Logfile of random's system information tool 1.08 (written by random/random)
Run by remond at 2010-10-27 20:45:32
Microsoft Windows 7 Ultimate
System drive C: has 10 GB (25%) free of 40 GB
Total RAM: 4087 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:45:36, on 27.10.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal
Running processes:
C:\Fraps\fraps.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Miranda IM\miranda32.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
D:\Games\Steam\Steam.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Internet Download Manager\IDMan.exe
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
C:\Program Files (x86)\Winamp\winamp.exe
C:\Program Files (x86)\Java\jre6\launch4j-tmp\frd.exe
C:\totalcmd\TOTALCMD.EXE
C:\Users\remond\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\remond\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\remond\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\remond\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\remond\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\remond.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [MirandaIM] "C:\Program Files (x86)\Miranda IM\miranda32.exe" "C:\Users\remond\AppData\Roaming\Miranda\remoNd"
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "d:\games\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout s IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout s IDM obsah FLV videa - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Stáhnout s IDM všechny odkazy - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8712 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Essentials\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
taskeng.exe {3810E6AC-CF72-4890-98AB-150998FB25D1}
"C:\Windows\system32\Dwm.exe"
C:\Fraps\fraps.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe"
"C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesApp64.exe" /TUStart /pid:1152
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-34795e38-bdf5-491a-b726-bc0bf81f4103 -SystemEventPortName:HostProcess-ce4a93ee-703c-4c76-9ca5-706825eed4bc -IoCancelEventPortName:HostProcess-58ac0809-838a-4e57-a7f3-a91c3e5e6388 -NonStateChangingEventPortName:HostProcess-aa7ae892-ee7d-4800-9adc-013798a1e273 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:9c726d36-a5bd-4852-ae98-743bc6230548
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
"C:\Program Files (x86)\Miranda IM\miranda32.exe" "C:\Users\remond\AppData\Roaming\Miranda\remoNd"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"D:\Games\Steam\Steam.exe" -silent
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Fraps\fraps64.dat"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
"C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Internet Download Manager\IDMan.exe"
"C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe"
"C:\Program Files (x86)\Winamp\winamp.exe" -Embedding
"C:\Program Files (x86)\Java\jre6\launch4j-tmp\frd.exe" -Xms32m -Xmx128m -jar "C:\FreeRapid\frd.jar"
"C:\totalcmd\TOTALCMD.EXE"
"C:\Users\remond\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\remond\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=4860.047C7900.732951997 /prefetch:3
"C:\Users\remond\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=4860.0050EA80.266208669 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\remond\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_0/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=4860.00599600.1101081358 /prefetch:3
"C:\Users\remond\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\remond\AppData\Local\Google\Chrome\Application\7.0.517.41\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\remond\AppData\Local\Google\Chrome\User Data\Default" --channel=4860.06F7B04C.1871811998 /prefetch:4
"D:\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-461887684-1563192595-1438854977-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-461887684-1563192595-1438854977-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2010-05-26 193968]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-08-10 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-12-08 9642528]
"MSSE"=C:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1448568]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"MirandaIM"=C:\Program Files (x86)\Miranda IM\miranda32.exe [2010-07-01 785503]
