prosím o zkouknutí

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

prosím o zkouknutí

#1 Příspěvek od Saixx »

už asi 2 dny mi nějak zlobí pc, projel jsem to Eset Smart Security 4 a Microsoft Security Essential a něco mi to našlo,smazalo a dobrý
jenže dneska jsem prohledával zase a zase něco bylo, projel sem pc i superantispywarem a spyware terminatorem a našlo to hroznýho ,,bordelu'' mělo by to být o.k.(vyčištěno)
RSIT log:

Logfile of random's system information tool 1.07 (written by random/random)
Run by SAIXX at 2010-06-24 20:33:45
Microsoft Windows 7 Ultimate Service Pack 3
System drive C: has 28 GB (61%) free of 46 GB
Total RAM: 2046 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:33:53, on 24.6.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe
D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.Exe
D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
D:\Program Files (x86)\ICQ7.0\ICQ.exe
C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe
D:\RSIT.exe
C:\Program Files (x86)\trend micro\SAIXX.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [Ashampoo HDD Control Guard] D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe
O4 - HKLM\..\Run: [SpywareTerminator] "D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\DfsdkS.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - D:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5108 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3367574848-2455517582-3598705173-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3367574848-2455517582-3598705173-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2010-06-23 1241448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2010-06-23 1241448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Ashampoo HDD Control Guard"=D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe [2010-02-16 3994456]
"SpywareTerminator"=D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2010-06-24 2176512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorUpdate"=D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-06-24 3037696]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=
"NoActiveDesktopChanges"=
"ForceActiveDesktopOn"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"D:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="D:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-06-24 20:31:14 ----D---- C:\Program Files (x86)\trend micro
2010-06-24 20:31:11 ----D---- C:\rsit
2010-06-24 20:24:49 ----D---- C:\32788R22FWJFW
2010-06-24 20:04:22 ----D---- C:\Program Files (x86)\ESET
2010-06-24 17:38:33 ----D---- C:\Users\SAIXX\AppData\Roaming\Auslogics
2010-06-24 16:53:50 ----D---- C:\ProgramData\SITEguard
2010-06-24 16:51:47 ----D---- C:\Program Files (x86)\Common Files\iS3
2010-06-24 16:51:45 ----D---- C:\ProgramData\STOPzilla!
2010-06-24 16:20:44 ----D---- C:\Program Files (x86)\Crawler
2010-06-24 16:20:30 ----D---- C:\Users\SAIXX\AppData\Roaming\Spyware Terminator
2010-06-24 16:20:29 ----D---- C:\ProgramData\Spyware Terminator
2010-06-23 20:07:57 ----A---- C:\Windows\SysWOW64\DfSdkBt.exe
2010-06-23 18:20:21 ----D---- C:\Program Files (x86)\MyFree Codec
2010-06-23 18:10:22 ----A---- C:\Windows\SysWOW64\FsExService64.Exe
2010-06-23 18:09:00 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2010-06-23 18:08:13 ----D---- C:\Program Files (x86)\MarkAny
2010-06-23 18:08:12 ----D---- C:\ProgramData\Samsung
2010-06-23 18:07:50 ----D---- C:\Program Files (x86)\Common Files\Samsung
2010-06-23 17:54:26 ----A---- C:\Windows\SysWOW64\DfSdkBt32.exe
2010-06-23 14:50:58 ----D---- C:\ProgramData\NETGATE
2010-06-23 14:08:18 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2010-06-23 14:08:10 ----D---- C:\ProgramData\!SASCORE
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\PresentationHostProxy.dll
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\PresentationHost.exe
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\netfxperf.dll
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\mscoree.dll
2010-06-22 23:05:34 ----A---- C:\Windows\SysWOW64\dfshim.dll
2010-06-22 23:00:51 ----A---- C:\Windows\SysWOW64\ntdll.dll
2010-06-22 23:00:24 ----A---- C:\Windows\SysWOW64\CPFilters.dll
2010-06-20 19:29:00 ----A---- C:\Windows\EAConfigInfo.txt
2010-06-20 17:22:09 ----A---- C:\Windows\SysWOW64\NPSExec.exe
2010-06-18 14:14:47 ----A---- C:\Windows\SysWOW64\MSVCP50.DLL
2010-06-18 14:13:19 ----A---- C:\Windows\IsUninst.exe
2010-06-17 15:17:36 ----A---- C:\Windows\SysWOW64\GkSui18.EXE
2010-06-17 15:13:44 ----D---- C:\ProgramData\ATI
2010-06-17 15:11:42 ----D---- C:\Users\SAIXX\AppData\Roaming\Samsung
2010-06-13 13:05:34 ----D---- C:\Users\SAIXX\AppData\Roaming\ESET
2010-06-13 13:04:29 ----D---- C:\ProgramData\ESET
2010-06-13 03:22:25 ----D---- C:\Program Files (x86)\Microsoft Antimalware
2010-06-13 02:24:43 ----D---- C:\Windows\SysWOW64\Adobe
2010-06-13 01:59:48 ----D---- C:\Windows\Sun
2010-06-13 01:58:32 ----D---- C:\ProgramData\Sun
2010-06-13 01:58:30 ----D---- C:\Program Files (x86)\Common Files\Java
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\javaws.exe
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\javaw.exe
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\java.exe
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\deployJava1.dll
2010-06-13 01:57:57 ----D---- C:\Program Files (x86)\Java
2010-06-11 22:57:31 ----D---- C:\Program Files (x86)\Common Files\Adobe
2010-06-10 18:04:00 ----RHD---- C:\MSOCache
2010-06-10 17:48:51 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2010-06-10 17:43:02 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-06-10 17:39:03 ----D---- C:\Users\SAIXX\AppData\Roaming\QIP
2010-06-10 17:24:56 ----D---- C:\Program Files (x86)\Microsoft Works
2010-06-10 17:24:20 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-06-10 17:24:20 ----D---- C:\Program Files (x86)\Common Files\DESIGNER
2010-06-10 17:24:07 ----D---- C:\Windows\PCHEALTH
2010-06-10 17:24:07 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-06-10 17:21:37 ----D---- C:\ProgramData\Microsoft Help
2010-06-10 15:35:36 ----D---- C:\Users\SAIXX\AppData\Roaming\DVDVideoSoftIEHelpers
2010-06-10 15:34:44 ----D---- C:\Program Files (x86)\Common Files\DVDVideoSoft
2010-06-10 14:52:22 ----D---- C:\Users\SAIXX\AppData\Roaming\Ashampoo
2010-06-10 14:49:48 ----D---- C:\Users\SAIXX\AppData\Roaming\Leadertech
2010-06-10 14:49:39 ----D---- C:\Program Files (x86)\Common Files\LogiShrd
2010-06-10 14:48:29 ----D---- C:\ProgramData\Logishrd
