Vyskakovanie okien/NOD32+vír

Zpráva

SSemteXX · #46 Příspěvek od **SSemteXX** » 18 črc 2010 14:55

Nech sa páči

Malwarebytes' Anti-Malware 1.46
http://www.malwarebytes.org

Database version: 4323

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

18. 7. 2010 15:54:44
mbam-log-2010-07-18 (15-54-44).txt

Scan type: Full scan (C:\|)
Objects scanned: 220379
Time elapsed: 1 hour(s), 41 minute(s), 55 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#47 Příspěvek od **Caroprd111** » 18 črc 2010 15:12

Jak se chová PC

SSemteXX · #48 Příspěvek od **SSemteXX** » 18 črc 2010 15:16

Všetko okej, až na to, že keď ho zapnem tak mi hodí, že či mám zapnuť "Windows XP Recovery Console" alebo "Windows Xp Professional". Viem, že sa to prepisuje v boot.ini ale neviem presne ako, nejaké nápady skúsenosti?

Inak keď mi skončí 30dňová licencia na NOD, aký antivír a firewall mi odporúčate? Mal som Aviru, ale tá proste na všetko hádže vír atď, má falošné detekce dosť často.

Tu je môj boot.ini :

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /noexecute=alwaysoff /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

Stačí odstrániť toto? "C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons"

Jaj a ešte jeden problém, proste keď mi niekto pošle nejaký odkaz,url atď. a kliknem naňho tak mi nenahodí Mozillu, ako je to možné? Výchozí prehliadač je nastavený na mozillu, nechápem.

#49 Příspěvek od **Caroprd111** » 18 črc 2010 15:30

Nedoporučuji odebírat Konzolu pro zotavení, může se hodit, když Vám systém nenabootuje. Pokud i přesto chcete konzolu odstranit, tak napište a já Vám pošlu postup.

Doporučuji Avast + PCTools Firewall.

SSemteXX · #50 Příspěvek od **SSemteXX** » 18 črc 2010 15:34

Okéj, a ohľadom toho browseru mi viete poradiť?

Musím reinštalovať Firefox?

#51 Příspěvek od **Caroprd111** » 18 črc 2010 15:36

Zkuste prohlížeč přeinstalovat.

Obrázek

Odinstalujte ComboFix přes:
Start >> Spustit, zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter

Obrázek

Stáhněte T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe

Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
Po použití program vymažte. Pozor, antiviry ho mohou falešně označit za vir.

Stáhněte TFC http://oldtimer.geekstogo.com/TFC.exe

Spusťte.
Klikněte na "Start". Potvrďte hlášku kliknutím na "Ok" (Bude následovat restart)

Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

Spusťte.
Klikněte na "CleanUp!". Potvrďte hlášky kliknutím na "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478

Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.

Záložka Čistič
Dejte analyzovat, po dokončení dejte Spustit Ccleaner.

Záložka Registry
Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
OK Zavřít

Dejte nový log z RSIT.

SSemteXX · #52 Příspěvek od **SSemteXX** » 18 črc 2010 15:57

Všetko som urobil. Páči sa:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Marian at 2010-07-18 16:57:09
Microsoft Windows XP Professional Service Pack 3
System drive C: has 20 GB (26%) free of 76 GB
Total RAM: 2047 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:57:21, on 18. 7. 2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Vista Drive Icon\DrvIcon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\PROGRA~1\ViStart\ViStart.exe
C:\PROGRA~1\ViGlance\ViGlance.exe
C:\PROGRA~1\TRUETR~1\TRUETR~1.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Marian\Desktop\RSIT.exe
C:\Program Files\trend micro\Marian.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live bejelentkezési segítség - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [vilaunch] C:\WINDOWS\system32\vilaunch.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftup ... 8516750203
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 8516739375
O17 - HKLM\System\CCS\Services\Tcpip\..\{16E39F2B-0996-4D5E-A3D6-5F83CA2E0C43}: NameServer = 195.168.69.136 195.168.69.139
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe

