Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Mam problem... virus??

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
adus07
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 02 úno 2009 12:41

Mam problem... virus??

#1 Příspěvek od adus07 »

Ahojte, vedeli by ste mi poradit? asi mam nejaky kvalitny virus, zmenilo mi dokonca pozadie v PC :-(
  • Logfile of random's system information tool 1.08 (written by random/random)
    Run by Kamil at 2010-12-03 20:33:01
    Microsoft Windows 7 Home Premium
    System drive C: has 73 GB (61%) free of 119 GB
    Total RAM: 3949 MB (28% free)

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 20:33:03, on 3. 12. 2010
    Platform: Windows 7 (WinNT 6.00.3504)
    MSIE: Internet Explorer v8.00 (8.00.7600.16671)
    Boot mode: Normal

    Running processes:
    C:\Windows\SysWOW64\explorer.exe
    C:\Program Files (x86)\Ares\Ares.exe
    C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
    C:\Program Files (x86)\Skype\Phone\Skype.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files\trend micro\Kamil.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=ppcb
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
    F2 - REG:system.ini: UserInit=userinit.exe
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
    O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
    O3 - Toolbar: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
    O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
    O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
    O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
    O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
    O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
    O4 - HKLM\..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd
    O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
    O4 - HKCU\..\Run: [NVIDIA driver monitor] C:\Users\Public\nvsvc32.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [tcactive] C:\Program Files (x86)\The Cleaner\tcap.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
    O4 - Global Startup: Bluetooth.lnk = ?
    O4 - Global Startup: FancyStart daemon.lnk = ?
    O4 - Global Startup: SRS Premium Sound.lnk = ?
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
    O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
    O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
    O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
    O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
    O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
    O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\hamachi\hamachi-2.exe
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --
    End of file - 12412 bytes

    ======Listing Processes======

    \SystemRoot\System32\smss.exe
    %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
    wininit.exe
    %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
    C:\Windows\system32\services.exe
    winlogon.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\system32\atiesrxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k LocalService
    atieclxx
    C:\Windows\system32\svchost.exe -k NetworkService
    "C:\Windows\system32\FBAgent.exe"
    "C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
    "C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    "C:\Windows\system32\Dwm.exe"
    C:\Windows\Explorer.EXE
    "taskhost.exe"
    "C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
    "C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    D:\hamachi\hamachi-2.exe -s
    "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
    "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
    C:\Windows\system32\svchost.exe -k imgsvc
    "C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\system32\svchost.exe -k bthsvcs
    C:\Windows\system32\SearchIndexer.exe /Embedding
    ATKOSD.exe
    WDC.exe
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    explorer.exe
    "C:\Program Files\Windows Media Player\wmpnetwk.exe"
    "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
    C:\Windows\System32\svchost.exe -k secsvcs
    "C:\Windows\system32\wuauclt.exe"
    C:\Windows\system32\svchost.exe -k SDRSVC
    "C:\Program Files (x86)\Ares\Ares.exe" "C:\Users\Kamil\Downloads\[isoHunt] Lavasoft Ad-Aware 2007 Professional 7.0.2.6.torrent"
    "C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe"
    "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe"
    "C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe" /SILENT
    "C:\Program Files (x86)\Skype\Phone\Skype.exe"
    "taskhost.exe"
    "C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ba66cb71-ccce-4163-8c86-3ac4591e0385 -SystemEventPortName:HostProcess-258e240b-7f80-404e-932f-962e391693b6 -IoCancelEventPortName:HostProcess-c0e0b5d1-bf27-4ae1-86c7-c63d35f5836f -NonStateChangingEventPortName:HostProcess-c7eb742a-7cfe-4b7c-abc8-e7f489c4b8c7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:eb2d3dcf-de0d-433d-a083-b8d28720f88c
    C:\Windows\System32\svchost.exe -k WerSvcGroup
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\system32\sppsvc.exe
    "C:\Windows\system32\NOTEPAD.EXE" C:\rsit\info.txt
    taskmgr.exe /3
    "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
    "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=5276.01298A80.1406814244 /prefetch:3
    "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=5276.011ECD80.1596634846 /prefetch:3 --ignored=" --type=renderer "
    "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=CacheSize/CacheSizeGroup_0/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=5276.069A4600.1422195217 /prefetch:3
    "C:\Users\Kamil\Downloads\RSITx64.exe"
    taskeng.exe {F1614F91-857C-4784-8033-9283F5AE2E28}

