Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

onlinegames.NNU (autorun.inf)

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
aiRen
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 05 úno 2010 17:21
Bydliště: Poprad
Kontaktovat uživatele:

Re: onlinegames.NNU (autorun.inf)

#16 Příspěvek od aiRen »

Dúfam, že sa Vám môj problém podarí vyriešiť čo najskôr. Chcel by som sa to aj ja naučiť ale neviem kde začať :-)
CCleaner
Pomáham iba v prípade, že sa nejedná o vírus (Systemová chyba)

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: onlinegames.NNU (autorun.inf)

#17 Příspěvek od motji »

Opravdu tam nemáte takové miniaturní šoupátko, které jste třeba omylem přepl? Podívejte se pořádně, nemusí být viditelné jen tak. Tím by se měla fleška zamknout proti zápisu.
Zkuste flešku zformátovat v linuxu.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

aiRen
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 05 úno 2010 17:21
Bydliště: Poprad
Kontaktovat uživatele:

Re: onlinegames.NNU (autorun.inf)

#18 Příspěvek od aiRen »

V linuxe tiež nejde a žiadny taky čudlík tam nie je :(

Je to toto USB : http://www.amazon.com/Kingston-DataTrav ... B000TXEE14
CCleaner
Pomáham iba v prípade, že sa nejedná o vírus (Systemová chyba)

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: onlinegames.NNU (autorun.inf)

#19 Příspěvek od motji »

Máte ji ještě v záruce? Zkuste vyreklamovat.

Zkuste ještě tohle na zformátování, ale nevím, zda jede pod win7
http://www.slunecnice.cz/sw/hp-usb-disk ... rmat-tool/

A vyzvedněte si sz :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: onlinegames.NNU (autorun.inf)

#20 Příspěvek od motji »

Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

aiRen
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 05 úno 2010 17:21
Bydliště: Poprad
Kontaktovat uživatele:

Re: onlinegames.NNU (autorun.inf)

#21 Příspěvek od aiRen »

1 program nefunguje a teraz idem vyskúšať ten 2.
CCleaner
Pomáham iba v prípade, že sa nejedná o vírus (Systemová chyba)

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: onlinegames.NNU (autorun.inf)

#22 Příspěvek od motji »

:arrow: Máte win7 - takže některé programy fungovat nemusí.
:arrow: zkuste ještě kontrolu disku - na jednotku flešky klikněte pravým tlačítkem - vlastnosti - nástroje - zkontrolovat


:arrow: uploadl jste tu zálohu usbfixu?

:arrow: Odinstalujte combofix přes
Start >> Spustit zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


:arrow: Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir


:arrow: Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe



:arrow: Stáhněte Ccleaner,viz můj podpis
-nainstalujte a vyčištěte dočasné soubory, i registry

:arrow: máte nelegální antivir - takže ESET odinstalujte a dejte nějaký free antivir , Třeba Avast nebo Aviru a pak poprosím o nový log ze Rsitu.
Nelegální antivir je proti pravidlům fora, pokud ho neodstraníte, příště Vám už nikdo nepomůže :James008: . Navíc takový antivir nemusí fungovat správně, i kdžy se tam tváří.
:arrow: Poprosím o nový log ze Rsitu kouknu se, zda je ještě potřeba něco domazat.
:arrow: Vy řešíte vir na flešce, ale ta fleška Vám podle všeho vůbec nefunguje, takže Vám nemůžu ani vir odstranit.
Pokud nepomůžou ani výše uvedené kroky, tak ji reklamujte.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

aiRen
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 05 úno 2010 17:21
Bydliště: Poprad
Kontaktovat uživatele:

Re: onlinegames.NNU (autorun.inf)

#23 Příspěvek od aiRen »

:!: Flashku nejde reklamovať keď je na nej vír
:!: Antivírus je legálny, licenčný a platený. Bola to súčasť PC


LOG

Logfile of random's system information tool 1.06 (written by random/random)
Run by Kristián at 2010-02-06 11:22:53
Microsoft Windows 7 Ultimate
System drive C: has 29 GB (48%) free of 60 GB
Total RAM: 3326 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:22:54, on 6. 2. 2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
I:\Download\RSIT.exe
C:\Program Files\trend micro\Kristián.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [combofix] "C:\ComboFix\CF7598.cfxxe" /c "C:\ComboFix\C.bat"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - Global Startup: Canon LBP5000 Status Window.lnk = C:\Windows\System32\spool\drivers\w32x86\3\CNAC4LAK.EXE
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe

--
End of file - 5301 bytes

======Scheduled tasks folder======

C:\Windows\tasks\At1.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-10 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-02-06 2021400]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-10 149280]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-10-10 203264]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2009-03-12 483422]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"combofix"=C:\ComboFix\CF7598.cfxxe /c C:\ComboFix\C.bat []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2009-12-23 289584]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Canon LBP5000 Status Window.lnk - C:\Windows\System32\spool\drivers\w32x86\3\CNAC4LAK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 229376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoDriveAutoRun"=255
"HonorAutoRunSetting"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-02-06 11:21:18 ----D---- C:\rsit
2010-02-06 11:21:18 ----D---- C:\Program Files\trend micro
2010-02-06 10:35:23 ----D---- C:\Program Files\AutorunRemover
2010-02-06 10:33:22 ----D---- C:\DriveKey
2010-02-05 22:04:24 ----HD---- C:\autorun.inf
2010-02-05 22:02:42 ----A---- C:\UsbFix.txt
2010-02-05 22:00:08 ----D---- C:\UsbFix
2010-02-05 21:52:49 ----SHD---- C:\$RECYCLE.BIN
2010-02-05 21:31:52 ----D---- C:\Program Files\Altap Salamander 2.5
2010-02-05 20:32:52 ----D---- C:\Users\Kristián\AppData\Roaming\Desktopicon
2010-02-05 20:32:52 ----D---- C:\Program Files\Unlocker
2010-02-05 20:29:14 ----HD---- C:\Windows\PIF
2010-02-05 17:15:14 ----AD---- C:\Windows\VDLL.DLL
2010-02-05 17:15:14 ----AD---- C:\Windows\logo_1.exe
2010-02-05 17:01:46 ----A---- C:\Windows\system32\msvcr80.dll
2010-02-05 17:01:45 ----A---- C:\Windows\system32\msvcp80.dll
2010-02-05 17:01:44 ----A---- C:\Windows\system32\eEmpty.exe
2010-02-05 16:41:34 ----D---- C:\ProgramData\Panda Security
2010-02-05 16:41:22 ----D---- C:\Program Files\Panda USB Vaccine
2010-02-05 15:14:56 ----D---- C:\Windows\temp
2010-02-05 14:33:15 ----D---- C:\Users\Kristián\AppData\Roaming\Malwarebytes
2010-02-05 14:33:10 ----D---- C:\ProgramData\Malwarebytes
2010-02-05 14:27:31 ----D---- C:\Program Files\Online Games Trojan Removal Tool
2010-02-04 21:04:10 ----D---- C:\ProgramData\FLEXnet
2010-02-02 21:10:55 ----A---- C:\Windows\system32\pbsvc_bc2.exe
2010-01-27 15:18:40 ----A---- C:\Windows\explorer.exe
2010-01-27 15:18:39 ----A---- C:\Windows\system32\winlogon.exe
2010-01-24 14:24:13 ----D---- C:\Users\Kristián\AppData\Roaming\gtk-2.0
2010-01-24 13:53:01 ----D---- C:\Program Files\Ultra Utility
2010-01-24 00:04:06 ----D---- C:\Program Files\GIMP-2.0
2010-01-22 15:16:07 ----A---- C:\Windows\system32\mshtml.dll
2010-01-22 15:16:05 ----A---- C:\Windows\system32\ieframe.dll
2010-01-22 15:16:04 ----A---- C:\Windows\system32\wininet.dll
2010-01-22 15:16:04 ----A---- C:\Windows\system32\urlmon.dll
2010-01-22 15:16:04 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-01-22 15:16:04 ----A---- C:\Windows\system32\iedkcs32.dll
2010-01-22 02:33:06 ----A---- C:\Windows\system32\xfcodec.dll
2010-01-13 16:10:26 ----A---- C:\Windows\system32\t2embed.dll
2010-01-13 16:10:26 ----A---- C:\Windows\system32\fontsub.dll
2010-01-10 13:07:23 ----D---- C:\Users\Kristián\AppData\Roaming\AnvSoft
2010-01-10 13:07:12 ----D---- C:\Program Files\AnvSoft
2010-01-09 16:24:35 ----D---- C:\Windows\Minidump
2010-01-09 12:40:09 ----D---- C:\Program Files\MagicDVDRipper

======List of files/folders modified in the last 1 months======

2010-02-06 11:22:49 ----D---- C:\Users\Kristián\AppData\Roaming\uTorrent
2010-02-06 11:21:55 ----D---- C:\Windows\Prefetch
2010-02-06 11:21:18 ----RD---- C:\Program Files
2010-02-06 11:19:58 ----D---- C:\Windows\system32\config
2010-02-06 11:19:28 ----D---- C:\Users\Kristián\AppData\Roaming\Skype
2010-02-06 11:19:06 ----D---- C:\Program Files\Mozilla Firefox
2010-02-06 11:17:54 ----D---- C:\ProgramData\NVIDIA
2010-02-06 11:16:39 ----D---- C:\Windows\System32
2010-02-06 11:14:00 ----D---- C:\Windows
2010-02-06 11:13:51 ----D---- C:\ProgramData
2010-02-06 11:11:37 ----D---- C:\Users\Kristián\AppData\Roaming\skypePM
2010-02-06 10:33:23 ----SHD---- C:\System Volume Information
2010-02-06 10:33:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-05 21:55:55 ----SHD---- C:\Windows\Installer
2010-02-05 21:49:56 ----A---- C:\Windows\system.ini
2010-02-05 21:45:37 ----D---- C:\Windows\system32\drivers
2010-02-05 21:45:37 ----D---- C:\Windows\AppPatch
2010-02-05 21:45:37 ----D---- C:\Program Files\Common Files
2010-02-05 20:10:56 ----D---- C:\Windows\Tasks
2010-02-05 20:10:56 ----D---- C:\Windows\system32\Tasks
2010-02-05 17:52:51 ----D---- C:\Users\Kristián\AppData\Roaming\Xfire
2010-02-05 17:44:29 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-02-05 16:16:08 ----D---- C:\Windows\debug
2010-02-05 14:44:47 ----D---- C:\Windows\Logs
2010-02-05 14:06:51 ----D---- C:\Windows\inf
2010-02-05 14:06:51 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-02-04 21:45:32 ----D---- C:\Users\Kristián\AppData\Roaming\Adobe
2010-02-04 17:37:54 ----D---- C:\ProgramData\Xfire
2010-02-02 21:12:30 ----RSD---- C:\Windows\assembly
2010-01-29 18:57:38 ----D---- C:\Windows\winsxs
2010-01-28 17:48:06 ----D---- C:\Program Files\Internet Explorer
2010-01-27 15:18:08 ----D---- C:\Windows\system32\catroot2
2010-01-27 15:18:08 ----D---- C:\Windows\system32\catroot
2010-01-14 11:12:06 ----N---- C:\Windows\system32\MpSigStub.exe
2010-01-11 14:59:47 ----SD---- C:\Users\Kristián\AppData\Roaming\Microsoft
CCleaner
Pomáham iba v prípade, že sa nejedná o vírus (Systemová chyba)

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: onlinegames.NNU (autorun.inf)

#24 Příspěvek od motji »

:arrow: A tohle Vám přidali k tomu zaplacenému Esetu? :?:
_.EsetTrialReset Nebo se Vám do pc nainstaloval sám?