2010-06-10 04:20:58 ----D---- C:\Windows\Panther
2010-06-10 04:20:46 ----RASH---- C:\BOOTSECT.BAK
2010-06-10 04:20:44 ----SHD---- C:\Boot
2010-06-09 19:52:08 ----D---- C:\Users\SAIXX\AppData\Roaming\ATI
2010-06-09 19:48:29 ----A---- C:\Windows\SysWOW64\AsIO.dll
2010-06-09 19:48:28 ----D---- C:\Program Files (x86)\ASUS
2010-06-09 19:48:08 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-06-09 19:47:37 ----D---- C:\Program Files (x86)\Common Files\InstallShield
2010-06-09 19:47:36 ----A---- C:\Windows\Language_trs.ini
2010-06-09 19:46:15 ----D---- C:\Program Files (x86)\Canon
2010-06-09 19:42:50 ----HD---- C:\ProgramData\CanonBJ
2010-06-09 19:32:42 ----A---- C:\Windows\libem.INI
2010-06-09 19:31:28 ----D---- C:\Users\SAIXX\AppData\Roaming\Logitech
2010-06-09 19:31:09 ----D---- C:\Users\SAIXX\AppData\Roaming\FlashGetBHO
2010-06-09 19:29:07 ----D---- C:\Users\SAIXX\AppData\Roaming\DAEMON Tools Lite
2010-06-09 19:28:01 ----D---- C:\NVIDIA
2010-06-09 19:18:19 ----D---- C:\Users\SAIXX\AppData\Roaming\WinRAR
2010-06-09 19:16:38 ----D---- C:\Users\SAIXX\AppData\Roaming\THQ
2010-06-09 19:12:26 ----D---- C:\Program Files (x86)\Common Files\Steam
2010-06-09 19:11:18 ----D---- C:\Users\SAIXX\AppData\Roaming\SUPERAntiSpyware.com
2010-06-09 19:08:30 ----D---- C:\Users\SAIXX\AppData\Roaming\Opera
2010-06-09 19:05:42 ----SHD---- C:\Windows\Installer
2010-06-09 19:04:54 ----D---- C:\Users\SAIXX\AppData\Roaming\Macromedia
2010-06-09 19:04:54 ----D---- C:\Users\SAIXX\AppData\Roaming\Adobe
2010-06-09 19:04:52 ----D---- C:\Windows\SysWOW64\Macromed
2010-06-09 19:03:29 ----D---- C:\Users\SAIXX\AppData\Roaming\Thunderbird
2010-06-09 19:03:29 ----D---- C:\Users\SAIXX\AppData\Roaming\Mozilla
2010-06-09 19:01:43 ----D---- C:\Users\SAIXX\AppData\Roaming\ImgBurn
2010-06-09 19:01:33 ----D---- C:\Users\SAIXX\AppData\Roaming\Logishrd
2010-06-09 18:59:55 ----D---- C:\Users\SAIXX\AppData\Roaming\ICQ
2010-06-09 18:59:22 ----D---- C:\Users\SAIXX\AppData\Roaming\GRETECH
2010-06-09 18:57:54 ----D---- C:\Users\SAIXX\AppData\Roaming\FlashGet
2010-06-09 18:53:52 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-06-09 18:52:34 ----D---- C:\Users\SAIXX\AppData\Roaming\Audacity
2010-06-09 18:52:30 ----A---- C:\Windows\SysWOW64\msv1_0.dll
2010-06-09 18:46:03 ----D---- C:\Users\SAIXX\AppData\Roaming\TuneUp Software
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\XAudio2_6.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\XAudio2_5.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\XAPOFX1_4.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\xactengine3_6.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\X3DAudio1_7.dll
2010-06-09 18:45:30 ----A---- C:\Windows\SysWOW64\xactengine3_5.dll
2010-06-09 18:45:30 ----A---- C:\Windows\SysWOW64\D3DCompiler_42.dll
2010-06-09 18:45:29 ----A---- C:\Windows\SysWOW64\d3dcsx_42.dll
2010-06-09 18:45:27 ----A---- C:\Windows\SysWOW64\D3DX9_42.dll
2010-06-09 18:45:27 ----A---- C:\Windows\SysWOW64\d3dx11_42.dll
2010-06-09 18:45:27 ----A---- C:\Windows\SysWOW64\d3dx10_42.dll
2010-06-09 18:45:25 ----A---- C:\Windows\SysWOW64\d3dx10_41.dll
2010-06-09 18:45:25 ----A---- C:\Windows\SysWOW64\D3DCompiler_41.dll
2010-06-09 18:45:24 ----A---- C:\Windows\SysWOW64\D3DX9_41.dll
2010-06-09 18:45:23 ----A---- C:\Windows\SysWOW64\XAudio2_4.dll
2010-06-09 18:45:23 ----A---- C:\Windows\SysWOW64\XAPOFX1_3.dll
2010-06-09 18:45:22 ----A---- C:\Windows\SysWOW64\xactengine3_4.dll
2010-06-09 18:45:22 ----A---- C:\Windows\SysWOW64\X3DAudio1_6.dll
2010-06-09 18:45:21 ----A---- C:\Windows\SysWOW64\d3dx10_40.dll
2010-06-09 18:45:21 ----A---- C:\Windows\SysWOW64\D3DCompiler_40.dll
2010-06-09 18:45:20 ----A---- C:\Windows\SysWOW64\D3DX9_40.dll
2010-06-09 18:45:19 ----A---- C:\Windows\SysWOW64\XAudio2_3.dll
2010-06-09 18:45:19 ----A---- C:\Windows\SysWOW64\XAPOFX1_2.dll
2010-06-09 18:45:18 ----A---- C:\Windows\SysWOW64\xactengine3_3.dll
2010-06-09 18:45:17 ----A---- C:\Windows\SysWOW64\X3DAudio1_5.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\XAudio2_2.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\XAPOFX1_1.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\xactengine3_2.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\D3DX9_39.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\d3dx10_39.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\D3DCompiler_39.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\XAudio2_1.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\XAPOFX1_0.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\xactengine3_1.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\X3DAudio1_4.dll
2010-06-09 18:45:13 ----A---- C:\Windows\SysWOW64\d3dx10_38.dll
2010-06-09 18:45:13 ----A---- C:\Windows\SysWOW64\D3DCompiler_38.dll
2010-06-09 18:45:12 ----A---- C:\Windows\SysWOW64\D3DX9_38.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\XAudio2_0.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\xactengine3_0.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\X3DAudio1_3.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\d3dx10_37.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\D3DCompiler_37.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\xactengine2_10.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\D3DX9_37.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\d3dx10_36.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\D3DCompiler_36.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\xactengine2_9.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\d3dx9_36.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\d3dx10_35.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\D3DCompiler_35.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\xactengine2_8.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\X3DAudio1_2.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\d3dx9_35.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\d3dx9_34.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\d3dx10_34.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\D3DCompiler_34.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\xinput1_3.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\xactengine2_7.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\d3dx10_33.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\D3DCompiler_33.dll
2010-06-09 18:45:06 ----A---- C:\Windows\SysWOW64\d3dx9_33.dll
2010-06-09 18:45:05 ----A---- C:\Windows\SysWOW64\xactengine2_6.dll
2010-06-09 18:45:04 ----A---- C:\Windows\SysWOW64\xactengine2_5.dll