--
End of file - 6354 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live bejelentkezési segítség - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-12 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PAC7302_Monitor"=C:\WINDOWS\PixArt\PAC7302\Monitor.exe [2006-11-03 319488]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-07-02 2202704]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-06-08 19552872]
"DrvIcon"=C:\Program Files\Vista Drive Icon\DrvIcon.exe [2008-04-13 49152]
"vilaunch"=C:\WINDOWS\system32\vilaunch.exe [2009-09-09 146412]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-05-27 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-09-20 202024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\combofix]
C:\ComboFix\CF24463.cfxxe /c C:\ComboFix\Combobatch.bat []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DrvIcon]
C:\Program Files\Vista Drive Icon\DrvIcon.exe [2008-04-13 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-09-20 1836328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Octoshape Streaming Services]
C:\Documents and Settings\Marian\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [2009-01-08 70936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe [2009-09-24 434176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2010-06-29 2403568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2007-10-14 214360]

C:\Documents and Settings\Marian\Start Menu\Programs\Startup
Stardock ObjectDock.lnk - C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2009-09-04 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-05-27 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\Valve\Steam\Steam.exe"="C:\Program Files\Valve\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\VirtualDJ\virtualdj_trial.exe"="C:\Program Files\VirtualDJ\virtualdj_trial.exe:*:Enabled:VirtualDJ"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Files and Settings Transfer Wizard"
"C:\Documents and Settings\Marian\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe"="C:\Documents and Settings\Marian\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe:*:Enabled:Main program for Octoshape client"
"C:\Program Files\Codemasters\Colin McRae DiRT 2\dirt2_game.exe"="C:\Program Files\Codemasters\Colin McRae DiRT 2\dirt2_game.exe:*:Enabled:DiRT2 Executable"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Valve\Steam\SteamApps\ssementexx\counter-strike\hl.exe"="C:\Program Files\Valve\Steam\SteamApps\ssementexx\counter-strike\hl.exe:*:Enabled:Counter-Strike"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======File associations======

