Logfile of random's system information tool 1.08 (written by random/random)
Run by Elite at 2010-07-16 21:49:58
Microsoft Windows 7 Ultimate
System drive C: has 8 GB (19%) free of 41 GB
Total RAM: 3582 MB (67% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:50:12, on 16.7.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\TortoiseHg\TortoiseHgOverlayServer.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Elite\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Elite\AppData\Local\Google\Chrome\Application\chrome.exe
E:\Program Files\ICQ6.5\ICQ.exe
C:\Users\Elite\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Elite\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Elite\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
H:\Petas\Download\RSIT.exe
C:\Program Files\trend micro\Elite.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com?o=101916&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL
O2 - BHO: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [TortoiseHgOverlayIconServer] C:\Program Files\TortoiseHg\TortoiseHgOverlayServer.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Elite\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C908C5D7-780C-4EE9-B3AA-B84AB2C49A88}: NameServer = 213.250.192.1,213.250.194.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\GEST\GSvr.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
--
End of file - 5544 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3499907369-2792925310-1543200893-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3499907369-2792925310-1543200893-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Nero Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-06-19 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Nero Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-05-27 98304]
"ATICustomerCare"=C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-06-08 9267816]
"TortoiseHgOverlayIconServer"=C:\Program Files\TortoiseHg\TortoiseHgOverlayServer.exe [2010-06-01 44448]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-04-22 319792]
"Google Update"=C:\Users\Elite\AppData\Local\Google\Update\GoogleUpdate.exe [2010-01-17 135664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Elite\AppData\Local\Google\Update\GoogleUpdate.exe [2010-01-17 135664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\Elite\AppData\Roaming\uTorrent\utorrent.exe [2009-11-25 289584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Elite^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
C:\PROGRA~1\MICROS~2\Office12\ONENOTEM.EXE [2006-10-26 98632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-07-16 21:49:58 ----D---- C:\rsit
2010-07-16 21:49:58 ----D---- C:\Program Files\trend micro
2010-07-16 18:21:25 ----D---- C:\ProgramData\TrackMania
2010-07-16 11:14:06 ----D---- C:\ProgramData\Avira
2010-07-15 14:28:19 ----D---- C:\ProgramData\Blizzard Entertainment
2010-07-15 08:42:52 ----D---- C:\Windows\Minidump
2010-07-10 18:23:21 ----A---- C:\Windows\system32\mkl_vml_p4.dll
2010-07-10 18:23:21 ----A---- C:\Windows\system32\mkl_vml_p3.dll
2010-07-10 18:23:21 ----A---- C:\Windows\system32\mkl_vml_def.dll
2010-07-10 18:23:20 ----A---- C:\Windows\system32\mkl_p4.dll
2010-07-10 18:23:20 ----A---- C:\Windows\system32\mkl_p3.dll
2010-07-10 18:23:20 ----A---- C:\Windows\system32\mkl_lapack64.dll
2010-07-10 18:23:20 ----A---- C:\Windows\system32\mkl_lapack32.dll
2010-07-10 18:23:20 ----A---- C:\Windows\system32\mkl_def.dll
2010-07-10 18:23:20 ----A---- C:\Windows\system32\libguide40.dll
2010-07-10 18:23:19 ----A---- C:\Windows\system32\rapture3d_oal.dll
2010-07-10 18:23:18 ----D---- C:\Program Files\BRS
2010-07-10 18:22:55 ----D---- C:\Windows\system32\xlive