2010-06-09 18:45:02 ----A---- C:\Windows\SysWOW64\d3dx10.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\xactengine2_4.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\x3daudio1_1.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\d3dx9_32.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\d3dx9_31.dll
2010-06-09 18:45:00 ----A---- C:\Windows\SysWOW64\xinput1_2.dll
2010-06-09 18:45:00 ----A---- C:\Windows\SysWOW64\xactengine2_3.dll
2010-06-09 18:45:00 ----A---- C:\Windows\SysWOW64\xactengine2_2.dll
2010-06-09 18:44:59 ----A---- C:\Windows\SysWOW64\xinput1_1.dll
2010-06-09 18:44:59 ----A---- C:\Windows\SysWOW64\xactengine2_1.dll
2010-06-09 18:44:58 ----A---- C:\Windows\SysWOW64\d3dx9_30.dll
2010-06-09 18:44:57 ----A---- C:\Windows\SysWOW64\xactengine2_0.dll
2010-06-09 18:44:57 ----A---- C:\Windows\SysWOW64\x3daudio1_0.dll
2010-06-09 18:44:57 ----A---- C:\Windows\SysWOW64\d3dx9_29.dll
2010-06-09 18:44:55 ----A---- C:\Windows\SysWOW64\d3dx9_28.dll
2010-06-09 18:44:54 ----A---- C:\Windows\SysWOW64\d3dx9_27.dll
2010-06-09 18:44:52 ----A---- C:\Windows\SysWOW64\d3dx9_26.dll
2010-06-09 18:44:51 ----A---- C:\Windows\SysWOW64\d3dx9_25.dll
2010-06-09 18:44:48 ----A---- C:\Windows\SysWOW64\d3dx9_24.dll
2010-06-09 18:44:09 ----A---- C:\Windows\SysWOW64\asycfilt.dll
2010-06-09 18:44:06 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2010-06-09 18:44:06 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2010-06-09 18:43:53 ----A---- C:\Windows\SysWOW64\wmp.dll
2010-06-09 18:43:52 ----A---- C:\Windows\SysWOW64\CertEnroll.dll
2010-06-09 18:43:51 ----A---- C:\Windows\SysWOW64\wmploc.DLL
2010-06-09 18:43:47 ----A---- C:\Windows\SysWOW64\t2embed.dll
2010-06-09 18:43:46 ----A---- C:\Windows\SysWOW64\msasn1.dll
2010-06-09 18:43:44 ----A---- C:\Windows\SysWOW64\shell32.dll
2010-06-09 18:43:42 ----A---- C:\Windows\SysWOW64\sspicli.dll
2010-06-09 18:43:42 ----A---- C:\Windows\SysWOW64\secur32.dll
2010-06-09 18:43:26 ----A---- C:\Windows\SysWOW64\psisdecd.dll
2010-06-09 18:43:25 ----A---- C:\Windows\SysWOW64\explorer.exe
2010-06-09 18:43:25 ----A---- C:\Windows\explorer.exe
2010-06-09 18:43:24 ----A---- C:\Windows\SysWOW64\secproc_isv.dll
2010-06-09 18:43:24 ----A---- C:\Windows\SysWOW64\secproc.dll
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\secproc_ssp_isv.dll
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\secproc_ssp.dll
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\RMActivate_isv.exe
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\RMActivate.exe
2010-06-09 18:43:22 ----A---- C:\Windows\SysWOW64\RMActivate_ssp.exe
2010-06-09 18:43:19 ----A---- C:\Windows\SysWOW64\quartz.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\tsbyuv.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\msyuv.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\msvidc32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\msrle32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\mciavi32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\iyuv_32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\avifil32.dll
2010-06-09 18:43:11 ----A---- C:\Windows\SysWOW64\inetcomm.dll
2010-06-09 18:43:01 ----A---- C:\Windows\SysWOW64\wintrust.dll
2010-06-09 18:42:50 ----A---- C:\Windows\SysWOW64\fontsub.dll
2010-06-09 18:42:50 ----A---- C:\Windows\SysWOW64\atmlib.dll
2010-06-09 18:42:50 ----A---- C:\Windows\SysWOW64\atmfd.dll
2010-06-09 18:42:49 ----A---- C:\Windows\SysWOW64\jscript.dll
2010-06-09 18:42:48 ----A---- C:\Windows\SysWOW64\vbscript.dll
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\wow32.dll
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\user.exe
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\setup16.exe
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\instnm.exe
2010-06-09 18:42:45 ----A---- C:\Windows\SysWOW64\cabview.dll
2010-06-09 18:42:44 ----D---- C:\Users\SAIXX\AppData\Roaming\AnvSoft
2010-06-09 18:42:21 ----A---- C:\Windows\SysWOW64\tzres.dll
2010-06-09 18:41:23 ----D---- C:\Windows\SysWOW64\directx
2010-06-09 18:38:51 ----A---- C:\Windows\SysWOW64\mshtml.dll
2010-06-09 18:38:50 ----A---- C:\Windows\SysWOW64\urlmon.dll
2010-06-09 18:38:50 ----A---- C:\Windows\SysWOW64\mstime.dll
2010-06-09 18:38:50 ----A---- C:\Windows\SysWOW64\ieframe.dll
2010-06-09 18:38:49 ----A---- C:\Windows\SysWOW64\wininet.dll
2010-06-09 18:38:49 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2010-06-09 18:38:49 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2010-06-09 18:38:49 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2010-06-09 18:31:20 ----D---- C:\Users\SAIXX\AppData\Roaming\Identities
2010-06-09 18:30:59 ----SD---- C:\Users\SAIXX\AppData\Roaming\Microsoft
2010-06-09 18:30:59 ----D---- C:\Users\SAIXX\AppData\Roaming\Media Center Programs
2010-06-09 18:28:59 ----SHD---- C:\Recovery
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Šablony
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Plocha
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Oblíbené položky
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Nabídka Start
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Dokumenty
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Data aplikací
2010-06-09 18:24:49 ----D---- C:\Windows\SoftwareDistribution
2010-06-09 18:22:10 ----D---- C:\Windows\Prefetch
2010-06-09 18:21:50 ----SHD---- C:\System Volume Information
2010-05-27 19:05:28 ----A---- C:\Windows\SysWOW64\atioglxx.dll
2010-05-27 19:02:46 ----A---- C:\Windows\SysWOW64\aticfx32.dll
2010-05-27 18:58:18 ----A---- C:\Windows\SysWOW64\atipdlxx.dll
2010-05-27 18:58:10 ----A---- C:\Windows\SysWOW64\Oemdspif.dll
2010-05-27 18:57:58 ----A---- C:\Windows\SysWOW64\ati2edxx.dll
2010-05-27 18:54:56 ----A---- C:\Windows\SysWOW64\atidxx32.dll
2010-05-27 18:41:10 ----A---- C:\Windows\SysWOW64\aticalrt.dll
2010-05-27 18:41:04 ----A---- C:\Windows\SysWOW64\aticalcl.dll
2010-05-27 18:39:54 ----A---- C:\Windows\SysWOW64\aticaldd.dll
2010-05-27 18:37:44 ----A---- C:\Windows\SysWOW64\atiumdag.dll
2010-05-27 18:31:38 ----A---- C:\Windows\SysWOW64\atiumdva.dll
2010-05-27 18:25:54 ----A---- C:\Windows\SysWOW64\atiadlxy.dll
2010-05-27 18:25:44 ----A---- C:\Windows\SysWOW64\atiglpxx.dll
2010-05-27 18:25:38 ----A---- C:\Windows\SysWOW64\atigktxx.dll
2010-05-27 18:24:56 ----A---- C:\Windows\SysWOW64\atiuxpag.dll
2010-05-27 18:24:46 ----A---- C:\Windows\SysWOW64\atiu9pag.dll
2010-05-27 18:20:46 ----A---- C:\Windows\SysWOW64\atimpc32.dll
2010-05-27 18:20:46 ----A---- C:\Windows\SysWOW64\amdpcom32.dll