.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-07-18 16:57:09 ----D---- C:\rsit
2010-07-17 20:07:39 ----D---- C:\Documents and Settings\All Users\Application Data\ATI
2010-07-17 20:07:13 ----D---- C:\Documents and Settings\Marian\Application Data\ViStart
2010-07-17 20:04:17 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2010-07-17 20:03:59 ----D---- C:\Program Files\ATI
2010-07-17 19:45:17 ----A---- C:\WINDOWS\system32\vilaunch.exe
2010-07-17 19:45:11 ----D---- C:\Program Files\ViStart
2010-07-17 19:45:11 ----D---- C:\Program Files\ViGlance
2010-07-17 19:45:10 ----D---- C:\Program Files\Vista Rainbar
2010-07-17 19:45:10 ----D---- C:\Program Files\Vista Drive Icon
2010-07-17 19:36:01 ----D---- C:\WINDOWS\Prefetch
2010-07-17 19:32:56 ----HDC---- C:\WINDOWS\$NtUninstallKB938759$
2010-07-17 19:17:41 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-07-17 15:59:43 ----ASH---- C:\pagefile.sys
2010-07-17 14:30:44 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-07-17 14:11:54 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-07-17 14:11:54 ----A---- C:\WINDOWS\system32\irclass.dll
2010-07-17 12:35:39 ----SHD---- C:\RECYCLER
2010-07-17 12:16:08 ----SH---- C:\Boot.bak
2010-07-17 12:16:00 ----RASHD---- C:\cmdcons
2010-07-16 19:10:38 ----D---- C:\Documents and Settings\Marian\Application Data\ESET
2010-07-16 19:07:11 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2010-07-16 16:42:09 ----D---- C:\Documents and Settings\Marian\Application Data\Mozilla
2010-07-15 20:50:01 ----D---- C:\Documents and Settings\Marian\Application Data\SUPERAntiSpyware.com
2010-07-15 20:50:01 ----D---- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2010-07-15 20:49:43 ----D---- C:\Program Files\SUPERAntiSpyware
2010-07-15 13:29:38 ----D---- C:\Program Files\PES 2010 Editor
2010-07-15 11:42:33 ----A---- C:\WINDOWS\system32\drivers\PAC7302.SYS
2010-07-15 10:45:51 ----D---- C:\Program Files\Enigma Software Group
2010-07-15 00:26:46 ----D---- C:\Program Files\Anti Trojan Elite
2010-07-14 19:17:16 ----D---- C:\Documents and Settings\Marian\Application Data\Malwarebytes
2010-07-14 19:17:09 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-07-14 19:17:07 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-07-14 19:17:07 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-07-14 19:17:07 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-07-12 20:39:59 ----D---- C:\Program Files\Valve
2010-07-12 16:21:36 ----D---- C:\Documents and Settings\All Users\Application Data\Trymedia
2010-07-11 19:27:08 ----D---- C:\Program Files\KONAMI
2010-07-11 17:55:58 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-07-11 17:55:08 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2010-07-11 17:08:54 ----D---- C:\Documents and Settings\Marian\Application Data\vlc
2010-07-08 19:27:57 ----A---- C:\WINDOWS\system32\javaws.exe
2010-07-08 19:27:57 ----A---- C:\WINDOWS\system32\javaw.exe
2010-07-08 19:27:57 ----A---- C:\WINDOWS\system32\java.exe
2010-07-08 19:27:57 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-07-08 16:05:42 ----D---- C:\Documents and Settings\Marian\Application Data\ViSplore
2010-07-08 16:05:41 ----D---- C:\Documents and Settings\Marian\Application Data\ViGlance
2010-07-08 16:05:35 ----D---- C:\WINDOWS\system32\VIRepair
2010-07-08 16:02:59 ----D---- C:\Program Files\ViSplore
2010-07-08 16:02:59 ----D---- C:\Program Files\TrueTransparency
2010-07-08 16:02:59 ----A---- C:\WINDOWS\system32\viwc.exe
2010-07-08 16:02:56 ----D---- C:\Program Files\WinFlip
2010-07-08 16:00:25 ----D---- C:\WINDOWS\system32\VITrans
2010-07-08 16:00:25 ----D---- C:\VTPFiles
2010-07-08 16:00:25 ----A---- C:\WINDOWS\system32\Uharc.exe
2010-07-08 16:00:25 ----A---- C:\WINDOWS\system32\reico.exe
2010-07-08 16:00:25 ----A---- C:\WINDOWS\system32\modifype.exe
2010-07-08 16:00:24 ----A---- C:\WINDOWS\system32\pskill.exe
2010-07-08 15:59:49 ----A---- C:\WINDOWS\system32\scrnrdr.exe
2010-07-07 20:17:20 ----D---- C:\Program Files\MSXML 4.0
2010-07-07 20:16:46 ----D---- C:\WINDOWS\ie8updates
2010-07-07 19:39:43 ----A---- C:\WINDOWS\system32\browserchoice.exe
2010-07-07 19:03:36 ----A---- C:\WINDOWS\system32\xpsp4res.dll
2010-07-07 17:33:17 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-07-07 17:33:17 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2010-07-07 17:33:17 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2010-07-07 17:33:17 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2010-07-05 13:40:51 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2010-07-05 13:40:33 ----D---- C:\6c15930dff31220c866b2810ba
2010-07-05 13:40:28 ----D---- C:\WINDOWS\system32\LogFiles
2010-07-05 13:40:28 ----D---- C:\WINDOWS\system32\drivers\UMDF
2010-07-05 13:40:11 ----D---- C:\1132aea08f7be422c351