2010-07-10 18:22:55 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2010-07-10 18:22:41 ----RA---- C:\Windows\system32\tmp73AD.tmp
2010-07-10 18:20:53 ----RA---- C:\Windows\system32\tmp737D.tmp
2010-07-10 15:09:08 ----A---- C:\Windows\Burnout(TM) Paradise The Ultimate Box Patch Log.txt
2010-07-10 15:08:51 ----D---- C:\ProgramData\Electronic Arts
2010-07-09 17:22:03 ----D---- C:\ProgramData\Codemasters
2010-07-09 17:20:46 ----A---- C:\Windows\system32\OpenAL32.dll
2010-07-09 17:15:14 ----D---- C:\Program Files\OpenAL
2010-07-09 17:15:14 ----A---- C:\Windows\system32\wrap_oal.dll
2010-07-09 16:27:54 ----D---- C:\Users\Elite\AppData\Roaming\bizarre creations
2010-07-09 15:58:42 ----A---- C:\driverlog.txt
2010-07-09 15:58:41 ----D---- C:\Windows\Arkino12
2010-07-09 15:58:40 ----D---- C:\Program Files\Speed Wheel 5 Pro
2010-07-08 20:38:47 ----D---- C:\Windows\system32\GPSAVES
2010-07-05 14:36:32 ----A---- C:\Windows\system32\NVUNINST.EXE
2010-07-05 14:36:08 ----D---- C:\NVIDIA
2010-07-05 09:31:59 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-07-05 09:31:59 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-07-05 09:31:59 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-07-05 09:31:59 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-07-05 09:30:38 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-07-03 07:26:36 ----A---- C:\Windows\system32\libmysql_d.dll
2010-07-03 07:26:33 ----D---- C:\Program Files\PremiumSoft
2010-07-02 16:58:33 ----D---- C:\Users\Elite\AppData\Roaming\SQLyog
2010-07-02 16:48:18 ----A---- C:\Windows\ODBCINST.INI
2010-07-02 16:42:36 ----D---- C:\Users\Elite\AppData\Roaming\Nerocode
2010-07-02 14:43:57 ----D---- C:\Users\Elite\AppData\Roaming\TortoiseHg
2010-07-02 14:40:29 ----D---- C:\Program Files\SQLyog Community
2010-07-02 14:28:14 ----D---- C:\ProgramData\MySQL
2010-07-02 14:28:14 ----D---- C:\Program Files\MySQL
2010-07-02 14:22:20 ----A---- C:\Windows\ODBC.INI
2010-07-02 14:22:05 ----D---- C:\Windows\system32\js
2010-07-02 14:22:05 ----D---- C:\Windows\system32\images
2010-07-02 14:22:05 ----D---- C:\Windows\system32\html
2010-07-02 14:22:05 ----D---- C:\Windows\system32\css
2010-07-02 14:22:05 ----D---- C:\Program Files\Business Objects
2010-07-02 14:19:21 ----D---- C:\Program Files\Microsoft SQL Server
2010-07-02 14:19:07 ----D---- C:\Program Files\Microsoft Device Emulator
2010-07-02 14:18:33 ----D---- C:\Program Files\Windows Mobile 5.0 SDK R2
2010-07-02 14:18:16 ----D---- C:\Program Files\Microsoft Synchronization Services
2010-07-02 14:18:16 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-07-02 14:13:57 ----D---- C:\ProgramData\PreEmptive Solutions
2010-07-02 14:12:06 ----D---- C:\Windows\symbols
2010-07-02 14:11:56 ----D---- C:\Windows\system32\1033
2010-07-02 14:11:15 ----D---- C:\Program Files\Microsoft Visual Studio 9.0
2010-07-02 14:11:15 ----D---- C:\Program Files\Microsoft SDKs
2010-07-02 14:11:15 ----D---- C:\Program Files\HTML Help Workshop
2010-07-02 14:11:15 ----D---- C:\Program Files\Common Files\Merge Modules
2010-07-02 14:11:15 ----D---- C:\Program Files\CE Remote Tools
2010-07-02 14:10:34 ----D---- C:\Program Files\Microsoft Web Designer Tools
2010-07-02 14:07:29 ----D---- C:\Program Files\TortoiseHg
2010-07-02 14:07:29 ----D---- C:\Program Files\Common Files\TortoiseOverlays
2010-07-02 11:57:51 ----RHD---- C:\Users\Elite\AppData\Roaming\SecuROM
2010-07-01 13:00:57 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-07-01 13:00:57 ----A---- C:\Windows\system32\PresentationHost.exe
2010-07-01 13:00:57 ----A---- C:\Windows\system32\netfxperf.dll
2010-07-01 13:00:57 ----A---- C:\Windows\system32\mscoree.dll
2010-07-01 13:00:57 ----A---- C:\Windows\system32\dfshim.dll
2010-06-28 06:11:24 ----D---- C:\ProgramData\Motive
2010-06-27 20:24:06 ----D---- C:\POP3.CD