"Pando Media Booster"=C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2010-09-14 2969496]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Steam"=d:\games\steam\steam.exe [2010-10-10 1242448]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2010-10-11 14940040]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2009-10-21 106496]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-09-30 98304]
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
[]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-10-27 20:30:46 ----D---- C:\rsit
2010-10-27 20:30:46 ----D---- C:\Program Files\trend micro
2010-10-27 14:47:29 ----D---- C:\Program Files\StrongDC++
2010-10-27 13:15:32 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2010-10-27 13:15:32 ----A---- C:\Windows\system32\msdri.dll
2010-10-27 13:15:31 ----A---- C:\Windows\system32\CPFilters.dll
2010-10-27 13:15:18 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-10-26 21:14:35 ----D---- C:\Users\remond\AppData\Roaming\mkvtoolnix
2010-10-25 23:07:19 ----D---- C:\Program Files (x86)\URUSoft
2010-10-25 23:03:35 ----D---- C:\Program Files\Zrychleni Pocitace
2010-10-25 16:10:05 ----D---- C:\Users\remond\AppData\Roaming\TeamViewer
2010-10-25 16:09:59 ----D---- C:\Program Files (x86)\TeamViewer
2010-10-25 16:07:44 ----D---- C:\Program Files (x86)\MagicISO
2010-10-24 16:44:46 ----D---- C:\Users\remond\AppData\Roaming\ChemTable Software
2010-10-24 16:44:22 ----D---- C:\Program Files (x86)\Reg Organizer
2010-10-24 15:54:19 ----D---- C:\Users\remond\AppData\Roaming\Uniblue
2010-10-24 15:54:00 ----D---- C:\Program Files (x86)\Uniblue
2010-10-24 15:52:55 ----D---- C:\Users\remond\AppData\Roaming\Registry Mechanic
2010-10-24 15:50:42 ----D---- C:\Program Files (x86)\Registry Mechanic
2010-10-24 15:37:46 ----D---- C:\ProgramData\Electronic Arts
2010-10-24 02:10:54 ----D---- C:\ProgramData\ATI
2010-10-24 02:09:25 ----A---- C:\Windows\system32\atiedu64.dll
2010-10-24 02:09:21 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2010-10-24 02:09:19 ----A---- C:\Windows\system32\atimuixx.dll
2010-10-24 02:09:09 ----A---- C:\Windows\system32\atiesrxx.exe
2010-10-24 02:09:08 ----A---- C:\Windows\system32\atiumd6a.dll
2010-10-24 02:09:08 ----A---- C:\Windows\system32\aticaldd64.dll
2010-10-24 02:08:55 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2010-10-24 02:08:48 ----A---- C:\Windows\system32\atiumd64.dll
2010-10-24 02:08:40 ----A---- C:\Windows\SYSWOW64\Oemdspif.dll
2010-10-24 02:08:37 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2010-10-24 02:08:35 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2010-10-24 02:08:24 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2010-10-24 02:08:23 ----A---- C:\Windows\system32\drivers\AtihdW76.sys
2010-10-24 02:08:22 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2010-10-24 02:08:20 ----A---- C:\Windows\system32\ATIODE.exe
2010-10-24 02:08:20 ----A---- C:\Windows\system32\atieclxx.exe
2010-10-24 02:08:19 ----A---- C:\Windows\system32\ATIDEMGX.dll
2010-10-24 02:08:17 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2010-10-24 02:08:14 ----A---- C:\Windows\system32\aticalrt64.dll
2010-10-24 02:08:09 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2010-10-24 02:08:09 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2010-10-24 02:08:01 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2010-10-24 02:08:01 ----A---- C:\Windows\system32\atimpc64.dll
2010-10-24 02:08:01 ----A---- C:\Windows\system32\amdpcom64.dll
2010-10-24 02:08:00 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2010-10-24 02:07:57 ----A---- C:\Windows\system32\atitmm64.dll
2010-10-24 02:07:54 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2010-10-24 02:07:50 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2010-10-24 02:07:47 ----A---- C:\Windows\SYSWOW64\atipdlxx.dll
2010-10-24 02:07:40 ----A---- C:\Windows\system32\atiadlxx.dll
2010-10-24 02:07:38 ----A---- C:\Windows\system32\ATIODCLI.exe
2010-10-24 02:07:36 ----A---- C:\Windows\system32\atig6pxx.dll
2010-10-24 02:07:32 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2010-10-24 02:07:23 ----A---- C:\Windows\system32\atipdl64.dll
2010-10-24 02:07:23 ----A---- C:\Windows\system32\aticalcl64.dll
2010-10-24 02:07:16 ----A---- C:\Windows\system32\atio6axx.dll
2010-10-24 02:07:14 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2010-10-24 02:07:14 ----A---- C:\Windows\system32\atiglpxx.dll
2010-10-24 02:07:11 ----A---- C:\Windows\SYSWOW64\ati2edxx.dll
2010-10-24 02:07:10 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2010-10-24 02:07:10 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2010-10-24 02:07:08 ----A---- C:\Windows\system32\atiapfxx.exe
2010-10-24 02:07:06 ----A---- C:\Windows\system32\atig6txx.dll
2010-10-20 19:38:30 ----D---- C:\Program Files (x86)\GIGABYTE