:arrow: To Vám řekli v obchodě, že fleška s virem nejde reklamovat?
Ale pokud je poškozená, tak z ní ten vir nedostanete ani za milion, můžete ji tam maximálně hodit do koše :roll: .
Tu kontrolu disku jste zkoušel a ten druhý program?

A dokud v logu Rsitu bude Eset, nebudu pokračovat :James008:
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

aiRen
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 05 úno 2010 17:21
Bydliště: Poprad
Kontaktovat uživatele:

Re: onlinegames.NNU (autorun.inf)

#25 Příspěvek od aiRen »

Tak neviem, prečo to tam vypisuje. Skúsim reinštall s novým kľúčom od esetu.
CCleaner
Pomáham iba v prípade, že sa nejedná o vírus (Systemová chyba)

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: onlinegames.NNU (autorun.inf)

#26 Příspěvek od motji »

S novým klíčem? Myslíte sehnaným někde na warezu? Nedělejte tu ze mě blázny, odinstalujte ten Eset, dejte Avast nebo Aviru a zkusíme ještě jednu věc na tu flešku.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

aiRen
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 05 úno 2010 17:21
Bydliště: Poprad
Kontaktovat uživatele:

Re: onlinegames.NNU (autorun.inf)

#27 Příspěvek od aiRen »

motji píše:S novým klíčem? Myslíte sehnaným někde na warezu? Nedělejte tu ze mě blázny, odinstalujte ten Eset, dejte Avast nebo Aviru a zkusíme ještě jednu věc na tu flešku.
Nie, mam ešte eset na nootebooku tak to dam stamadial.
CCleaner
Pomáham iba v prípade, že sa nejedná o vírus (Systemová chyba)

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: onlinegames.NNU (autorun.inf)

#28 Příspěvek od motji »

Podívejte, já tu chci vidět něco jiného než Eset, který legální na tomto pc není, a víc už se s Vámi dohadovat nebudu. Pokud ho neodinstalujete, :closed: :lock:
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

aiRen
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 05 úno 2010 17:21
Bydliště: Poprad
Kontaktovat uživatele:

Re: onlinegames.NNU (autorun.inf)

#29 Příspěvek od aiRen »

Logfile of random's system information tool 1.06 (written by random/random)
Run by Mario at 2010-02-06 13:54:07
Microsoft Windows 7 Home Premium
System drive C: has 340 GB (73%) free of 463 GB
Total RAM: 3002 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:54:16, on 6. 2. 2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\PLFSetI.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Mario\Downloads\RSIT.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\trend micro\Mario.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Canon LBP5000 Status Window.lnk = C:\Windows\System32\spool\drivers\w32x86\3\CNAC4LAK.EXE
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 5799 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-15 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files\Launch Manager\LManager.exe [2009-08-18 1157128]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-09-04 7731744]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-11-16 2054360]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-15 149280]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"PLFSetI"=C:\Windows\PLFSetI.exe [2008-07-29 200704]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-18 1537320]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-18 141928]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-18 174184]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-18 151144]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-09-25 13797992]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Canon LBP5000 Status Window.lnk - C:\Windows\System32\spool\drivers\w32x86\3\CNAC4LAK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-02 223848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{63845f77-fee9-11de-bb0e-00235a897e78}]
shell\AutoRun\command - E:\USBAutoRun.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\dreamweaver.exe","%1"