======List of files/folders modified in the last 1 months======

2010-06-24 20:33:50 ----D---- C:\Windows\Temp
2010-06-24 20:31:14 ----RD---- C:\Program Files (x86)
2010-06-24 20:26:18 ----D---- C:\Windows\winsxs
2010-06-24 19:56:46 ----D---- C:\Windows
2010-06-24 19:51:01 ----D---- C:\Windows\SysWOW64\drivers
2010-06-24 19:51:01 ----D---- C:\Windows\SysWOW64
2010-06-24 19:47:25 ----D---- C:\Windows\System32
2010-06-24 16:53:50 ----HD---- C:\ProgramData
2010-06-24 16:51:47 ----D---- C:\Program Files (x86)\Common Files
2010-06-24 02:20:07 ----D---- C:\Windows\Tasks
2010-06-23 18:31:18 ----D---- C:\Windows\inf
2010-06-23 18:19:10 ----RD---- C:\Program Files
2010-06-23 15:42:20 ----D---- C:\Windows\Microsoft.NET
2010-06-23 15:42:03 ----RSD---- C:\Windows\assembly
2010-06-22 23:35:23 ----D---- C:\Windows\AppPatch
2010-06-22 23:09:06 ----D---- C:\Windows\SysWOW64\en-US
2010-06-22 23:05:22 ----D---- C:\Windows\ehome
2010-06-22 14:15:12 ----D---- C:\Windows\rescache
2010-06-17 14:42:22 ----SHD---- C:\$Recycle.Bin
2010-06-16 21:12:01 ----D---- C:\Windows\Logs
2010-06-14 15:15:48 ----SD---- C:\ProgramData\Microsoft
2010-06-13 02:48:31 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2010-06-13 01:55:39 ----D---- C:\Windows\debug
2010-06-11 17:09:04 ----RD---- C:\Users
2010-06-10 17:40:08 ----RSD---- C:\Windows\Fonts
2010-06-10 17:38:16 ----N---- C:\Windows\win.ini
2010-06-10 17:38:15 ----D---- C:\Program Files (x86)\Common Files\System
2010-06-10 17:22:06 ----D---- C:\Windows\ShellNew
2010-06-09 19:55:02 ----D---- C:\Program Files (x86)\Windows Media Player
2010-06-09 19:55:00 ----D---- C:\Program Files (x86)\Windows Mail
2010-06-09 19:54:55 ----D---- C:\Windows\SysWOW64\cs-CZ
2010-06-09 19:54:49 ----D---- C:\Program Files (x86)\Internet Explorer
2010-06-09 19:54:47 ----D---- C:\Windows\SysWOW64\sk-SK
2010-06-09 19:54:47 ----D---- C:\Windows\SysWOW64\migration
2010-06-09 18:29:49 ----D---- C:\Windows\Setup
2010-06-09 18:22:38 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-08-04 13440]
R1 AsUpIO;AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [2009-07-06 13368]
R1 blbdrive;blbdrive; C:\Windows\system32\DRIVERS\blbdrive.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys []
R1 DfsC;@%systemroot%\system32\drivers\dfsc.sys,-101; C:\Windows\System32\Drivers\dfsc.sys []
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys []
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys []
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys []
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys []
R1 RDPENCDD;@%systemroot%\system32\drivers\RDPENCDD.sys,-101; C:\Windows\system32\drivers\rdpencdd.sys []
R1 RDPREFMP;@%systemroot%\system32\drivers\RdpRefMp.sys,-101; C:\Windows\system32\drivers\rdprefmp.sys []
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2010-02-17 14920]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2010-02-17 12360]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys []
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys []
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys []
R1 WfpLwf;WFP Lightweight Filter; C:\Windows\system32\DRIVERS\wfplwf.sys []
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys []
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys []
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys []
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver; C:\Windows\system32\DRIVERS\lltdio.sys []
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys []
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys []
R2 rspndr;Link-Layer Topology Discovery Responder; C:\Windows\system32\DRIVERS\rspndr.sys []
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys []
R3 AmdK8;Ovladač procesoru AMD K8; C:\Windows\system32\DRIVERS\amdk8.sys []
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys []
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys []
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys []
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys []
R3 CompositeBus;Ovladač rozpoznávacího modulu složené sběrnice; C:\Windows\system32\DRIVERS\CompositeBus.sys []
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys []
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys []
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys []
R3 HDAudBus;Ovladač sběrnice Microsoft UAA pro zvuk High Definition Audio; C:\Windows\system32\DRIVERS\HDAudBus.sys []
R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys []
R3 L8042Kbd;SetPoint Keyboard Driver; C:\Windows\system32\DRIVERS\L8042Kbd.sys []
R3 monitor;Služba ovladače funkce třídy monitorů Microsoft; C:\Windows\system32\DRIVERS\monitor.sys []
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys []
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys []
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys []
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys []
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys []
R3 NativeWifiP;NativeWiFi Filter; C:\Windows\system32\DRIVERS\nwifi.sys []
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys []
R3 RasAgileVpn;WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys []
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys []
R3 rdpbus;Remote Desktop Device Redirector Bus Driver; C:\Windows\system32\DRIVERS\rdpbus.sys []
R3 RTL8187;Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\rtl8187.sys []
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys []
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys []
R3 tunnel;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys []
R3 umbus;Ovladač sběrnice UMBus Enumerator; C:\Windows\system32\DRIVERS\umbus.sys []
R3 usbehci;Ovladač miniportu vylepšeného hostitelského řadiče Microsoft USB 2.0; C:\Windows\system32\DRIVERS\usbehci.sys []
R3 usbhub;Ovladač standardního rozbočovače USB; C:\Windows\system32\DRIVERS\usbhub.sys []
R3 usbohci;Ovladač miniportu otevřeného hostitelského řadiče Microsoft USB; C:\Windows\system32\DRIVERS\usbohci.sys []
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\Windows\system32\DRIVERS\USBSTOR.SYS []
R3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys []
R3 WudfPf;User Mode Driver Frameworks Platform Driver; C:\Windows\system32\drivers\WudfPf.sys []
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys []
S2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
S3 1394ohci;1394 OHCI Compliant Host Controller; C:\Windows\system32\DRIVERS\1394ohci.sys []
S3 AcpiPmi;ACPI Power Meter Driver; C:\Windows\system32\DRIVERS\acpipmi.sys []
S3 adp94xx;adp94xx; C:\Windows\system32\DRIVERS\adp94xx.sys []
S3 adpahci;adpahci; C:\Windows\system32\DRIVERS\adpahci.sys []
S3 adpu320;adpu320; C:\Windows\system32\DRIVERS\adpu320.sys []
S3 agp440;Intel AGP Bus Filter; C:\Windows\system32\DRIVERS\agp440.sys []
S3 amdide;amdide; C:\Windows\system32\DRIVERS\amdide.sys []
S3 AmdPPM;AMD Processor Driver; C:\Windows\system32\DRIVERS\amdppm.sys []
S3 amdsata;amdsata; C:\Windows\system32\DRIVERS\amdsata.sys []
S3 amdsbs;amdsbs; C:\Windows\system32\DRIVERS\amdsbs.sys []
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys []
S3 aqmlaw8r;aqmlaw8r; C:\Windows\SysWOW64\drivers\aqmlaw8r.sys []
S3 arc;arc; C:\Windows\system32\DRIVERS\arc.sys []
S3 arcsas;arcsas; C:\Windows\system32\DRIVERS\arcsas.sys []
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys []
S3 b06bdrv;Broadcom NetXtreme II VBD; C:\Windows\system32\DRIVERS\bxvbda.sys []
S3 b57nd60a;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60a.sys []
S3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver; C:\Windows\system32\DRIVERS\BrFiltLo.sys []
S3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver; C:\Windows\system32\DRIVERS\BrFiltUp.sys []
S3 Brserid;Brother MFC Serial Port Interface Driver (WDM); C:\Windows\System32\Drivers\Brserid.sys []
S3 BrSerWdm;Brother WDM Serial driver; C:\Windows\System32\Drivers\BrSerWdm.sys []
S3 BrUsbMdm;Brother MFC USB Fax Only Modem; C:\Windows\System32\Drivers\BrUsbMdm.sys []
S3 BrUsbSer;Brother MFC USB Serial WDM Driver; C:\Windows\System32\Drivers\BrUsbSer.sys []
S3 BTHMODEM;Bluetooth Serial Communications Driver; C:\Windows\system32\DRIVERS\bthmodem.sys []
S3 circlass;Consumer IR Devices; C:\Windows\system32\DRIVERS\circlass.sys []
S3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys []
S3 Compbatt;Compbatt; C:\Windows\system32\DRIVERS\compbatt.sys []
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\system32\DRIVERS\evbda.sys []
S3 elxstor;elxstor; C:\Windows\system32\DRIVERS\elxstor.sys []