2010-06-27 11:33:27 ----RASH---- C:\MSDOS.SYS
2010-06-27 11:33:27 ----RASH---- C:\IO.SYS
2010-06-26 11:47:49 ----D---- C:\Program Files\oZone3D
2010-06-26 08:38:48 ----D---- C:\Program Files\CPUID
2010-06-26 08:01:59 ----D---- C:\Windows\system32\RTCOM
2010-06-26 08:01:49 ----A---- C:\Windows\system32\WavesLib.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\SRSWOW.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\SRSTSXT.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\SRSTSHD.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\SRSHP360.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\RtkPgExt.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\RtkCoInst.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\RtkApoApi.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\RtkAPO.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\RTEEP32A.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\RTEEL32A.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\RTEEG32A.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\RTEED32A.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\RP3DHT32.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\RP3DAA32.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\MBWrp32.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\MBppld32.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\MBPPCn32.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\MBAPO32.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\MaxxAudioAPO.dll
2010-06-26 08:01:49 ----A---- C:\Windows\system32\drivers\RTKVHDA.sys
2010-06-26 08:01:48 ----A---- C:\Windows\system32\FMAPO.dll
2010-06-26 08:01:48 ----A---- C:\Windows\system32\AERTARen.dll
2010-06-26 08:01:48 ----A---- C:\Windows\system32\AERTACap.dll
2010-06-26 08:01:46 ----A---- C:\Windows\RtlExUpd.dll
2010-06-26 07:49:41 ----D---- C:\ProgramData\ATI
2010-06-26 07:45:53 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-06-25 14:30:35 ----A---- C:\Windows\BlendSettings.ini
2010-06-21 09:00:13 ----D---- C:\Program Files\IrfanView
2010-06-19 05:44:57 ----D---- C:\Program Files\Common Files\Java
2010-06-19 05:44:32 ----A---- C:\Windows\system32\javaws.exe
2010-06-19 05:44:32 ----A---- C:\Windows\system32\javaw.exe
2010-06-19 05:44:32 ----A---- C:\Windows\system32\java.exe
2010-06-19 05:44:32 ----A---- C:\Windows\system32\deployJava1.dll
2010-06-19 05:44:22 ----D---- C:\Program Files\Java
======List of files/folders modified in the last 1 months======
2010-07-16 21:50:00 ----D---- C:\Windows\Temp
2010-07-16 21:49:58 ----RD---- C:\Program Files
2010-07-16 21:47:07 ----D---- C:\Users\Elite\AppData\Roaming\uTorrent
2010-07-16 21:32:22 ----D---- C:\Users\Elite\AppData\Roaming\ICQ
2010-07-16 21:16:44 ----D---- C:\Windows
2010-07-16 21:02:39 ----D---- C:\Windows\system32\drivers
2010-07-16 21:02:32 ----D---- C:\Windows\system32\catroot
2010-07-16 21:02:31 ----D---- C:\Windows\system32\DriverStore
2010-07-16 21:02:30 ----D---- C:\Windows\inf
2010-07-16 20:51:42 ----SHD---- C:\System Volume Information
2010-07-16 18:21:25 ----HD---- C:\ProgramData
2010-07-16 18:09:16 ----RSD---- C:\Windows\assembly
2010-07-16 11:14:08 ----D---- C:\Windows\Prefetch
2010-07-14 22:43:49 ----D---- C:\Users\Elite\AppData\Roaming\Mumble
2010-07-12 14:58:52 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-12 14:52:59 ----D---- C:\Windows\system32\Tasks
2010-07-10 18:23:24 ----SHD---- C:\Windows\Installer
2010-07-10 18:23:21 ----D---- C:\Windows\System32
2010-07-10 17:27:10 ----D---- C:\Windows\system32\config
2010-07-10 15:56:35 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-07-10 15:37:10 ----D---- C:\Windows\system32\catroot2
2010-07-09 17:21:24 ----D---- C:\Windows\system
2010-07-08 20:00:12 ----D---- C:\Program Files\Yahoo!
