ] F:\Zbytočnosti
[17/06/2011 - 07:37:58 | D ] F:\__Data
[09/04/2013 - 13:07:02 | RASH | 3175] G:\desktop.ini
[09/04/2013 - 13:07:04 | RSH | 275962] G:\Thumbs.db
[09/04/2013 - 13:06:52 | D ] G:\ 
[09/04/2013 - 13:05:56 | RASH | 3479] I:\desktop.ini
[09/04/2013 - 18:26:46 | SHD ] I:\System Volume Information
[09/04/2013 - 13:05:56 | RSH | 275962] I:\Thumbs.db
[05/04/2013 - 12:15:30 | D ] I:\ 

################## | Vaccin |

A:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
I:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

################## | Upload |

Please send the file: C:\UsbFix_Upload_Me_GA-P31-DS3L.zip
http://eldesaparecido.com/upload.php
Thank you for your contribution.

################## | E.O.F |
Nahoru
jerry990
3. Stupeň Varování
Příspěvky: 87
Registrován: 04 Črv 2011 12:10

Re: Problém s USB

#4 Příspěvek od jerry990 »

Ako pozerám, ono to opravilo USB, ďakujem :)
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Problém s USB

#5 Příspěvek od vyosek »

Ta nejvyssi licence Windows Ultimate asi neni radne zakoupena co :?:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
jerry990
3. Stupeň Varování
Příspěvky: 87
Registrován: 04 Črv 2011 12:10

Re: Problém s USB

#6 Příspěvek od jerry990 »

Neviem vám povedať. Otec má známeho v servise a on nám opravil PC a prihodil k tomu Windows 7.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Problém s USB

#7 Příspěvek od vyosek »

:arrow: Dobrej servisak, kdyz instaluje cracknute windows :boxed:

:arrow: A je to uz vase nekolikate poruseni pravidel fora, takze z toho budou vyvozeny dusledky :twisted:

:arrow: Havet v PC jeste stale mate, ale nelegalnimi systemy se tu nezabyvame, pravidla jsou zcela jasna

:closed:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
jerry990
3. Stupeň Varování
Příspěvky: 87
Registrován: 04 Črv 2011 12:10

Re: Problém s USB

#8 Příspěvek od jerry990 »

vyosek napsal::arrow: Dobrej servisak, kdyz instaluje cracknute windows :boxed:

:arrow: A je to uz vase nekolikate poruseni pravidel fora, takze z toho budou vyvozeny dusledky :twisted:

:arrow: Havet v PC jeste stale mate, ale nelegalnimi systemy se tu nezabyvame, pravidla jsou zcela jasna

:closed:
Je to škoda, no napriek tomu za všetko ďakujem :) osobne som odporučil na túto stránku niekoľko ľudí.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Problém s USB

#9 Příspěvek od vyosek »

Skoda to je, havet je tam zajimaveho typu...

Ale nebudu porusovat pravidla fora, na jejichz tvorbe jsem se sam podilel.

:closed: a :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“