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\DRIVERS\errdev.sys []
S3 esihdrv;esihdrv; \??\C:\Users\SAIXX\AppData\Local\Temp\esihdrv.sys []
S3 exfat;exFAT File System Driver; C:\Windows\SysWOW64\drivers\exfat.sys []
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys []
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys []
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\system32\DRIVERS\gagp30kx.sys []
S3 hcw85cir;Hauppauge Consumer Infrared Receiver; C:\Windows\system32\drivers\hcw85cir.sys []
S3 HidBatt;HID UPS Battery Driver; C:\Windows\system32\DRIVERS\HidBatt.sys []
S3 HidBth;Microsoft Bluetooth HID Miniport; C:\Windows\system32\DRIVERS\hidbth.sys []
S3 HidIr;Microsoft Infrared HID Driver; C:\Windows\system32\DRIVERS\hidir.sys []
S3 HidUsb;Ovladač třídy standardu HID Microsoft; C:\Windows\system32\DRIVERS\hidusb.sys []
S3 HpSAMD;HpSAMD; C:\Windows\system32\DRIVERS\HpSAMD.sys []
S3 iaStorV;iaStorV; C:\Windows\system32\DRIVERS\iaStorV.sys []
S3 iirsp;iirsp; C:\Windows\system32\DRIVERS\iirsp.sys []
S3 intelide;intelide; C:\Windows\system32\DRIVERS\intelide.sys []
S3 intelppm;Intel Processor Driver; C:\Windows\system32\DRIVERS\intelppm.sys []
S3 IPMIDRV;IPMIDRV; C:\Windows\system32\DRIVERS\IPMIDrv.sys []
S3 isapnp;isapnp; C:\Windows\system32\DRIVERS\isapnp.sys []
S3 iScsiPrt;iScsiPort Driver; C:\Windows\system32\DRIVERS\msiscsi.sys []
S3 kbdhid;Keyboard HID Driver; C:\Windows\system32\DRIVERS\kbdhid.sys []
S3 LSI_FC;LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys []
S3 LSI_SAS;LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys []
S3 LSI_SAS2;LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys []
S3 LSI_SCSI;LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys []
S3 megasas;megasas; C:\Windows\system32\DRIVERS\megasas.sys []
S3 MegaSR;MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys []
S3 mouhid;Ovladač myši standardu HID; C:\Windows\system32\DRIVERS\mouhid.sys []
S3 mpio;mpio; C:\Windows\system32\DRIVERS\mpio.sys []
S3 msahci;msahci; C:\Windows\system32\DRIVERS\msahci.sys []
S3 msdsm;msdsm; C:\Windows\system32\DRIVERS\msdsm.sys []
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys []
S3 MsRPC;MsRPC; C:\Windows\SysWOW64\drivers\MsRPC.sys []
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys []
S3 MTConfig;Microsoft Input Configuration Driver; C:\Windows\system32\DRIVERS\MTConfig.sys []
S3 NdisCap;NDIS Capture LightWeight Filter; C:\Windows\system32\DRIVERS\ndiscap.sys []
S3 nfrd960;nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys []
S3 nv_agp;NVIDIA nForce AGP Bus Filter; C:\Windows\system32\DRIVERS\nv_agp.sys []
S3 nvraid;nvraid; C:\Windows\system32\DRIVERS\nvraid.sys []
S3 ohci1394;1394 OHCI Compliant Host Controller (Legacy); C:\Windows\system32\DRIVERS\ohci1394.sys []
S3 ql2300;ql2300; C:\Windows\system32\DRIVERS\ql2300.sys []
S3 ql40xx;ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys []
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys []
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys []
S3 sbp2port;sbp2port; C:\Windows\system32\DRIVERS\sbp2port.sys []
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys []
S3 sermouse;Serial Mouse Driver; C:\Windows\system32\DRIVERS\sermouse.sys []
S3 sffdisk;Ovladač třídy úložiště SFF; C:\Windows\system32\DRIVERS\sffdisk.sys []
S3 sffp_mmc;Ovladač protokolu úložiště SFF pro konzolu MMC; C:\Windows\system32\DRIVERS\sffp_mmc.sys []
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\Windows\system32\DRIVERS\sffp_sd.sys []
S3 SiSRaid2;SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys []
S3 SiSRaid4;SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys []
S3 Smb;@%SystemRoot%\system32\tcpipcfg.dll,-50005; C:\Windows\system32\DRIVERS\smb.sys []
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys []
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys []
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys []
S3 stexstor;stexstor; C:\Windows\system32\DRIVERS\stexstor.sys []
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys []
S3 TCPIP6;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys []
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-09 16392]
S3 tssecsrv;@%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101; C:\Windows\System32\DRIVERS\tssecsrv.sys []
S3 uagp35;Microsoft AGPv3.5 Filter; C:\Windows\system32\DRIVERS\uagp35.sys []
S3 uliagpkx;Uli AGP Bus Filter; C:\Windows\system32\DRIVERS\uliagpkx.sys []
S3 UmPass;Microsoft UMPass Driver; C:\Windows\system32\DRIVERS\umpass.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\Windows\system32\DRIVERS\usbccgp.sys []
S3 usbcir;eHome Infrared Receiver (USBCIR); C:\Windows\system32\DRIVERS\usbcir.sys []
S3 usbprint;Třída USB Printer; C:\Windows\system32\DRIVERS\usbprint.sys []
S3 usbuhci;Ovladač miniportu univerzálního hostitelského řadiče Microsoft USB; C:\Windows\system32\DRIVERS\usbuhci.sys []
S3 vga;vga; C:\Windows\system32\DRIVERS\vgapnp.sys []
S3 vhdmp;vhdmp; C:\Windows\system32\DRIVERS\vhdmp.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys []
S3 vsmraid;vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys []
S3 WacomPen;Wacom Serial Pen HID Driver; C:\Windows\system32\DRIVERS\wacompen.sys []
S3 Wd;Wd; C:\Windows\system32\DRIVERS\wd.sys []
S3 WIMMount;WIMMount; C:\Windows\system32\drivers\wimmount.sys [2009-07-14 19008]
S3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys []
S4 crcdisk;Crcdisk Filter Driver; C:\Windows\system32\DRIVERS\crcdisk.sys []
S4 ws2ifsl;@%systemroot%\System32\drivers\ws2ifsl.sys,-1000; C:\Windows\system32\drivers\ws2ifsl.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2010-06-07 125440]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe []
R2 AudioEndpointBuilder;@%SystemRoot%\system32\audiosrv.dll,-204; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2009-09-11 735960]
R2 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2009-12-09 17416]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; D:\Program Files (x86)\Spyware Terminator\sp_rsser.exe [2010-06-24 488960]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 UxSms;@%SystemRoot%\system32\dwm.exe,-2000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 WMPNetworkSvc;@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101; C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe []
R2 WSearch;@%systemroot%\system32\SearchIndexer.exe,-103; C:\Windows\system32\SearchIndexer.exe [2009-07-14 428032]
R2 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe []
R3 netprofm;@%SystemRoot%\system32\netprofm.dll,-202; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe []
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 DfSdkS;Defragmentation-Service; D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\DfsdkS.exe [2009-01-09 548704]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe []
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; C:\Windows\ehome\ehRecvr.exe [2010-05-09 696320]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; C:\Windows\ehome\ehsched.exe [2009-07-14 127488]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-09-11 23296]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe []
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2009-06-10 42840]
S3 idsvc;@%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe [2009-06-10 856384]
S3 IPBusEnum;@%systemroot%\system32\IPBusEnum.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2010-05-06 357456]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2009-07-14 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe []
S3 sppuinotify;@%SystemRoot%\system32\sppuinotify.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TBS;@%SystemRoot%\system32\tbssvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2009-07-14 194048]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe []
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe []
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe []
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe []
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WinDefend;@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 clr_optimization_v2.0.50727_32;Microsoft .NET Framework NGEN v2.0.50727_X86; C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2009-06-10 66384]
S4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-06-10 89920]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 116560]
S4 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-05-13 395048]