2010-07-05 13:35:27 ----A---- C:\WINDOWS\system32\antiwpa.dll107EC54
2010-07-05 13:31:22 ----A---- C:\WINDOWS\system32\LegitCheckControl.dll
2010-07-05 13:26:51 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2010-07-05 13:21:19 ----A---- C:\WINDOWS\system32\lcid.exe
2010-07-03 16:04:46 ----D---- C:\Program Files\AnvSoft
2010-07-02 12:43:48 ----A---- C:\WINDOWS\system32\drivers\epfwtdi.sys
2010-07-02 12:43:04 ----A---- C:\WINDOWS\system32\drivers\eamon.sys
2010-06-30 20:33:32 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-06-30 20:22:38 ----A---- C:\WINDOWS\system32\drivers\irbus.sys
2010-06-30 20:22:38 ----A---- C:\WINDOWS\system32\comsdupd.exe
2010-06-30 20:22:37 ----A---- C:\WINDOWS\system32\smtpapi.dll
2010-06-30 20:22:37 ----A---- C:\WINDOWS\system32\rwnh.dll
2010-06-30 20:22:33 ----A---- C:\WINDOWS\system32\credssp.dll
2010-06-30 20:22:33 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2010-06-30 20:22:33 ----A---- C:\WINDOWS\system32\azroles.dll
2010-06-30 20:22:33 ----A---- C:\WINDOWS\system32\ativtmxx.dll
2010-06-30 20:22:33 ----A---- C:\WINDOWS\system32\ati3d1ag.dll
2010-06-30 20:22:33 ----A---- C:\WINDOWS\system32\ati2dvaa.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\eapsvc.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\eapqec.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\eappprxy.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\eapphost.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\eappgnui.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\eappcfg.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\eapolqec.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\dot3ui.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\dot3svc.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\dot3msm.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\dot3gpclnt.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\dot3dlg.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\dot3cfg.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\dot3api.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\dimsroam.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\dimsntfy.dll
2010-06-30 20:22:32 ----A---- C:\WINDOWS\system32\dhcpqec.dll
2010-06-30 20:22:31 ----A---- C:\WINDOWS\system32\hsfcisp2.dll
2010-06-30 20:22:30 ----A---- C:\WINDOWS\system32\mdmxsdk.dll
2010-06-30 20:22:30 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2010-06-30 20:22:30 ----A---- C:\WINDOWS\system32\kmsvc.dll
2010-06-30 20:22:29 ----A---- C:\WINDOWS\system32\onex.dll
2010-06-30 20:22:29 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-06-30 20:22:29 ----A---- C:\WINDOWS\system32\napstat.exe
2010-06-30 20:22:29 ----A---- C:\WINDOWS\system32\napmontr.dll
2010-06-30 20:22:29 ----A---- C:\WINDOWS\system32\napipsec.dll
2010-06-30 20:22:29 ----A---- C:\WINDOWS\system32\mtxparhd.dll
2010-06-30 20:22:29 ----A---- C:\WINDOWS\system32\msshavmsg.dll
2010-06-30 20:22:29 ----A---- C:\WINDOWS\system32\mssha.dll
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\slserv.exe
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\slrundll.exe
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\slgen.dll
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\slextspk.dll
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\slcoinst.dll
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\setupn.exe
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\s3gnb.dll
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\rasqec.dll
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\qutil.dll
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\qcliprov.dll
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\qagentrt.dll
2010-06-30 20:22:28 ----A---- C:\WINDOWS\system32\qagent.dll
2010-06-30 20:22:27 ----A---- C:\WINDOWS\system32\tzchange.exe
2010-06-30 20:22:27 ----A---- C:\WINDOWS\system32\tspkg.dll
2010-06-30 20:22:24 ----A---- C:\WINDOWS\slrundll.exe
2010-06-30 20:22:23 ----D---- C:\WINDOWS\system32\scripting
2010-06-30 20:22:22 ----D---- C:\WINDOWS\system32\bits
2010-06-30 20:19:19 ----D---- C:\WINDOWS\ServicePackFiles
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\amdagp.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\alim1541.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\agpcpq.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\agp440.sys