    ======Scheduled tasks folder======

    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
    Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-08 68960]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-04-08 346736]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll [2010-04-08 318960]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
    Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-10-18 3908192]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
    BitTorrentBar Toolbar - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll [2010-10-18 3908192]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-08 256112]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
    Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27 1250696]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2010-04-08 761840]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
    Google Dictionary Compression sdch - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2010-04-08 458736]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-04-08 346736]
    {32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-08 256112]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]
    {32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
    {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - BitTorrentBar Toolbar - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll [2010-10-18 3908192]
    {30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-10-18 3908192]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-01-13 635784]
    "ASUS WebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [2009-12-24 1736704]
    "SmartAudio"=C:\Program Files\CONEXANT\SAII\SAIICpl.exe [2009-11-19 307768]
    "egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-08-12 2916584]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "EA Core"=C:\Program Files (x86)\Electronic Arts\EADM\Core.exe -silent []
    "NVIDIA driver monitor"=C:\Users\Public\nvsvc32.exe []
    "msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2008-12-02 3882312]
    "ares"=C:\Program Files (x86)\Ares\Ares.exe [2010-07-10 1015808]
    "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2010-10-11 14940040]
    "tcactive"=C:\Program Files (x86)\The Cleaner\tcap.exe [2010-02-18 2781184]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
    C:\Windows\AsScrPro.exe [2010-04-08 3054136]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
    D:\bitt torrent\BitTorrent.exe [2010-11-17 745848]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
    C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
    D:\daemon\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
    D:\hamachi\hamachi-2-ui.exe [2010-03-30 1820040]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
    D:\hry\gameplay\Steam.exe -silent []

    [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
    "UpdateLBPShortCut"=C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
    "UpdateP2GoShortCut"=C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
    "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-01-22 98304]
    "ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-02-04 7350912]
    "ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2010-01-05 170624]
    "HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
    "Setwallpaper"=c:\programdata\SetWallpaper.cmd []
    "DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2010-09-16 1164584]

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    FancyStart daemon.lnk - C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe
    SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
    "SecurityProviders"=credssp.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "ConsentPromptBehaviorUser"=3
    "EnableUIADesktopToggle"=0
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoActiveDesktop"=1
    "NoActiveDesktopChanges"=1
    "ForceActiveDesktopOn"=0

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    ======File associations======

    .js - edit - C:\Windows\System32\Notepad.exe %1
    .js - open - C:\Windows\System32\WScript.exe "%1" %*