-----------------EOF-----------------

combofix mi nejde spustit :(
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#2 Příspěvek od Saixx »

+ k tomu všemu mi superantispyware pořád najde nějaký Adware.Tracking Cookie i když jsem mazal cookies přes Ccleaner :( a jsou tam pořád znovu a znovu
chjo
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#3 Příspěvek od Saixx »

poslední 2-3 dny je to toto:
23.6.2010 20:48:36 HTTP filter soubor http://fralnecas.org/download/Serial.As ... .1.2.0.exe varianta infiltrace Win32/Kryptik.EZO trojský kůň přerušeno spojení - uložen do karantény SAIXX\SAIXX Infiltrace byla zachycena při přístupu na web aplikací: C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe.
23.6.2010 15:14:19 Rezidentní ochrana soubor D:\SASUNINST.FILES\SASBFCC.TMP Win32/HackTool.Patcher.A potenciálně zneužitelná aplikace smazán - uložen do karantény NT AUTHORITY\SYSTEM Tato skutečnost byla zjištěna při pokusu o přístup k souboru aplikací: C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe.
23.6.2010 14:20:59 Rezidentní ochrana soubor C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.PROFESSIONAL-PATCH.EXE Win32/HackTool.Patcher.A potenciálně zneužitelná aplikace smazán - uložen do karantény NT AUTHORITY\SYSTEM Tato skutečnost byla zjištěna při pokusu o přístup k souboru aplikací: C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe.
23.6.2010 13:51:37 Rezidentní ochrana soubor D:\Downloads\superantispyware.professional-patch.exe Win32/HackTool.Patcher.A potenciálně zneužitelná aplikace smazán - uložen do karantény SAIXX\SAIXX Tato skutečnost byla zjištěna na nově vytvořeném souboru aplikací: D:\Program Files (x86)\WinRAR\WinRAR.exe.
23.6.2010 13:50:30 Rezidentní ochrana soubor D:\Downloads\WinRaR\Rar$DR00.309\superantispyware.professional-patch.exe Win32/HackTool.Patcher.A potenciálně zneužitelná aplikace smazán - uložen do karantény SAIXX\SAIXX Tato skutečnost byla zjištěna na nově vytvořeném souboru aplikací: D:\Program Files (x86)\WinRAR\WinRAR.exe.
21.6.2010 20:24:45 HTTP filter soubor http://www.ejdueyhs123.com/1/1.jar pravděpodobně varianta infiltrace Win32/TrojanDownloader.Agent trojský kůň přerušeno spojení - uložen do karantény SAIXX\SAIXX Infiltrace byla zachycena při přístupu na web aplikací: C:\Program Files (x86)\Java\jre6\bin\java.exe.

tak úplně spouštět ne, ale spíš zkusit jestli to vůbec rozjedu
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#4 Příspěvek od Saixx »

o.k.
doufám,že stihnu teb scan pač musím jít taky
zatím thx
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#5 Příspěvek od Saixx »

Obrázek
tak nevím co dělám špatně, udělal jsem všechno podle návodu a tady se to zasekne, neudělá to žádný log soubory, prostě nic
zkoušeno i v nouzovém režimu, při obouch pokusech cca 15min a pořád nic :(
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#6 Příspěvek od Saixx »

nj taky si pořád nemůžu zvyknou i když je používám asi 2 roky :(
jinak sem kontroloval pc a zatím nic, tak doufám, že to bude v pořádku, nikdy sem větší problémy s virem atd. neměl
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#7 Příspěvek od Saixx »

tak nic, zase to zůstalo na to manual scanu... :?:
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#8 Příspěvek od Saixx »

log:

OTL logfile created on: 25.6.2010 15:46:49 - Run 1
OTL by OldTimer - Version 3.2.7.0 Folder = C:\Users\SAIXX\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 0,00 Gb Available Physical Memory | 19,00% Memory free
4,00 Gb Paging File | 2,00 Gb Available in Paging File | 45,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 45,01 Gb Total Space | 27,96 Gb Free Space | 62,12% Space Free | Partition Type: NTFS
Drive D: | 700,20 Gb Total Space | 560,64 Gb Free Space | 80,07% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive M: | 232,88 Gb Total Space | 231,15 Gb Free Space | 99,26% Space Free | Partition Type: NTFS

Computer Name: SAIXX
Current User Name: SAIXX
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 7 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.06.24 23:01:09 | 002,176,512 | ---- | M] (Crawler.com) -- D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.Exe
PRC - [2010.06.24 21:27:43 | 003,037,696 | ---- | M] (Crawler.com) -- D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
PRC - [2010.06.24 21:27:40 | 000,488,960 | ---- | M] (Crawler.com) -- D:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
PRC - [2010.06.24 21:20:12 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Users\SAIXX\Desktop\OTL.exe
PRC - [2010.06.02 07:57:48 | 000,945,648 | ---- | M] (Google Inc.) -- C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe
PRC - [2010.02.16 15:38:10 | 003,994,456 | ---- | M] (Ashampoo Development GmbH & Co. KG) -- D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe
PRC - [2009.09.11 07:24:32 | 000,735,960 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe


========== Modules (SafeList) ==========

MOD - [2010.06.24 21:20:12 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Users\SAIXX\Desktop\OTL.exe
MOD - [2010.03.08 23:33:56 | 000,427,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vbscript.dll
MOD - [2009.07.14 03:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rsaenh.dll
MOD - [2009.07.14 03:16:19 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\wmiutils.dll
MOD - [2009.07.14 03:16:17 | 000,362,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbemcomn.dll
MOD - [2009.07.14 03:16:17 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\wbemdisp.dll
MOD - [2009.07.14 03:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\wbemsvc.dll
MOD - [2009.07.14 03:16:17 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\wbemprox.dll
MOD - [2009.07.14 03:16:15 | 000,380,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sxs.dll
MOD - [2009.07.14 03:16:13 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\RpcRtRemote.dll
MOD - [2009.07.14 03:16:11 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdsapi.dll
MOD - [2009.07.14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\fastprox.dll
MOD - [2009.07.14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009.07.14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010.05.27 18:59:40 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010.05.06 11:30:22 | 000,357,456 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV:64bit: - [2009.12.09 20:30:34 | 000,017,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Essentials\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2009.09.11 07:33:20 | 000,023,296 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV:64bit: - [2009.09.11 07:24:32 | 000,735,960 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:64bit: - [2009.07.14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)
SRV:64bit: - [2009.07.14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2010.06.24 21:27:40 | 000,488,960 | ---- | M] (Crawler.com) [Auto | Running] -- D:\Program Files (x86)\Spyware Terminator\sp_rsser.exe -- (sp_rssrv)
SRV - [2010.05.13 14:47:49 | 000,395,048 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.03.18 14:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.07.14 05:20:14 | 000,000,000 | ---D | M] [On_Demand | Stopped] -- C:\Windows\Vss -- (VSS)
SRV - [2009.07.14 05:20:14 | 000,000,000 | ---D | M] [Unknown | Stopped] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC) Služba DTC (Distributed Transaction Coordinator)
SRV - [2009.07.13 22:30:11 | 000,061,056 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds)
SRV - [2009.01.09 12:46:26 | 000,548,704 | ---- | M] (mst software GmbH, Germany) [On_Demand | Stopped] -- D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\DfsdkS.exe -- (DfSdkS)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2010.06.09 19:30:24 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010.06.09 11:26:50 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)
DRV:64bit: - [2010.06.09 11:26:20 | 000,020,568 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dgderdrv.sys -- (dgderdrv)
DRV:64bit: - [2010.05.27 19:39:12 | 006,856,192 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2010.05.27 19:39:12 | 006,856,192 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2010.05.27 18:25:36 | 000,264,192 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010.05.06 11:21:46 | 000,125,456 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2010.04.27 04:25:16 | 000,161,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV:64bit: - [2010.04.27 04:25:16 | 000,127,488 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV:64bit: - [2010.04.27 04:25:16 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV:64bit: - [2010.03.18 10:59:04 | 000,030,800 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV:64bit: - [2010.01.07 03:20:22 | 000,448,512 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RTL8187.sys -- (RTL8187)
DRV:64bit: - [2009.09.11 07:27:10 | 000,044,944 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:64bit: - [2009.09.11 07:27:04 | 000,168,544 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:64bit: - [2009.09.11 07:23:52 | 000,136,584 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2009.09.11 07:17:20 | 000,144,824 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamon.sys -- (eamon)
DRV:64bit: - [2009.07.14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus)
DRV:64bit: - [2009.07.14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt)
DRV:64bit: - [2009.07.14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap)
DRV:64bit: - [2009.07.14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID)
DRV:64bit: - [2009.07.14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)
DRV:64bit: - [2009.06.19 09:10:40 | 000,033,608 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\epfwndis.sys -- (Epfwndis)
DRV:64bit: - [2009.06.10 22:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2007.10.03 22:51:00 | 000,022,056 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SiWinAcc.sys -- (SiFilter)
DRV:64bit: - [2007.10.03 22:50:52 | 000,017,448 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SiRemFil.sys -- (SiRemFil)
DRV:64bit: - [2007.10.03 22:50:26 | 000,090,664 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SI3132.sys -- (SI3132)
DRV:64bit: - [2005.03.29 01:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV - [2010.06.09 18:22:38 | 000,000,000 | ---D | M] [Kernel | System | Running] -- C:\Windows\CSC -- (CSC)
DRV - [2010.06.09 11:26:50 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)
DRV - [2009.08.04 10:28:28 | 000,013,440 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\AsIO.sys -- (AsIO)
DRV - [2009.07.06 10:48:34 | 000,013,368 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\AsUpIO.sys -- (AsUpIO)
DRV - [2009.06.10 23:28:14 | 000,001,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv)
DRV - [2009.06.10 23:15:18 | 000,003,066 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/