======List of files/folders created in the last 1 months======

2010-02-06 13:54:07 ----D---- C:\rsit
2010-02-06 13:54:07 ----D---- C:\Program Files\trend micro
2010-02-06 13:31:52 ----D---- C:\Hiren_s.BootCD.9.5
2010-02-06 12:07:57 ----D---- C:\Users\Mario\AppData\Roaming\Media Player Classic
2010-02-06 12:07:55 ----A---- C:\Program Files\mplayerc.exe
2010-02-05 19:59:22 ----A---- C:\Windows\ntbtlog.txt
2010-02-05 19:50:04 ----A---- C:\Windows\system32\TURegOpt.exe
2010-02-05 19:50:03 ----A---- C:\Windows\system32\uxtuneup.dll
2010-02-05 19:50:03 ----A---- C:\Windows\system32\authuitu.dll
2010-02-05 19:49:54 ----D---- C:\Users\Mario\AppData\Roaming\TuneUp Software
2010-02-05 19:49:42 ----D---- C:\Program Files\TuneUp Utilities 2010
2010-02-05 19:49:20 ----D---- C:\ProgramData\TuneUp Software
2010-02-05 19:49:17 ----SHD---- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-02-04 15:36:28 ----D---- C:\Users\Mario\AppData\Roaming\Nero
2010-02-04 15:32:03 ----D---- C:\Program Files\Nero
2010-02-04 15:31:49 ----D---- C:\ProgramData\Nero
2010-02-04 15:31:48 ----D---- C:\Program Files\Common Files\Nero
2010-02-04 09:41:48 ----D---- C:\Windows\system32\AGEIA
2010-02-04 09:41:47 ----D---- C:\Program Files\AGEIA Technologies
2010-02-04 09:41:16 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-02-04 09:35:13 ----A---- C:\Windows\system32\igfxtvcx.dll
2010-02-04 09:35:11 ----D---- C:\Program Files\Intel
2010-02-04 00:37:00 ----A---- C:\Windows\system32\TVWSetup.exe
2010-02-04 00:37:00 ----A---- C:\Windows\system32\oemdspif.dll
2010-02-04 00:37:00 ----A---- C:\Windows\system32\nvwgf2um.dll
2010-02-04 00:36:59 ----A---- C:\Windows\system32\nvudisp.exe
2010-02-04 00:36:59 ----A---- C:\Windows\system32\nvoglv32.dll
2010-02-04 00:36:59 ----A---- C:\Windows\system32\nvencodemft.dll
2010-02-04 00:36:59 ----A---- C:\Windows\system32\nvdecodemft.dll
2010-02-04 00:36:59 ----A---- C:\Windows\system32\nvd3dum.dll
2010-02-04 00:36:59 ----A---- C:\Windows\system32\nvcuvid.dll
2010-02-04 00:36:58 ----A---- C:\Windows\system32\nvcuvenc.dll
2010-02-04 00:36:58 ----A---- C:\Windows\system32\nvcuda.dll
2010-02-04 00:36:57 ----A---- C:\Windows\system32\nvcod167.dll
2010-02-04 00:36:57 ----A---- C:\Windows\system32\nvcod.dll
2010-02-04 00:36:57 ----A---- C:\Windows\system32\nvapi.dll
2010-02-04 00:36:54 ----A---- C:\Windows\system32\igfxtray.exe
2010-02-04 00:36:54 ----A---- C:\Windows\system32\igfxTMM.dll
2010-02-04 00:36:54 ----A---- C:\Windows\system32\igfxsrvc.exe
2010-02-04 00:36:54 ----A---- C:\Windows\system32\igfxsrvc.dll
2010-02-04 00:36:53 ----A---- C:\Windows\system32\igfxress.dll
2010-02-04 00:36:53 ----A---- C:\Windows\system32\igfxpph.dll
2010-02-04 00:36:53 ----A---- C:\Windows\system32\igfxpers.exe
2010-02-04 00:36:53 ----A---- C:\Windows\system32\igfxext.exe
2010-02-04 00:36:53 ----A---- C:\Windows\system32\igfxexps.dll
2010-02-04 00:36:53 ----A---- C:\Windows\system32\igfxdo.dll
2010-02-04 00:36:53 ----A---- C:\Windows\system32\igfxdev.dll
2010-02-04 00:36:53 ----A---- C:\Windows\system32\igfxcfg.exe
2010-02-04 00:36:53 ----A---- C:\Windows\system32\igdumdx32.dll
2010-02-04 00:36:52 ----A---- C:\Windows\system32\igdumd32.dll
2010-02-04 00:36:52 ----A---- C:\Windows\system32\ig4icd32.dll
2010-02-04 00:36:52 ----A---- C:\Windows\system32\ig4dev32.dll
2010-02-04 00:36:52 ----A---- C:\Windows\system32\hkcmd.exe
2010-02-04 00:36:52 ----A---- C:\Windows\system32\hccutils.dll
2010-02-04 00:36:52 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-02-04 00:20:08 ----D---- C:\Driver
2010-02-03 18:24:39 ----D---- C:\Fraps
2010-02-03 18:23:18 ----D---- C:\Users\Mario\AppData\Roaming\Bluefive software
2010-02-03 18:23:03 ----A---- C:\Windows\system32\msvbvm50.dll
2010-02-03 18:23:03 ----A---- C:\Windows\system32\ChilkatFtp2.dll
2010-02-03 18:23:03 ----A---- C:\Windows\system32\ccrpbds6.dll
2010-02-03 18:23:03 ----A---- C:\Windows\system32\aosmtp.dll
2010-02-03 18:23:02 ----D---- C:\Program Files\SnapShot
2010-02-02 10:26:53 ----D---- C:\ProgramData\Apple Computer
2010-02-02 10:26:53 ----D---- C:\Program Files\QuickTime
2010-01-29 10:02:42 ----D---- C:\Program Files\Electronic Arts
2010-01-29 09:56:44 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-01-29 09:56:44 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-01-29 09:56:43 ----A---- C:\Windows\system32\pbsvc_bc2.exe
2010-01-27 09:28:43 ----A---- C:\Windows\explorer.exe
2010-01-27 09:28:42 ----A---- C:\Windows\system32\winlogon.exe
2010-01-25 09:38:43 ----D---- C:\Windows\system32\Lang
2010-01-25 09:38:43 ----A---- C:\Windows\system32\TVWizudlg.exe
2010-01-25 09:33:42 ----A---- C:\Windows\system32\dpinst.exe
2010-01-25 09:20:51 ----D---- C:\NVIDIA
2010-01-25 09:20:28 ----D---- C:\Intel
2010-01-24 19:30:55 ----A---- C:\netfxlog.txt
2010-01-22 20:59:51 ----D---- C:\Program Files\Mass Effect 2
2010-01-22 20:59:51 ----D---- C:\Program Files\Common Files\BioWare
2010-01-21 19:52:57 ----A---- C:\Windows\system32\mshtml.dll
2010-01-21 19:52:55 ----A---- C:\Windows\system32\ieframe.dll
2010-01-21 19:52:54 ----A---- C:\Windows\system32\wininet.dll
2010-01-21 19:52:54 ----A---- C:\Windows\system32\urlmon.dll
2010-01-21 19:52:54 ----A---- C:\Windows\system32\iedkcs32.dll
2010-01-21 19:52:53 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-01-20 10:11:09 ----D---- C:\Program Files\Synaptics