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2010-06-30 20:15:46 ----A---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atintuxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atinttxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atinraxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2010-06-30 20:15:45 ----A---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2010-06-30 20:15:44 ----A---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2010-06-30 20:15:44 ----A---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2010-06-30 20:15:44 ----A---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2010-06-30 20:15:43 ----A---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2010-06-30 20:15:42 ----A---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2010-06-30 20:15:42 ----A---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2010-06-30 20:15:42 ----A---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2010-06-30 20:15:42 ----A---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2010-06-30 20:15:42 ----A---- C:\WINDOWS\system32\drivers\hidir.sys
2010-06-30 20:15:41 ----A---- C:\WINDOWS\system32\drivers\recagent.sys
2010-06-30 20:15:41 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2010-06-30 20:15:41 ----A---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2010-06-30 20:15:41 ----A---- C:\WINDOWS\system32\drivers\mutohpen.sys
2010-06-30 20:15:41 ----A---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2010-06-30 20:15:41 ----A---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2010-06-30 20:15:41 ----A---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2010-06-30 20:15:40 ----A---- C:\WINDOWS\system32\drivers\slnthal.sys
2010-06-30 20:15:40 ----A---- C:\WINDOWS\system32\drivers\slntamr.sys
2010-06-30 20:15:40 ----A---- C:\WINDOWS\system32\drivers\slnt7554.sys
2010-06-30 20:15:40 ----A---- C:\WINDOWS\system32\drivers\sisagp.sys
2010-06-30 20:15:40 ----A---- C:\WINDOWS\system32\drivers\siint5.dll
2010-06-30 20:15:40 ----A---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2010-06-30 20:15:40 ----A---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2010-06-30 20:15:40 ----A---- C:\WINDOWS\system32\drivers\rndismpx.sys
2010-06-30 20:15:39 ----A---- C:\WINDOWS\system32\drivers\usb8023x.sys
2010-06-30 20:15:39 ----A---- C:\WINDOWS\system32\drivers\uagp35.sys
2010-06-30 20:15:39 ----A---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2010-06-30 20:15:38 ----A---- C:\WINDOWS\system32\drivers\watv10nt.sys
2010-06-30 20:15:38 ----A---- C:\WINDOWS\system32\drivers\watv06nt.sys
2010-06-30 20:15:38 ----A---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2010-06-30 20:15:38 ----A---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2010-06-30 20:15:38 ----A---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2010-06-30 20:15:38 ----A---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2010-06-30 20:15:38 ----A---- C:\WINDOWS\system32\drivers\wacompen.sys
2010-06-30 20:15:38 ----A---- C:\WINDOWS\system32\drivers\viaagp.sys
2010-06-30 20:15:38 ----A---- C:\WINDOWS\system32\drivers\vchnt5.dll
2010-06-30 20:15:38 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys
2010-06-30 18:23:08 ----D---- C:\WINDOWS\WBEM
2010-06-30 18:20:37 ----HDC---- C:\WINDOWS\ie8
2010-06-30 18:18:40 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
2010-06-30 17:38:05 ----D---- C:\Program Files\trend micro
2010-06-30 12:57:46 ----D---- C:\Program Files\Desktop Activity Recorder
2010-06-27 15:12:42 ----HDC---- C:\WINDOWS\$NtUninstallKB894391$
2010-06-26 14:55:44 ----D---- C:\Program Files\City Interactive
2010-06-24 17:31:44 ----D---- C:\Documents and Settings\All Users\Application Data\TrackMania
2010-06-24 14:45:27 ----D---- C:\Program Files\NVIDIA Corporation
2010-06-23 18:40:14 ----D---- C:\Program Files\ESET
2010-06-23 13:59:45 ----D---- C:\Documents and Settings\Marian\Application Data\FUEL
2010-06-23 12:25:28 ----A---- C:\WINDOWS\ModemLog_Communications cable between two computers.txt
2010-06-22 21:19:02 ----D---- C:\Documents and Settings\All Users\Application Data\Codemasters
2010-06-22 19:59:04 ----D---- C:\Program Files\Codemasters
2010-06-22 19:49:28 ----A---- C:\WINDOWS\vncutil.exe
2010-06-22 19:49:23 ----A---- C:\WINDOWS\system32\RtkCoInstXP.dll
2010-06-22 19:49:23 ----A---- C:\WINDOWS\RtkAudioService.exe
2010-06-22 19:49:20 ----A---- C:\WINDOWS\system32\drivers\Monfilt.sys
2010-06-22 19:49:15 ----A---- C:\WINDOWS\system32\drivers\Ambfilt.sys
2010-06-22 17:29:01 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2010-06-22 17:29:01 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2010-06-22 17:05:43 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2010-06-22 17:05:43 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2010-06-22 17:05:42 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2010-06-22 17:05:42 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2010-06-22 17:05:41 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2010-06-22 17:05:41 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2010-06-22 17:05:38 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2010-06-22 17:05:34 ----A---- C:\WINDOWS\system32\D3DX9_43.dll