IE - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.cz/
IE - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = cs
IE - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 20 78 24 82 F1 07 CB 01 [binary data]
IE - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010.06.13 13:04:31 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2010.06.24 16:55:38 | 000,000,860 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: () - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
O3 - HKLM\..\Toolbar: (&Crawler lišta) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
O3 - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001\..\Toolbar\WebBrowser: (&Crawler lišta) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
O4:64bit: - HKLM..\Run: [Ashampoo HDD Control Guard] D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe (Ashampoo Development GmbH & Co. KG)
O4:64bit: - HKLM..\Run: [EvtMgr6] D:\Program Files (x86)\Logitech SetPoint\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [HDD] D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe (Ashampoo Development GmbH & Co. KG)
O4:64bit: - HKLM..\Run: [MSSE] C:\Program Files\Microsoft Security Essentials\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Ashampoo HDD Control Guard] D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe (Ashampoo Development GmbH & Co. KG)
O4 - HKLM..\Run: [SpywareTerminator] D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com)
O4 - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001..\Run: [SpywareTerminatorUpdate] D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: 使用快车3下载 - C:\Users\SAIXX\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8:64bit: - Extra context menu item: 使用快车3下载全部链接 - C:\Users\SAIXX\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: 使用快车3下载 - C:\Users\SAIXX\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Users\SAIXX\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 213.46.172.37
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\tbr {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - Reg Error: Key error. File not found
O18 - Protocol\Handler\tbr {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKU\S-1-5-21-3367574848-2455517582-3598705173-1001\...exe [@ = exefile] -- Reg Error: Key error. File not found

========== Files/Folders - Created Within 7 Days ==========

[2010.06.24 21:34:23 | 000,000,000 | ---D | C] -- C:\Users\SAIXX\AppData\Local\AOL
[2010.06.24 21:27:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Spyware Terminator
[2010.06.24 21:20:10 | 000,574,464 | ---- | C] (OldTimer Tools) -- C:\Users\SAIXX\Desktop\OTL.exe
[2010.06.24 20:31:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro
[2010.06.24 20:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2010.06.24 19:47:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2010.06.24 17:38:33 | 000,000,000 | ---D | C] -- C:\Users\SAIXX\AppData\Roaming\Auslogics
[2010.06.24 16:53:50 | 000,000,000 | ---D | C] -- C:\ProgramData\SITEguard
[2010.06.24 16:51:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\iS3
[2010.06.24 16:20:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Crawler
[2010.06.24 16:20:30 | 000,000,000 | ---D | C] -- C:\Users\SAIXX\AppData\Roaming\Spyware Terminator
[2010.06.23 20:07:57 | 000,034,304 | ---- | C] (mst software GmbH, Germany) -- C:\Windows\SysWow64\DfSdkBt.exe
[2010.06.23 18:20:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyFree Codec
[2010.06.23 18:20:08 | 000,161,280 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bmdm.sys
[2010.06.23 18:20:08 | 000,127,488 | ---- | C] (MCCI) -- C:\Windows\SysNative\drivers\ss_bbus.sys
[2010.06.23 18:20:08 | 000,018,944 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bmdfl.sys
[2010.06.23 18:20:08 | 000,015,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bwhnt.sys
[2010.06.23 18:20:08 | 000,015,360 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bcmnt.sys
[2010.06.23 18:19:10 | 000,000,000 | ---D | C] -- C:\Program Files\SAMSUNG
[2010.06.23 18:11:52 | 000,015,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bwh.sys
[2010.06.23 18:11:51 | 000,015,360 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bcm.sys
[2010.06.23 18:10:22 | 000,020,480 | ---- | C] (Teruten Inc) -- C:\Windows\SysWow64\FsExService64.Exe
[2010.06.23 18:10:22 | 000,016,392 | ---- | C] (Teruten Inc) -- C:\Windows\SysWow64\drivers\TFsExDisk.Sys
[2010.06.23 18:10:22 | 000,016,392 | ---- | C] (Teruten Inc) -- C:\Windows\SysNative\drivers\TFsExDisk.sys
[2010.06.23 18:09:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Connectivity Solution
[2010.06.23 18:08:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MarkAny
[2010.06.23 18:08:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2010.06.23 18:07:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Samsung
[2010.06.23 17:54:26 | 000,028,160 | ---- | C] (mst software GmbH, Germany) -- C:\Windows\SysWow64\DfSdkBt32.exe
[2010.06.23 14:50:58 | 000,000,000 | ---D | C] -- C:\ProgramData\NETGATE
[2010.06.23 14:08:10 | 000,000,000 | ---D | C] -- C:\ProgramData\!SASCORE
[2010.06.22 23:05:35 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe
[2010.06.22 23:05:35 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll
[2010.06.22 23:05:35 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll
[2010.06.22 23:05:34 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
[2010.06.22 23:05:34 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
[2010.06.22 23:05:34 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe
[2010.06.22 23:05:34 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll
[2010.06.22 23:05:34 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll
[2010.06.22 23:00:51 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2010.06.22 23:00:24 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2010.06.22 23:00:24 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2010.06.22 23:00:23 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2010.06.22 23:00:21 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2010.06.22 23:00:21 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2010.06.22 23:00:20 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2010.06.22 23:00:20 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2010.06.20 19:30:06 | 000,000,000 | ---D | C] -- C:\Users\SAIXX\Documents\My Videos
[2010.06.20 19:30:06 | 000,000,000 | ---D | C] -- C:\Users\SAIXX\Documents\My Music
[2010.06.20 17:22:09 | 000,033,792 | ---- | C] (Electronic Arts) -- C:\Windows\SysWow64\NPSExec.exe