2010-01-20 10:10:35 ----A---- C:\Windows\system32\SynTPCo4.dll
2010-01-20 10:10:35 ----A---- C:\Windows\system32\SynTPAPI.dll
2010-01-20 10:10:34 ----A---- C:\Windows\system32\SynCtrl.dll
2010-01-20 10:10:34 ----A---- C:\Windows\system32\SynCOM.dll
2010-01-20 10:02:35 ----A---- C:\Windows\system32\WdfCoInstaller01005.dll
2010-01-18 14:01:34 ----A---- C:\Windows\USB_VIDEO_REG.exe
2010-01-18 14:01:34 ----A---- C:\Windows\PLFSetI.exe
2010-01-18 14:01:34 ----A---- C:\Windows\PidList.ini
2010-01-18 14:01:34 ----A---- C:\Windows\Image.dll
2010-01-18 14:01:34 ----A---- C:\Windows\Acer Crystal Eye webcam.EXE
2010-01-17 10:34:18 ----A---- C:\LOGFILE.TXT
2010-01-17 10:21:47 ----A---- C:\Windows\WTRDCTM.INI
2010-01-17 10:17:22 ----D---- C:\Program Files\TRANSLAT
2010-01-17 10:17:11 ----D---- C:\ProgramData\LangSoft
2010-01-17 10:16:00 ----D---- C:\Users\Mario\AppData\Roaming\LangSoft
2010-01-16 12:58:07 ----D---- C:\ProgramData\Codemasters
2010-01-15 18:55:39 ----D---- C:\Filmy
2010-01-15 18:48:25 ----A---- C:\Windows\system32\mkl_vml_p4.dll
2010-01-15 18:48:25 ----A---- C:\Windows\system32\mkl_vml_p3.dll
2010-01-15 18:48:25 ----A---- C:\Windows\system32\mkl_vml_def.dll
2010-01-15 18:48:25 ----A---- C:\Windows\system32\mkl_p4.dll
2010-01-15 18:48:24 ----A---- C:\Windows\system32\rapture3d_oal.dll
2010-01-15 18:48:24 ----A---- C:\Windows\system32\mkl_p3.dll
2010-01-15 18:48:24 ----A---- C:\Windows\system32\mkl_lapack64.dll
2010-01-15 18:48:24 ----A---- C:\Windows\system32\mkl_lapack32.dll
2010-01-15 18:48:24 ----A---- C:\Windows\system32\mkl_def.dll
2010-01-15 18:48:24 ----A---- C:\Windows\system32\libguide40.dll
2010-01-15 18:48:22 ----D---- C:\Program Files\BRS
2010-01-15 18:47:56 ----D---- C:\Windows\system32\xlive
2010-01-15 18:47:56 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2010-01-15 18:47:43 ----RA---- C:\Windows\system32\tmpDD36.tmp
2010-01-15 18:47:43 ----D---- C:\Program Files\OpenAL
2010-01-15 18:47:43 ----A---- C:\Windows\system32\wrap_oal.dll
2010-01-15 18:47:43 ----A---- C:\Windows\system32\OpenAL32.dll
2010-01-15 18:47:39 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-01-15 18:47:38 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-01-15 18:46:48 ----RA---- C:\Windows\system32\tmpDCC7.tmp
2010-01-15 18:36:13 ----D---- C:\Program Files\Codemasters
2010-01-15 18:28:56 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-01-15 18:28:56 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-01-15 18:28:56 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-01-15 18:28:56 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-01-15 18:28:56 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-01-15 18:28:56 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-01-15 18:28:56 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-01-15 18:28:56 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-01-15 18:28:55 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-01-15 18:28:55 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-01-15 18:28:55 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-01-15 18:28:55 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-01-15 18:28:55 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-01-15 18:28:54 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-01-15 18:28:54 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-01-15 18:28:54 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-01-15 18:28:54 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-01-15 18:28:54 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-01-15 18:28:54 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-01-15 18:28:54 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-01-15 18:28:54 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-01-15 18:28:54 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-01-15 18:28:54 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-01-15 18:28:53 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-01-15 18:28:53 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-01-15 18:28:53 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-01-15 18:28:53 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-01-15 18:28:53 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-01-15 18:28:53 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-01-15 18:28:53 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-01-15 18:28:53 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-01-15 18:28:52 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-01-15 18:28:52 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-01-15 18:28:52 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-01-15 18:28:52 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-01-15 18:28:52 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-01-15 18:28:52 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-01-15 18:28:52 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-01-15 18:28:52 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-01-15 18:28:51 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-01-15 18:28:51 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-01-15 18:28:51 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-01-15 18:28:51 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-01-15 18:28:51 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-01-15 18:28:51 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-01-15 18:28:51 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-01-15 18:28:50 ----A---- C:\Windows\system32\xinput1_3.dll