2010-10-19 21:29:27 ----A---- C:\Windows\etdrv.sys
2010-10-19 21:26:51 ----A---- C:\Windows\GVTDrv64.sys
2010-10-18 22:23:44 ----D---- C:\Program Files (x86)\X-ray Anti-Cheat
2010-10-17 18:24:08 ----A---- C:\Windows\system32\unrar.dll
2010-10-17 18:24:07 ----A---- C:\Windows\system32\ff_vfw.dll
2010-10-17 18:24:04 ----D---- C:\Program Files\KLCP64
2010-10-17 18:19:35 ----A---- C:\Windows\avisplitter.ini
2010-10-17 18:19:32 ----A---- C:\Windows\SYSWOW64\yv12vfw.dll
2010-10-17 18:19:32 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2010-10-17 18:19:32 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2010-10-17 18:19:32 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll.manifest
2010-10-17 18:19:32 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2010-10-17 18:19:27 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2010-10-17 17:37:54 ----D---- C:\Users\remond\AppData\Roaming\QIP
2010-10-16 03:23:29 ----SD---- C:\Program Files (x86)\HLSW
2010-10-16 00:00:32 ----D---- C:\Users\remond\AppData\Roaming\HLSW
2010-10-14 14:12:48 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2010-10-14 14:12:48 ----A---- C:\Windows\system32\t2embed.dll
2010-10-14 14:12:46 ----A---- C:\Windows\SYSWOW64\ole32.dll
2010-10-14 14:12:46 ----A---- C:\Windows\system32\ole32.dll
2010-10-14 14:12:42 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2010-10-14 14:12:42 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-10-14 14:12:39 ----A---- C:\Windows\SYSWOW64\schannel.dll
2010-10-14 14:12:39 ----A---- C:\Windows\system32\schannel.dll
2010-10-14 14:12:38 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2010-10-14 14:12:38 ----A---- C:\Windows\system32\comctl32.dll
2010-10-14 14:12:36 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2010-10-14 14:12:36 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-14 14:12:32 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2010-10-14 14:12:32 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2010-10-14 14:12:30 ----A---- C:\Windows\system32\mshtml.dll
2010-10-14 14:12:29 ----A---- C:\Windows\system32\iertutil.dll
2010-10-14 14:12:29 ----A---- C:\Windows\system32\ieframe.dll
2010-10-14 14:12:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-10-14 14:12:28 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-10-14 14:12:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-10-14 14:12:26 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-10-14 14:12:26 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-10-14 14:12:26 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-10-14 14:12:26 ----A---- C:\Windows\system32\urlmon.dll
2010-10-14 14:12:26 ----A---- C:\Windows\system32\msfeeds.dll
2010-10-14 14:12:26 ----A---- C:\Windows\system32\licmgr10.dll
2010-10-14 14:12:25 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-10-14 14:12:25 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-10-14 14:12:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-10-14 14:12:25 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-10-14 14:12:25 ----A---- C:\Windows\system32\wininet.dll
2010-10-14 14:12:25 ----A---- C:\Windows\system32\mstime.dll
2010-10-14 14:12:25 ----A---- C:\Windows\system32\mshtmled.dll
2010-10-14 14:12:25 ----A---- C:\Windows\system32\ieui.dll
2010-10-14 14:12:25 ----A---- C:\Windows\system32\iepeers.dll
2010-10-14 14:12:25 ----A---- C:\Windows\system32\iedkcs32.dll
2010-10-14 14:12:24 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-10-14 14:12:24 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-10-14 14:12:24 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-10-14 14:12:24 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-10-14 14:12:24 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-10-14 14:12:24 ----A---- C:\Windows\system32\msfeedssync.exe
2010-10-14 14:12:24 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-10-14 14:12:24 ----A---- C:\Windows\system32\jsproxy.dll
2010-10-14 14:12:18 ----A---- C:\Windows\system32\wmp.dll
2010-10-14 14:12:17 ----A---- C:\Windows\SYSWOW64\wmp.dll
2010-10-14 14:12:15 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2010-10-14 14:12:15 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-14 14:12:13 ----A---- C:\Windows\SYSWOW64\sscore.dll
2010-10-14 14:12:13 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-14 14:12:13 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-14 14:12:13 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-14 14:12:13 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-14 14:12:09 ----A---- C:\Windows\system32\win32k.sys