========== Files - Modified Within 7 Days ==========

[2010.06.25 15:46:32 | 003,145,728 | -HS- | M] () -- C:\Users\SAIXX\NTUSER.DAT
[2010.06.25 15:44:01 | 000,000,962 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3367574848-2455517582-3598705173-1001UA.job
[2010.06.25 14:23:05 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.06.25 14:23:05 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.06.25 14:18:01 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.06.25 14:17:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.06.25 14:17:45 | 1609,424,896 | -HS- | M] () -- C:\hiberfil.sys
[2010.06.25 06:06:20 | 002,001,431 | -H-- | M] () -- C:\Users\SAIXX\AppData\Local\IconCache.db
[2010.06.24 21:28:31 | 000,000,794 | ---- | M] () -- C:\Users\Public\Desktop\Spyware Terminator.lnk
[2010.06.24 21:27:38 | 000,142,592 | ---- | M] () -- C:\Windows\SysWow64\drivers\sp_rsdrv2.sys
[2010.06.24 21:20:12 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Users\SAIXX\Desktop\OTL.exe
[2010.06.24 20:46:47 | 000,210,944 | ---- | M] () -- C:\Users\SAIXX\Desktop\T-Cleaner.exe
[2010.06.24 19:44:07 | 000,001,080 | ---- | M] () -- C:\Windows\SysNative\drivers\kgpcpy.cfg
[2010.06.24 18:44:00 | 000,000,910 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3367574848-2455517582-3598705173-1001Core.job
[2010.06.24 17:55:02 | 000,001,644 | ---- | M] () -- C:\Users\SAIXX\Desktop\SysInspector.lnk
[2010.06.24 16:55:38 | 000,000,860 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2010.06.24 16:19:27 | 000,000,717 | ---- | M] () -- C:\Users\SAIXX\Desktop\CCleaner.lnk
[2010.06.23 20:05:13 | 000,001,368 | ---- | M] () -- C:\Users\SAIXX\Desktop\Flashget3.lnk
[2010.06.23 18:31:19 | 000,634,308 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2010.06.23 18:31:19 | 000,618,714 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.06.23 18:31:19 | 000,122,898 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2010.06.23 18:31:19 | 000,107,034 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.06.23 18:31:18 | 001,478,586 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.06.23 16:03:11 | 000,000,556 | ---- | M] () -- C:\Windows\SysWow64\secustat.dat
[2010.06.23 15:57:04 | 000,002,356 | ---- | M] () -- C:\Windows\SysWow64\secushr.dat
[2010.06.23 13:20:27 | 000,000,696 | ---- | M] () -- C:\Users\SAIXX\Desktop\WoW.lnk
[2010.06.23 13:20:00 | 000,000,867 | ---- | M] () -- C:\Users\SAIXX\Desktop\UnrealTournament.lnk
[2010.06.23 13:19:43 | 000,001,386 | ---- | M] () -- C:\Users\SAIXX\Desktop\R6Vegas.lnk
[2010.06.23 13:17:53 | 000,001,255 | ---- | M] () -- C:\Users\SAIXX\Desktop\J2HIN.lnk
[2010.06.23 13:17:39 | 000,001,202 | ---- | M] () -- C:\Users\SAIXX\Desktop\HALF-LIFE.lnk
[2010.06.23 13:16:26 | 000,001,135 | ---- | M] () -- C:\Users\SAIXX\Desktop\BUSDRIVER.lnk
[2010.06.23 13:16:16 | 000,000,914 | ---- | M] () -- C:\Users\SAIXX\Desktop\CoDMW2.lnk
[2010.06.23 13:16:10 | 000,000,926 | ---- | M] () -- C:\Users\SAIXX\Desktop\CoDMW.lnk
[2010.06.23 13:15:56 | 000,000,892 | ---- | M] () -- C:\Users\SAIXX\Desktop\NFSC.lnk
[2010.06.23 13:15:49 | 000,001,506 | ---- | M] () -- C:\Users\SAIXX\Desktop\BFBC2.lnk
[2010.06.22 22:24:32 | 000,001,568 | ---- | M] () -- C:\Users\SAIXX\Desktop\ESET.lnk
[2010.06.20 17:22:19 | 000,000,298 | ---- | M] () -- C:\Windows\EReg072.dat

========== Files Created - No Company Name ==========

[2010.06.24 21:28:31 | 000,000,794 | ---- | C] () -- C:\Users\Public\Desktop\Spyware Terminator.lnk
[2010.06.24 21:27:47 | 000,142,592 | ---- | C] () -- C:\Windows\SysWow64\drivers\sp_rsdrv2.sys
[2010.06.24 20:46:46 | 000,210,944 | ---- | C] () -- C:\Users\SAIXX\Desktop\T-Cleaner.exe
[2010.06.24 18:56:56 | 000,001,080 | ---- | C] () -- C:\Windows\SysNative\drivers\kgpcpy.cfg
[2010.06.24 17:55:02 | 000,001,644 | ---- | C] () -- C:\Users\SAIXX\Desktop\SysInspector.lnk
[2010.06.24 02:24:36 | 000,000,717 | ---- | C] () -- C:\Users\SAIXX\Desktop\CCleaner.lnk
[2010.06.23 20:05:13 | 000,001,368 | ---- | C] () -- C:\Users\SAIXX\Desktop\Flashget3.lnk
[2010.06.23 13:20:27 | 000,000,696 | ---- | C] () -- C:\Users\SAIXX\Desktop\WoW.lnk
[2010.06.23 13:20:00 | 000,000,867 | ---- | C] () -- C:\Users\SAIXX\Desktop\UnrealTournament.lnk
[2010.06.23 13:19:43 | 000,001,386 | ---- | C] () -- C:\Users\SAIXX\Desktop\R6Vegas.lnk
[2010.06.23 13:17:53 | 000,001,255 | ---- | C] () -- C:\Users\SAIXX\Desktop\J2HIN.lnk
[2010.06.23 13:17:39 | 000,001,202 | ---- | C] () -- C:\Users\SAIXX\Desktop\HALF-LIFE.lnk
[2010.06.23 13:16:26 | 000,001,135 | ---- | C] () -- C:\Users\SAIXX\Desktop\BUSDRIVER.lnk
[2010.06.23 13:16:16 | 000,000,914 | ---- | C] () -- C:\Users\SAIXX\Desktop\CoDMW2.lnk
[2010.06.23 13:16:10 | 000,000,926 | ---- | C] () -- C:\Users\SAIXX\Desktop\CoDMW.lnk
[2010.06.23 13:15:56 | 000,000,892 | ---- | C] () -- C:\Users\SAIXX\Desktop\NFSC.lnk
[2010.06.23 13:15:49 | 000,001,506 | ---- | C] () -- C:\Users\SAIXX\Desktop\BFBC2.lnk
[2010.06.22 22:24:32 | 000,001,568 | ---- | C] () -- C:\Users\SAIXX\Desktop\ESET.lnk
[2010.06.20 19:30:13 | 000,002,728 | ---- | C] () -- C:\Windows\SysWow64\mini_spectrum2.swf
[2010.06.10 17:48:51 | 001,470,766 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.06.09 19:48:30 | 000,013,368 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys
[2010.06.09 19:48:29 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\AsIO.dll
[2010.06.09 19:48:29 | 000,013,440 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2010.06.09 19:47:36 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2010.06.09 19:32:42 | 000,000,025 | ---- | C] () -- C:\Windows\libem.INI
[2009.10.06 09:16:00 | 000,819,200 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

========== LOP Check ==========

[2010.06.09 18:42:44 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\AnvSoft
[2010.06.10 14:52:48 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\Ashampoo
[2010.06.09 18:52:47 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\Audacity
[2010.06.24 17:40:36 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\Auslogics
[2010.06.09 20:00:03 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\DAEMON Tools Lite
[2010.06.10 15:35:36 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.06.13 13:05:34 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\ESET
[2010.06.09 18:57:54 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\FlashGet
[2010.06.23 15:08:40 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\FlashGetBHO
[2010.06.24 21:34:21 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\ICQ
[2010.06.09 19:01:43 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\ImgBurn
[2010.06.10 14:49:48 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\Leadertech
[2010.06.09 19:08:30 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\Opera
[2010.06.10 17:39:03 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\QIP
[2010.06.23 21:04:04 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\Samsung
[2010.06.25 14:20:44 | 000,000,000 | ---D | M] -- C:\Users\SAIXX\AppData\Roaming\Spyware Terminator
[2009.07.14 07:08:49 | 000,016,002 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========


< End of report >
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#9 Příspěvek od Saixx »

a tady je extras
Přílohy
Extras.zip
(6.09 KiB) Staženo 65 x
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#10 Příspěvek od Saixx »

a propo všechny složky co byly skrytý jsou teď viditelný, půjde to nějak z5?
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#11 Příspěvek od Saixx »

o.k.
jinak ta druhá aplikace není kompatibilní
při otl dám všechno jako předtím ale s rozdílem nic? jinak mi to vyhodí onu hlášku: manual...
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#12 Příspěvek od Saixx »

a co teda když mi to hlásí dole manual file scan, co mám dát?
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#13 Příspěvek od Saixx »

dám prohledat, něco to dělá, ale skončí to zase jen u manualu, můžu dokola mačkat prohledat a nic :?:
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#14 Příspěvek od Saixx »

po cca 10 sekundách opět manual a dál nic, ani po ,prohledat,
sem vskutku klidný člověk ale tohle mě dokáže k**evsky naštvat :(
Nahoru
Saixx
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 24 Črv 2010 19:13

Re: prosím o zkouknutí

#15 Příspěvek od Saixx »

tak bohužel,
vyjelo jen toto:

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 14:47 on 26/06/2010 by SAIXX (Administrator - Elevation successful)

========== filefind ==========

Searching for "beep.sys"

a po cca 15 min mi to vyhodilo chybu, že program přetal pracovat :evil:
spouštěno s kompatibilitou i bez, vždy se správcem
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“