2010-01-15 18:28:50 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-01-15 18:28:50 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-01-15 18:28:50 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-01-15 18:28:50 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-01-15 18:28:50 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-01-15 18:28:50 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-01-15 18:28:50 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-01-15 18:28:49 ----A---- C:\Windows\system32\xinput1_2.dll
2010-01-15 18:28:49 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-01-15 18:28:49 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-01-15 18:28:49 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-01-15 18:28:49 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-01-15 18:28:49 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-01-15 18:28:49 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-01-15 18:28:49 ----A---- C:\Windows\system32\d3dx10.dll
2010-01-15 18:28:48 ----A---- C:\Windows\system32\xinput1_1.dll
2010-01-15 18:28:48 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-01-15 18:28:46 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-01-15 18:28:46 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-01-15 18:28:46 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-01-15 18:28:46 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-01-15 18:28:46 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-01-15 18:28:46 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-01-15 18:28:45 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-01-15 18:28:45 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-01-15 18:28:45 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-01-15 18:26:55 ----HD---- C:\Windows\msdownld.tmp
2010-01-15 18:26:53 ----D---- C:\Windows\system32\directx
2010-01-15 18:09:36 ----D---- C:\Program Files\DAEMON Tools Lite
2010-01-15 18:09:19 ----D---- C:\Users\Mario\AppData\Roaming\DAEMON Tools Lite
2010-01-15 18:08:59 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-01-15 16:59:03 ----D---- C:\Images
2010-01-15 15:52:33 ----D---- C:\Windows\Sun
2010-01-15 15:29:19 ----A---- C:\Windows\system32\javaws.exe
2010-01-15 15:29:19 ----A---- C:\Windows\system32\javaw.exe
2010-01-15 15:29:19 ----A---- C:\Windows\system32\java.exe
2010-01-15 15:29:19 ----A---- C:\Windows\system32\deploytk.dll
2010-01-15 15:29:09 ----D---- C:\Program Files\Java
2010-01-15 14:22:59 ----D---- C:\ProgramData\FLEXnet
2010-01-15 12:50:02 ----D---- C:\Program Files\Common Files\Adobe Systems Shared
2010-01-15 11:36:09 ----A---- C:\Windows\system32\NPSWF32_FlashUtil.exe
2010-01-15 11:36:09 ----A---- C:\Windows\system32\NPSWF32.dll
2010-01-15 11:31:42 ----D---- C:\Program Files\Bonjour
2010-01-15 11:27:55 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-01-14 11:14:12 ----A---- C:\Windows\mafosav.INI
2010-01-14 11:12:41 ----D---- C:\Buziol Games
2010-01-13 17:34:00 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-01-13 17:34:00 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-01-13 17:34:00 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-01-13 17:33:34 ----D---- C:\Program Files\Winamp Detect
2010-01-13 17:33:29 ----D---- C:\Program Files\Common Files\PX Storage Engine
2010-01-13 17:33:26 ----D---- C:\Users\Mario\AppData\Roaming\Winamp
2010-01-13 17:33:26 ----D---- C:\Program Files\Winamp
2010-01-13 13:52:23 ----D---- C:\Program Files\VDOWNLOADER
2010-01-13 13:52:23 ----D---- C:\Program Files\Common Files\eBay
2010-01-13 13:16:00 ----D---- C:\Program Files\CCleaner
2010-01-13 10:07:38 ----A---- C:\Windows\system32\t2embed.dll
2010-01-13 10:07:38 ----A---- C:\Windows\system32\fontsub.dll
2010-01-12 14:38:00 ----D---- C:\Users\Mario\AppData\Roaming\WinRAR
2010-01-12 14:37:52 ----D---- C:\Program Files\WinRAR
2010-01-12 14:15:23 ----D---- C:\Users\Mario\AppData\Roaming\DC++
2010-01-12 12:00:55 ----A---- C:\Windows\Sublock.dll
2010-01-12 12:00:55 ----A---- C:\Windows\LGMobileDL.dll
2010-01-12 12:00:55 ----A---- C:\Windows\Imei_dll.dll
2010-01-12 12:00:55 ----A---- C:\Windows\esn.dll
2010-01-12 12:00:55 ----A---- C:\Windows\AuthDll.dll
2010-01-12 08:23:57 ----D---- C:\Program Files\MSXML 4.0
2010-01-11 22:06:34 ----D---- C:\Program Files\Common Files\Apple
2010-01-11 22:06:30 ----D---- C:\ProgramData\Apple
2010-01-11 22:06:30 ----D---- C:\Program Files\Apple Software Update
2010-01-11 20:58:47 ----A---- C:\Windows\system32\NMSDVDXU.dll
2010-01-11 20:58:29 ----D---- C:\Users\Mario\AppData\Roaming\LG Electronics
2010-01-11 20:57:30 ----D---- C:\Program Files\LG Electronics
2010-01-10 10:45:34 ----A---- C:\Windows\system32\CNAC4SMK.DLL
2010-01-10 10:45:34 ----A---- C:\Windows\system32\CNAC4RPK.EXE
2010-01-10 10:45:34 ----A---- C:\Windows\system32\CNAC4PTU.DLL
2010-01-10 10:45:34 ----A---- C:\Windows\system32\CNAC4LMK.DLL
2010-01-10 10:45:34 ----A---- C:\Windows\system32\CNAC4EMU.DLL
2010-01-10 10:45:20 ----D---- C:\Program Files\Canon
2010-01-09 18:33:35 ----A---- C:\Windows\NeoUninstall.exe
2010-01-09 18:33:35 ----A---- C:\Windows\neosetup.INI