======List of files/folders modified in the last 1 months======

2010-07-18 16:57:11 ----D---- C:\WINDOWS\Temp
2010-07-18 16:55:42 ----D---- C:\WINDOWS
2010-07-18 16:51:14 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-07-18 16:50:48 ----D---- C:\WINDOWS\system32
2010-07-18 16:41:48 ----D---- C:\WINDOWS\system32\Restore
2010-07-18 16:41:47 ----SHD---- C:\System Volume Information
2010-07-18 13:12:42 ----D---- C:\WINDOWS\system32\config
2010-07-18 01:46:59 ----D---- C:\Documents and Settings\Marian\Application Data\mIRC
2010-07-18 00:53:25 ----D---- C:\Documents and Settings\Marian\Application Data\HLSW
2010-07-17 23:07:08 ----D---- C:\Program Files\mIRC
2010-07-17 20:15:49 ----D---- C:\WINDOWS\system32\CatRoot2
2010-07-17 20:05:26 ----SHD---- C:\WINDOWS\Installer
2010-07-17 20:04:42 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-07-17 20:04:34 ----D---- C:\WINDOWS\system32\drivers
2010-07-17 20:04:22 ----HD---- C:\WINDOWS\inf
2010-07-17 20:04:16 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-07-17 20:03:59 ----RD---- C:\Program Files
2010-07-17 19:48:06 ----D---- C:\Program Files\Windows Media Player
2010-07-17 19:48:05 ----D---- C:\Program Files\Outlook Express
2010-07-17 19:48:05 ----D---- C:\Program Files\Internet Explorer
2010-07-17 19:45:10 ----D---- C:\WINDOWS\Cursors
2010-07-17 19:45:05 ----D---- C:\WINDOWS\Media
2010-07-17 19:41:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-07-17 19:35:24 ----D---- C:\WINDOWS\system32\Setup
2010-07-17 19:35:24 ----D---- C:\WINDOWS\AppPatch
2010-07-17 19:35:23 ----D---- C:\WINDOWS\system32\wbem
2010-07-17 19:35:22 ----RSD---- C:\WINDOWS\Fonts
2010-07-17 19:34:28 ----D---- C:\WINDOWS\security
2010-07-17 19:32:33 ----D---- C:\WINDOWS\system32\CatRoot
2010-07-17 19:31:00 ----D---- C:\Program Files\Messenger
2010-07-17 19:30:50 ----D---- C:\WINDOWS\system32\inetsrv
2010-07-17 19:30:50 ----D---- C:\WINDOWS\Network Diagnostic
2010-07-17 19:30:50 ----D---- C:\WINDOWS\ime
2010-07-17 19:30:49 ----D---- C:\WINDOWS\Help
2010-07-17 19:30:40 ----D---- C:\WINDOWS\system32\usmt
2010-07-17 19:30:40 ----D---- C:\WINDOWS\system32\en-us
2010-07-17 19:30:39 ----D---- C:\WINDOWS\PeerNet
2010-07-17 19:30:39 ----D---- C:\Program Files\Movie Maker
2010-07-17 19:26:06 ----D---- C:\WINDOWS\system32\npp
2010-07-17 19:26:06 ----D---- C:\WINDOWS\mui
2010-07-17 19:26:05 ----D---- C:\WINDOWS\msagent
2010-07-17 19:26:04 ----D---- C:\WINDOWS\srchasst
2010-07-17 19:26:03 ----D---- C:\Program Files\NetMeeting
2010-07-17 19:26:02 ----D---- C:\WINDOWS\system32\Com
2010-07-17 19:25:59 ----D---- C:\Program Files\Windows NT
2010-07-17 19:25:55 ----D---- C:\Program Files\Common Files\System
2010-07-17 19:25:35 ----D---- C:\WINDOWS\system32\oobe
2010-07-17 19:25:34 ----D---- C:\WINDOWS\system
2010-07-17 19:21:30 ----D---- C:\WINDOWS\Microsoft.NET
2010-07-17 19:20:59 ----RSD---- C:\WINDOWS\assembly
2010-07-17 19:17:13 ----D---- C:\WINDOWS\ehome
2010-07-17 19:03:44 ----D---- C:\Documents and Settings\Marian\Application Data\HPAppData
2010-07-17 18:56:17 ----D---- C:\WINDOWS\WinSxS
2010-07-17 18:54:18 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-07-17 16:07:14 ----D---- C:\WINDOWS\l2schemas
2010-07-17 16:07:05 ----D---- C:\WINDOWS\system32\en
2010-07-17 16:02:51 ----D---- C:\WINDOWS\twain_32
2010-07-17 16:02:31 ----D---- C:\WINDOWS\system32\icsxml
2010-07-17 16:01:41 ----D---- C:\WINDOWS\system32\ias