2010-10-13 17:13:15 ----D---- C:\Users\remond\AppData\Roaming\Leadertech
2010-10-10 23:57:27 ----D---- C:\Users\remond\AppData\Roaming\BlackBean
2010-10-10 18:16:30 ----D---- C:\Users\remond\AppData\Roaming\OfficeRecovery
2010-10-09 21:39:37 ----D---- C:\Users\remond\AppData\Roaming\mIRC
2010-10-09 21:39:37 ----D---- C:\Program Files (x86)\mIRC
2010-10-04 19:19:42 ----A---- C:\Windows\SYSWOW64\pbsvc_moh.exe
2010-10-02 23:18:18 ----D---- C:\Users\remond\AppData\Roaming\Azureus
2010-10-01 22:58:44 ----D---- C:\Program Files (x86)\BRS
2010-10-01 22:58:44 ----A---- C:\Windows\SYSWOW64\rapture3d_oal.dll
2010-10-01 22:58:44 ----A---- C:\Windows\SYSWOW64\mkl_blueripple.dll
2010-10-01 17:08:24 ----D---- C:\Users\remond\AppData\Roaming\TS3Client
2010-10-01 17:08:19 ----D---- C:\Program Files\TeamSpeak 3 Client
2010-09-29 13:13:05 ----A---- C:\Windows\system32\drivers\ks.sys
2010-09-29 07:34:53 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-09-29 07:34:53 ----A---- C:\Windows\system32\tzres.dll
======List of files/folders modified in the last 1 months======
2010-10-27 20:45:19 ----D---- C:\Windows\Prefetch
2010-10-27 20:31:20 ----D---- C:\Windows\Temp
2010-10-27 20:30:46 ----RD---- C:\Program Files
2010-10-27 20:28:41 ----D---- C:\Users\remond\AppData\Roaming\Skype
2010-10-27 20:24:25 ----SHD---- C:\Windows\Installer
2010-10-27 20:24:21 ----SHD---- C:\System Volume Information
2010-10-27 20:24:06 ----D---- C:\Users\remond\AppData\Roaming\Winamp
2010-10-27 20:09:20 ----D---- C:\FreeRapid
2010-10-27 19:09:27 ----D---- C:\Windows
2010-10-27 19:06:40 ----RD---- C:\Program Files (x86)
2010-10-27 19:02:18 ----D---- C:\Fraps
2010-10-27 19:02:17 ----D---- C:\Windows\system32\Tasks
2010-10-27 18:59:28 ----D---- C:\Windows\SysWOW64
2010-10-27 18:49:19 ----D---- C:\Users\remond\AppData\Roaming\uTorrent
2010-10-27 18:23:41 ----D---- C:\Windows\Microsoft.NET
2010-10-27 18:23:18 ----RSD---- C:\Windows\assembly
2010-10-27 18:05:35 ----RSD---- C:\Windows\Fonts
2010-10-27 16:29:28 ----D---- C:\Windows\system32\config
2010-10-27 16:19:16 ----D---- C:\Windows\winsxs
2010-10-27 16:19:13 ----D---- C:\Windows\AppPatch
2010-10-27 16:17:54 ----D---- C:\Windows\System32
2010-10-27 16:17:54 ----D---- C:\Windows\ehome
2010-10-27 16:17:03 ----D---- C:\Windows\system32\drivers
2010-10-27 14:45:02 ----D---- C:\Users\remond\AppData\Roaming\Media Player Classic
2010-10-27 13:15:13 ----D---- C:\Windows\system32\catroot2
2010-10-27 13:15:13 ----D---- C:\Windows\system32\catroot
2010-10-25 18:55:45 ----D---- C:\Program Files (x86)\CCleaner
2010-10-25 18:02:13 ----D---- C:\Windows\Minidump
2010-10-25 00:24:12 ----D---- C:\Windows\inf
2010-10-25 00:24:12 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-24 17:38:36 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2010-10-24 17:07:06 ----D---- C:\Windows\Tasks
2010-10-24 16:59:34 ----D---- C:\Program Files (x86)\Common Files
2010-10-24 16:56:11 ----D---- C:\Users\remond\AppData\Roaming\DMCache
2010-10-24 16:56:11 ----D---- C:\Program Files (x86)\Internet Download Manager
2010-10-24 16:34:25 ----SD---- C:\ProgramData\Microsoft
2010-10-24 15:59:49 ----D---- C:\Windows\SYSWOW64\config
2010-10-24 15:57:34 ----D---- C:\Windows\Downloaded Program Files
2010-10-24 15:57:28 ----D---- C:\Program Files\VentriloMIX
2010-10-24 15:55:13 ----AD---- C:\ProgramData\TEMP
2010-10-24 15:50:18 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-10-24 15:50:17 ----D---- C:\Users\remond\AppData\Roaming\Mozilla
2010-10-24 15:37:46 ----HD---- C:\ProgramData
2010-10-24 15:37:39 ----D---- C:\Program Files (x86)\Electronic Arts
2010-10-24 02:10:48 ----D---- C:\Program Files\ATI Technologies
2010-10-24 02:10:33 ----D---- C:\Windows\system32\DriverStore
2010-10-24 02:08:00 ----A---- C:\Windows\system32\aticfx64.dll
2010-10-24 02:07:53 ----A---- C:\Windows\system32\coinst.dll
2010-10-24 02:07:52 ----A---- C:\Windows\system32\atiu9p64.dll
2010-10-24 02:07:23 ----A---- C:\Windows\system32\atidxx64.dll
2010-10-24 02:07:11 ----A---- C:\Windows\system32\atiuxp64.dll
2010-10-24 02:07:04 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2010-10-21 15:58:46 ----D---- C:\Program Files (x86)\Core Temp
2010-10-21 00:12:44 ----D---- C:\Program Files (x86)\TuneUp Utilities 2010
2010-10-20 19:38:30 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-10-19 22:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 22:26:12 ----D---- C:\Windows\SYSWOW64\directx
2010-10-18 21:45:54 ----SD---- C:\Users\remond\AppData\Roaming\Microsoft
2010-10-17 17:56:24 ----D---- C:\Users\remond\AppData\Roaming\Mirillis
2010-10-17 17:56:24 ----D---- C:\ProgramData\Mirillis