2010-01-09 18:33:34 ----D---- C:\Program Files\Neoact
2010-01-09 16:26:27 ----D---- C:\Store
2010-01-09 11:45:45 ----D---- C:\ProgramData\Adobe
2010-01-09 11:45:43 ----D---- C:\Program Files\Adobe
2010-01-09 11:35:07 ----D---- C:\Program Files\uTorrent
2010-01-09 11:34:28 ----D---- C:\Users\Mario\AppData\Roaming\uTorrent
2010-01-09 09:19:08 ----D---- C:\Users\Mario\AppData\Roaming\Mozilla
2010-01-09 09:18:03 ----D---- C:\Program Files\Mozilla Firefox
2010-01-08 22:01:19 ----D---- C:\Fonts
2010-01-08 21:34:14 ----D---- C:\Program Files\Common Files\Adobe
2010-01-08 21:27:36 ----D---- C:\Users\Mario\AppData\Roaming\ESET
2010-01-08 21:26:31 ----D---- C:\ProgramData\ESET
2010-01-08 21:26:31 ----D---- C:\Program Files\ESET
2010-01-08 20:19:33 ----D---- C:\Program Files\Microsoft Visual Studio
2010-01-08 20:19:33 ----D---- C:\Program Files\Common Files\DESIGNER
2010-01-08 20:19:30 ----D---- C:\Windows\PCHEALTH
2010-01-08 20:19:30 ----D---- C:\Program Files\Microsoft.NET
2010-01-08 20:17:14 ----D---- C:\ProgramData\Microsoft Help
2010-01-08 20:17:14 ----D---- C:\Program Files\Microsoft Office
2010-01-08 20:16:44 ----RHD---- C:\MSOCache
2010-01-08 19:46:43 ----D---- C:\Hudba
2010-01-08 19:41:09 ----D---- C:\TUKE
2010-01-08 19:30:51 ----D---- C:\Projekty
2010-01-08 19:21:16 ----D---- C:\Program Files\QIP
2010-01-08 19:19:54 ----D---- C:\Users\Mario\AppData\Roaming\GHISLER
2010-01-08 19:19:54 ----D---- C:\Program Files\totalcmd
2010-01-08 19:18:45 ----D---- C:\Users\Mario\AppData\Roaming\Macromedia
2010-01-08 19:18:45 ----D---- C:\Users\Mario\AppData\Roaming\Adobe
2010-01-08 19:18:44 ----D---- C:\Windows\system32\Macromed
2010-01-08 17:37:16 ----D---- C:\Windows\system32\RTCOM
2010-01-08 17:36:59 ----A---- C:\Windows\system32\WavesLib.dll
2010-01-08 17:36:58 ----A---- C:\Windows\system32\SRSWOW.dll
2010-01-08 17:36:58 ----A---- C:\Windows\system32\SRSTSXT.dll
2010-01-08 17:36:58 ----A---- C:\Windows\system32\SRSTSHD.dll
2010-01-08 17:36:58 ----A---- C:\Windows\system32\SRSHP360.dll
2010-01-08 17:36:57 ----A---- C:\Windows\system32\RtkPgExt.dll
2010-01-08 17:36:57 ----A---- C:\Windows\system32\RtkCoInst.dll
2010-01-08 17:36:57 ----A---- C:\Windows\system32\RtkApoApi.dll
2010-01-08 17:36:57 ----A---- C:\Windows\system32\RtkAPO.dll
2010-01-08 17:36:55 ----A---- C:\Windows\system32\RTEEP32A.dll
2010-01-08 17:36:55 ----A---- C:\Windows\system32\RTEEL32A.dll
2010-01-08 17:36:55 ----A---- C:\Windows\system32\RTEEG32A.dll
2010-01-08 17:36:55 ----A---- C:\Windows\system32\RTEED32A.dll
2010-01-08 17:36:55 ----A---- C:\Windows\system32\RP3DHT32.dll
2010-01-08 17:36:55 ----A---- C:\Windows\system32\RP3DAA32.dll
2010-01-08 17:36:54 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2010-01-08 17:36:54 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2010-01-08 17:36:54 ----A---- C:\Windows\system32\MaxxAudioAPO.dll
2010-01-08 17:36:53 ----A---- C:\Windows\system32\FMAPO.dll
2010-01-08 17:36:52 ----HD---- C:\Program Files\Temp
2010-01-08 17:36:52 ----D---- C:\Program Files\Realtek
2010-01-08 17:36:52 ----A---- C:\Windows\system32\AERTARen.dll
2010-01-08 17:36:52 ----A---- C:\Windows\system32\AERTACap.dll
2010-01-08 17:36:51 ----R---- C:\Windows\RtlExUpd.dll
2010-01-08 17:36:11 ----D---- C:\ProgramData\NVIDIA
2010-01-08 17:36:04 ----SHD---- C:\Windows\Installer
2010-01-08 17:34:01 ----A---- C:\Windows\system32\jmcricon.dll
2010-01-08 17:33:58 ----D---- C:\Windows\system32\SDA
2010-01-08 17:33:58 ----D---- C:\Program Files\JMicron
2010-01-08 17:33:55 ----D---- C:\Program Files\DIFX
2010-01-08 17:33:53 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll
2010-01-08 17:33:39 ----D---- C:\Program Files\Launch Manager
2010-01-08 17:32:28 ----D---- C:\Users\Mario\AppData\Roaming\InstallShield
2010-01-08 17:32:28 ----D---- C:\ProgramData\InstallShield
2010-01-08 17:32:18 ----D---- C:\OEM
2010-01-08 17:32:17 ----D---- C:\Program Files\Common Files\InstallShield
2010-01-08 17:32:16 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-08 17:28:11 ----A---- C:\Windows\system32\msv1_0.dll
2010-01-08 17:27:52 ----A---- C:\Windows\system32\tzres.dll
2010-01-08 17:27:21 ----A---- C:\Windows\system32\MRT.exe
2010-01-08 17:27:07 ----A---- C:\Windows\system32\wmp.dll
2010-01-08 17:27:06 ----A---- C:\Windows\system32\winresume.exe
2010-01-08 17:27:06 ----A---- C:\Windows\system32\winload.exe
2010-01-08 17:27:06 ----A---- C:\Windows\system32\CertEnroll.dll
2010-01-08 17:27:06 ----A---- C:\Windows\system32\atmfd.dll
2010-01-08 17:27:05 ----A---- C:\Windows\system32\wmploc.DLL
2010-01-08 17:27:03 ----A---- C:\Windows\system32\msasn1.dll
2010-01-08 17:19:19 ----N---- C:\Windows\system32\MpSigStub.exe
2010-01-08 17:15:14 ----D---- C:\Users\Mario\AppData\Roaming\Identities
2010-01-08 17:15:08 ----SD---- C:\Users\Mario\AppData\Roaming\Microsoft
2010-01-08 17:15:08 ----D---- C:\Users\Mario\AppData\Roaming\Media Center Programs
2010-01-08 17:14:57 ----SHD---- C:\Recovery
2010-01-08 17:06:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-01-08 17:05:04 ----D---- C:\Windows\SoftwareDistribution
2010-01-08 16:58:06 ----D---- C:\Windows\Prefetch
2010-01-08 16:57:48 ----SHD---- C:\System Volume Information
2010-01-08 16:57:11 ----D---- C:\Windows\Panther
2010-01-08 16:56:59 ----RASH---- C:\BOOTSECT.BAK
2010-01-08 16:56:58 ----SHD---- C:\Boot