2010-07-17 16:01:32 ----D---- C:\WINDOWS\system32\1033
2010-07-17 15:59:43 ----D---- C:\WINDOWS\Driver Cache
2010-07-17 15:32:49 ----D---- C:\WINDOWS\Debug
2010-07-17 14:47:07 ----D---- C:\WINDOWS\Registration
2010-07-17 14:32:08 ----D---- C:\WINDOWS\system32\drivers\etc
2010-07-17 14:32:01 ----A---- C:\WINDOWS\ODBCINST.INI
2010-07-17 14:31:23 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2010-07-17 14:30:47 ----RD---- C:\WINDOWS\Web
2010-07-17 14:30:37 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-07-17 14:30:21 ----A---- C:\WINDOWS\win.ini
2010-07-17 14:27:51 ----D---- C:\Program Files\Windows Media Connect 2
2010-07-17 14:25:20 ----SH---- C:\boot.ini
2010-07-17 14:12:01 ----A---- C:\WINDOWS\system.ini
2010-07-17 14:11:40 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-07-17 13:23:05 ----D---- C:\Program Files\Common Files
2010-07-17 00:12:14 ----D---- C:\Documents and Settings\Marian\Application Data\uTorrent
2010-07-17 00:08:13 ----D---- C:\Program Files\Mozilla Firefox
2010-07-16 19:18:14 ----D---- C:\Documents and Settings
2010-07-15 21:51:06 ----SD---- C:\WINDOWS\Tasks
2010-07-15 20:43:12 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-07-15 20:38:54 ----D---- C:\Documents and Settings\Marian\Application Data\Adobe
2010-07-15 18:53:10 ----D---- C:\Documents and Settings\Marian\Application Data\Skype
2010-07-15 18:34:51 ----D---- C:\Documents and Settings\Marian\Application Data\skypePM
2010-07-15 10:45:36 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-07-15 10:34:31 ----D---- C:\Program Files\TeamViewer
2010-07-14 18:45:42 ----D---- C:\WINDOWS\system32\NtmsData
2010-07-14 18:44:42 ----D---- C:\Program Files\Playbar
2010-07-12 15:46:08 ----D---- C:\WINDOWS\Minidump
2010-07-12 15:38:39 ----D---- C:\WINDOWS\system32\DirectX
2010-07-08 22:06:20 ----D---- C:\Program Files\CCleaner
2010-07-08 19:27:55 ----D---- C:\Program Files\Java
2010-07-08 15:54:14 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-08 15:53:18 ----D---- C:\Program Files\Styler
2010-07-08 15:49:58 ----D---- C:\Documents and Settings\Marian\Application Data\IconTweaker
2010-07-08 15:49:58 ----D---- C:\Documents and Settings\All Users\Application Data\IconTweaker
2010-07-07 20:39:24 ----D---- C:\Program Files\Microsoft Silverlight
2010-07-07 20:34:23 ----HD---- C:\WINDOWS\$hf_mig$
2010-07-07 20:08:32 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-07-07 19:46:57 ----SD---- C:\Documents and Settings\Marian\Application Data\Microsoft
2010-07-07 19:46:56 ----D---- C:\Documents and Settings\Marian\Application Data\Ventrilo
2010-07-07 17:33:34 ----D---- C:\WINDOWS\SoftwareDistribution
2010-07-07 17:32:36 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-07-04 20:44:03 ----D---- C:\Documents and Settings\Marian\Application Data\dvdcss
2010-06-30 22:46:07 ----D---- C:\Program Files\Online Services
2010-06-30 22:25:34 ----D---- C:\WINDOWS\system32\Side 9 Screensaver dir
2010-06-30 18:11:56 ----D---- C:\WINDOWS\pss
2010-06-30 13:26:33 ----A---- C:\WINDOWS\NeroDigital.ini
2010-06-24 14:45:52 ----D---- C:\Program Files\AGEIA Technologies
2010-06-22 19:49:59 ----D---- C:\WINDOWS\system32\RTCOM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-04-27 45648]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-04-28 114984]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-07-02 55256]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-07-02 140752]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-04-28 134488]