2010-10-17 17:30:28 ----RD---- C:\Program Files (x86)\Skype
2010-10-17 17:30:24 ----D---- C:\ProgramData\Skype
2010-10-15 03:15:18 ----D---- C:\Windows\SYSWOW64\migration
2010-10-15 03:15:18 ----D---- C:\Windows\system32\migration
2010-10-15 03:15:18 ----D---- C:\Program Files\Windows Media Player
2010-10-15 03:15:18 ----D---- C:\Program Files\Internet Explorer
2010-10-15 03:15:18 ----D---- C:\Program Files (x86)\Windows Media Player
2010-10-15 03:15:18 ----D---- C:\Program Files (x86)\Internet Explorer
2010-10-14 23:09:38 ----D---- C:\Windows\debug
2010-10-14 20:34:17 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2010-10-14 20:34:17 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2010-10-14 20:34:17 ----A---- C:\Windows\system32\wrap_oal.dll
2010-10-14 20:34:17 ----A---- C:\Windows\system32\OpenAL32.dll
2010-10-14 14:16:21 ----D---- C:\ProgramData\Microsoft Help
2010-10-14 14:09:41 ----A---- C:\Windows\system32\MRT.exe
2010-10-13 15:07:59 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-09 15:31:17 ----D---- C:\Users\remond\AppData\Roaming\IDM
2010-10-04 19:19:42 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2010-10-02 19:59:58 ----D---- C:\ProgramData\Ubisoft
2010-10-02 15:44:51 ----D---- C:\Users\remond\AppData\Roaming\Ubisoft
2010-10-01 23:01:35 ----D---- C:\ProgramData\Codemasters
2010-10-01 18:53:31 ----D---- C:\ProgramData\Blizzard Entertainment
2010-09-30 17:15:00 ----A---- C:\Windows\system32\TURegOpt.exe
2010-09-30 17:09:36 ----A---- C:\Windows\system32\authuitu.dll
2010-09-30 17:09:32 ----A---- C:\Windows\SYSWOW64\authuitu.dll
2010-09-30 17:09:28 ----A---- C:\Windows\system32\uxtuneup.dll
2010-09-30 17:09:20 ----A---- C:\Windows\SYSWOW64\uxtuneup.dll
2010-09-30 04:31:37 ----D---- C:\Windows\rescache
2010-09-30 03:16:11 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-09-30 03:15:18 ----D---- C:\Windows\SYSWOW64\cs-CZ
2010-09-30 03:15:18 ----D---- C:\Windows\system32\cs-CZ
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-23 834544]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 173984]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-07-19 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-07-19 43680]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-10-24 7883264]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-10-24 285696]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-10-24 116240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-12-08 2223392]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 40832]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2009-10-26 75264]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2009-10-26 176640]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-08-20 239616]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [2010-02-25 11856]
S2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
S3 a8t1su2h;a8t1su2h; C:\Windows\system32\drivers\a8t1su2h.sys []
S3 ALSysIO;ALSysIO; C:\Windows\system32\drivers\ALSysIO.sys []
S3 AmdTools64;AMD Special Tools Driver; C:\Windows\system32\DRIVERS\AmdTools64.sys [2008-04-28 47160]
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 atillk64;atillk64; C:\Windows\system32\drivers\atillk64.sys []
S3 ATITool;ATITool Overclocking Utility; C:\Windows\system32\DRIVERS\ATITool64.sys [2006-11-10 30720]
S3 cpuz130;cpuz130; C:\Windows\system32\drivers\cpuz130.sys []
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2010-10-20 25640]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2010-10-21 25640]
S3 GGSAFERDriver;GGSAFER Driver; C:\Windows\system32\drivers\GGSAFERDriver.sys []
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2010-10-20 30528]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 33856]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-10-24 203264]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17424]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2010-10-04 75064]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [2010-09-30 1403200]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-08-25 72704]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-10-22 403240]
S3 SwitchBoard;Adobe SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TuneUp.Defrag;@C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-10-21 607040]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o preventivní kontrolu logu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 119426
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o preventivní kontrolu logu
Log vypadá čistý.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.