======List of files/folders modified in the last 1 months======

2010-02-06 13:54:12 ----D---- C:\Windows\Temp
2010-02-06 13:54:07 ----RD---- C:\Program Files
2010-02-06 10:54:55 ----D---- C:\Windows\system32\config
2010-02-06 10:49:03 ----D---- C:\Windows\System32
2010-02-06 10:49:03 ----D---- C:\Windows\inf
2010-02-05 19:59:22 ----D---- C:\Windows
2010-02-05 19:50:05 ----D---- C:\Windows\system32\Tasks
2010-02-05 19:49:20 ----HD---- C:\ProgramData
2010-02-04 15:41:43 ----D---- C:\Windows\winsxs
2010-02-04 15:31:48 ----D---- C:\Program Files\Common Files
2010-02-04 15:31:29 ----D---- C:\Program Files\Common Files\microsoft shared
2010-02-04 09:31:58 ----D---- C:\Windows\Help
2010-02-04 09:31:39 ----D---- C:\Windows\system32\drivers
2010-02-04 09:31:22 ----D---- C:\Windows\system32\catroot
2010-02-04 09:31:21 ----D---- C:\Windows\system32\catroot2
2010-02-04 09:31:19 ----D---- C:\Windows\system32\DriverStore
2010-01-29 10:02:24 ----RSD---- C:\Windows\assembly
2010-01-29 09:56:42 ----D---- C:\Windows\system32\LogFiles
2010-01-27 11:56:43 ----D---- C:\Program Files\Internet Explorer
2010-01-18 13:52:00 ----SD---- C:\ProgramData\Microsoft
2010-01-15 18:28:42 ----D---- C:\Windows\Microsoft.NET
2010-01-15 16:09:26 ----D---- C:\Windows\system32\NDF
2010-01-15 11:33:42 ----RSD---- C:\Windows\Fonts
2010-01-13 17:33:40 ----D---- C:\Windows\Logs
2010-01-12 11:03:17 ----D---- C:\Windows\system32\wdi
2010-01-09 12:52:53 ----D---- C:\Windows\rescache
2010-01-08 20:17:35 ----D---- C:\Windows\ShellNew
2010-01-08 19:18:45 ----D---- C:\Windows\Downloaded Program Files
2010-01-08 17:28:19 ----D---- C:\Windows\system32\Boot
2010-01-08 17:28:19 ----D---- C:\Windows\ehome
2010-01-08 17:28:19 ----D---- C:\Windows\AppPatch
2010-01-08 17:28:19 ----D---- C:\Program Files\Windows Media Player
2010-01-08 17:27:57 ----D---- C:\Windows\system32\sk-SK
2010-01-08 17:27:22 ----D---- C:\Windows\debug
2010-01-08 17:19:08 ----D---- C:\Windows\system32\restore
2010-01-08 17:15:13 ----SHD---- C:\$Recycle.Bin
2010-01-08 17:15:06 ----RD---- C:\Users
2010-01-08 17:14:57 ----D---- C:\Windows\system32\Recovery
2010-01-08 17:10:32 ----D---- C:\Windows\system32\CodeIntegrity
2010-01-08 17:06:20 ----D---- C:\Windows\system32\wbem
2010-01-08 16:59:34 ----D---- C:\Windows\system32\sysprep


ESET ORIGINAL !!! RSIT Z NOOTEBOOKU
CCleaner
Pomáham iba v prípade, že sa nejedná o vírus (Systemová chyba)

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: onlinegames.NNU (autorun.inf)

#30 Příspěvek od motji »

A proč mi sem dáváte rsit z notbooku?
Z toho nepoznám zda je legal nebo ne, nehledě na to že licenci na jedno pc nemůžete použít na dvě.
Pokud se nechcete řídit pravidly fora, nemáme zde co řešit :closed:
Poprosím zde o lock :lock:
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Zamčeno