2010-07-05 14:35:35 ----D---- C:\Windows\system32\wdi
2010-07-05 12:43:11 ----D---- C:\Windows\Microsoft.NET
2010-07-05 11:45:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-07-05 11:44:12 ----D---- C:\Windows\system32\en-US
2010-07-05 09:30:38 ----D---- C:\Program Files\Common Files
2010-07-02 16:48:18 ----D---- C:\Windows\Help
2010-07-02 15:12:48 ----D---- C:\ProgramData\Microsoft Help
2010-07-02 14:20:14 ----D---- C:\Program Files\Common Files\microsoft shared
2010-07-02 14:20:10 ----D---- C:\Program Files\Microsoft.NET
2010-07-02 14:19:44 ----D---- C:\Windows\registration
2010-07-02 14:18:58 ----RSD---- C:\Windows\Fonts
2010-07-02 14:16:59 ----SD---- C:\Users\Elite\AppData\Roaming\Microsoft
2010-07-02 14:16:59 ----SD---- C:\ProgramData\Microsoft
2010-07-02 14:15:24 ----D---- C:\Windows\winsxs
2010-07-02 14:12:21 ----D---- C:\Program Files\MSBuild
2010-07-01 13:01:04 ----D---- C:\Windows\SoftwareDistribution
2010-07-01 13:00:40 ----D---- C:\Windows\Logs
2010-06-30 06:55:55 ----D---- C:\Program Files\Mozilla Firefox
2010-06-28 06:11:26 ----D---- C:\Windows\Roaming
2010-06-27 20:31:00 ----D---- C:\Windows\system32\appmgmt
2010-06-26 22:29:27 ----D---- C:\Users\Elite\AppData\Roaming\Vso
2010-06-26 08:02:14 ----HD---- C:\Program Files\Temp
2010-06-26 07:45:55 ----D---- C:\Program Files\ATI
2010-06-26 07:45:37 ----D---- C:\Program Files\ATI Technologies
2010-06-26 07:25:41 ----D---- C:\Windows\Tasks
2010-06-26 07:25:41 ----D---- C:\Windows\system32\wfp
2010-06-26 07:25:39 ----D---- C:\Windows\system32\wbem
2010-06-26 07:24:38 ----D---- C:\Windows\system32\CodeIntegrity
2010-06-25 21:05:19 ----D---- C:\Windows\LiveKernelReports
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-02-13 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-07-14 117248]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-05-27 5586432]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-05-27 209920]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 108560]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-06-08 3112360]
R3 ip100Avista;ASUS NX1001 Network Adapter NT Driver; C:\Windows\system32\DRIVERS\ipfnd51.sys [2010-04-16 29696]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-01-29 47360]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-11-27 233472]
S3 aameb6it;aameb6it; C:\Windows\system32\drivers\aameb6it.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-05-27 5586432]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 ET5Drv;ET5Drv; \??\C:\Windows\system32\Drivers\ET5Drv.sys [2007-10-11 30008]
S3 GarenaPEngine;GarenaPEngine; \??\C:\Users\Elite\AppData\Local\Temp\EGO3AD1.tmp []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2010-04-11 16608]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2008-07-22 51200]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2009-11-12 7168]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-05-27 176128]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2007-02-10 29178224]
R2 MySQL;MySQL; C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld --defaults-file=C:\Program Files\MySQL\MySQL Server 5.1\my.ini MySQL []
R2 NMSAccess;NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2007-02-10 89968]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 GEST Service;GEST Service for program management.; C:\Program Files\GIGABYTE\GEST\GSvr.exe [2007-12-14 47624]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-05-22 390952]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2005-10-14 45272]
S4 msvsmon90;Visual Studio 2008 Remote Debugger; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2007-11-07 3004416]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2007-02-10 242544]
-----------------EOF-----------------
Dekuji.

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosim o kontrolu.
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 119412
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosim o kontrolu.
Log vypadá čistý.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosim o kontrolu.
Dekuji 

- Rudy
- Site Admin
- Příspěvky: 119412
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosim o kontrolu.
Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.