R2 rspndr;Link-Layer Topology Discovery Responder; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2007-02-18 62336]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-05-27 4830720]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-04-28 32584]
R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2007-02-18 138752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-06-08 6056040]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-08-23 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\WINDOWS\system32\DRIVERS\seehcri.sys [2008-01-09 27632]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-30 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-30 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-30 21568]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 PAC7302;CANYON USB PC CAMERA; C:\WINDOWS\system32\DRIVERS\PAC7302.SYS [2010-07-15 458752]
S3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2010-05-27 19072]
S3 s117bus;Sony Ericsson Device 117 driver (WDM); C:\WINDOWS\system32\DRIVERS\s117bus.sys [2007-06-25 82984]
S3 s117mdfl;Sony Ericsson Device 117 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s117mdfl.sys [2007-06-25 14888]
S3 s117mdm;Sony Ericsson Device 117 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s117mdm.sys [2007-06-25 108456]
S3 s117mgmt;Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s117mgmt.sys [2007-06-25 100264]
S3 s117nd5;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS); C:\WINDOWS\system32\DRIVERS\s117nd5.sys [2007-06-25 22952]
S3 s117obex;Sony Ericsson Device 117 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s117obex.sys [2007-06-25 98344]
S3 s117unic;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM); C:\WINDOWS\system32\DRIVERS\s117unic.sys [2007-06-25 98856]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-05-27 602112]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-07-02 810144]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-07-02 33584]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-05-04 651720]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-09-20 382248]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2007-02-18 38912]
S3 WMConnectCDS;Windows Media Connect Service; C:\Program Files\Windows Media Connect 2\wmccds.exe [2005-10-06 855552]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-01-30 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#53 Příspěvek od **Caroprd111** » 18 črc 2010 16:18

Obstarejte si legální Windows

Následující soubor/y otestujte na http://www.virustotal.com/cs/
C:\WINDOWS\system32\vilaunch.exe

(Soubor/y nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem v podobě odkazu vložte.)

SSemteXX · #54 Příspěvek od **SSemteXX** » 18 črc 2010 16:24

http://www.virustotal.com/cs/analisis/8 ... 1279466483

#55 Příspěvek od **Caroprd111** » 18 črc 2010 18:45

Až na ten nelegální systém je log v pořádku.

VIRY.CZ

Vyskakovanie okien/NOD32+vír

Re: Vyskakovanie okien/NOD32+vír

Re: Vyskakovanie okien/NOD32+vír

Re: Vyskakovanie okien/NOD32+vír

Re: Vyskakovanie okien/NOD32+vír

Re: Vyskakovanie okien/NOD32+vír

Re: Vyskakovanie okien/NOD32+vír

Re: Vyskakovanie okien/NOD32+vír

Re: Vyskakovanie okien/NOD32+vír

Re: Vyskakovanie okien/NOD32+vír

Re: Vyskakovanie okien/NOD32+vír