    ======List of files/folders created in the last 1 months======

    2010-12-03 20:31:05 ----D---- C:\rsit
    2010-12-03 20:31:05 ----D---- C:\Program Files\trend micro
    2010-12-03 20:23:10 ----D---- C:\Program Files\CCleaner
    2010-12-03 20:20:27 ----D---- C:\32788R22FWJFW
    2010-12-03 18:27:50 ----D---- C:\ProgramData\Lavasoft
    2010-12-03 18:27:50 ----D---- C:\Program Files (x86)\Lavasoft
    2010-12-03 17:49:19 ----A---- C:\Bug.txt
    2010-12-03 17:49:17 ----A---- C:\Windows\SYSWOW64\cmd.execf
    2010-12-03 17:47:10 ----D---- C:\Users\Kamil\AppData\Roaming\thecleaner
    2010-12-03 17:46:55 ----D---- C:\Program Files (x86)\The Cleaner
    2010-12-03 17:18:27 ----A---- C:\Users\Kamil\AppData\Roaming\jejZTuDsg.exe
    2010-12-03 17:18:20 ----D---- C:\ProgramData\mLcJo04300
    2010-12-01 22:04:50 ----D---- C:\Program Files (x86)\Mozilla Firefox
    2010-12-01 19:00:08 ----D---- C:\Program Files (x86)\Microsoft Works
    2010-12-01 18:59:54 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
    2010-12-01 18:59:25 ----D---- C:\Windows\PCHEALTH
    2010-12-01 18:57:31 ----D---- C:\Program Files\Microsoft Office
    2010-12-01 18:57:27 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
    2010-12-01 18:56:34 ----RHD---- C:\MSOCache
    2010-11-20 00:50:47 ----D---- C:\Program Files (x86)\AGEIA Technologies
    2010-11-20 00:50:46 ----D---- C:\Program Files (x86)\NVIDIA Corporation
    2010-11-20 00:42:51 ----D---- C:\Program Files (x86)\Activision
    2010-11-18 09:17:20 ----D---- C:\Program Files (x86)\Ubisoft
    2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Vbar332.dll
    2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Msrepl35.dll
    2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Msrd2x35.dll
    2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Msjter35.dll
    2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Msjint35.dll
    2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Msjet35.dll
    2010-11-17 20:36:58 ----D---- C:\Program Files (x86)\Virtuosa
    2010-11-17 19:26:01 ----D---- C:\Program Files (x86)\Conduit
    2010-11-17 19:25:58 ----D---- C:\Program Files (x86)\ConduitEngine
    2010-11-17 19:25:55 ----D---- C:\Program Files (x86)\BitTorrentBar
    2010-11-17 19:25:53 ----D---- C:\extensions
    2010-11-17 19:25:18 ----D---- C:\Users\Kamil\AppData\Roaming\BitTorrent
    2010-11-17 19:23:50 ----D---- C:\directory
    2010-11-17 19:03:05 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
    2010-11-17 19:03:05 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
    2010-11-17 19:03:05 ----A---- C:\Windows\system32\XAudio2_7.dll
    2010-11-17 19:03:05 ----A---- C:\Windows\system32\XAPOFX1_5.dll
    2010-11-17 19:03:04 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
    2010-11-17 19:03:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
    2010-11-17 19:03:04 ----A---- C:\Windows\system32\xactengine3_7.dll
    2010-11-17 19:03:04 ----A---- C:\Windows\system32\D3DCompiler_43.dll
    2010-11-17 19:03:03 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
    2010-11-17 19:03:03 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
    2010-11-17 19:03:03 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
    2010-11-17 19:03:03 ----A---- C:\Windows\system32\d3dx11_43.dll
    2010-11-17 19:03:03 ----A---- C:\Windows\system32\d3dx10_43.dll
    2010-11-17 19:03:03 ----A---- C:\Windows\system32\d3dcsx_43.dll
    2010-11-17 19:03:02 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
    2010-11-17 19:03:02 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
    2010-11-17 19:03:02 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
    2010-11-17 19:03:02 ----A---- C:\Windows\system32\XAudio2_6.dll
    2010-11-17 19:03:02 ----A---- C:\Windows\system32\XAPOFX1_4.dll
    2010-11-17 19:03:02 ----A---- C:\Windows\system32\D3DX9_43.dll
    2010-11-17 19:03:01 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
    2010-11-17 19:03:01 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
    2010-11-17 19:03:01 ----A---- C:\Windows\system32\xactengine3_6.dll
    2010-11-17 19:03:01 ----A---- C:\Windows\system32\X3DAudio1_7.dll
    2010-11-17 19:03:00 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
    2010-11-17 19:03:00 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
    2010-11-17 19:03:00 ----A---- C:\Windows\system32\XAudio2_5.dll
    2010-11-17 19:03:00 ----A---- C:\Windows\system32\xactengine3_5.dll
    2010-11-17 19:02:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
    2010-11-17 19:02:59 ----A---- C:\Windows\system32\D3DCompiler_42.dll
    2010-11-17 19:02:58 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
    2010-11-17 19:02:58 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
    2010-11-17 19:02:58 ----A---- C:\Windows\system32\d3dx11_42.dll
    2010-11-17 19:02:58 ----A---- C:\Windows\system32\d3dcsx_42.dll
    2010-11-17 19:02:57 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
    2010-11-17 19:02:57 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
    2010-11-17 19:02:57 ----A---- C:\Windows\system32\D3DX9_42.dll
    2010-11-17 19:02:57 ----A---- C:\Windows\system32\d3dx10_42.dll
    2010-11-17 19:02:56 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
    2010-11-17 19:02:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
    2010-11-17 19:02:56 ----A---- C:\Windows\system32\d3dx10_41.dll
    2010-11-17 19:02:56 ----A---- C:\Windows\system32\D3DCompiler_41.dll
    2010-11-17 19:02:55 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
    2010-11-17 19:02:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
    2010-11-17 19:02:55 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
    2010-11-17 19:02:55 ----A---- C:\Windows\system32\XAudio2_4.dll
    2010-11-17 19:02:55 ----A---- C:\Windows\system32\XAPOFX1_3.dll
    2010-11-17 19:02:55 ----A---- C:\Windows\system32\D3DX9_41.dll
    2010-11-17 19:02:54 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
    2010-11-17 19:02:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
    2010-11-17 19:02:54 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
    2010-11-17 19:02:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
    2010-11-17 19:02:54 ----A---- C:\Windows\system32\xactengine3_4.dll
    2010-11-17 19:02:54 ----A---- C:\Windows\system32\X3DAudio1_6.dll
    2010-11-17 19:02:54 ----A---- C:\Windows\system32\d3dx10_40.dll
    2010-11-17 19:02:54 ----A---- C:\Windows\system32\D3DCompiler_40.dll
    2010-11-17 19:02:53 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
    2010-11-17 19:02:53 ----A---- C:\Windows\system32\D3DX9_40.dll
    2010-11-17 19:02:52 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
    2010-11-17 19:02:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
    2010-11-17 19:02:52 ----A---- C:\Windows\system32\XAudio2_3.dll
    2010-11-17 19:02:52 ----A---- C:\Windows\system32\XAPOFX1_2.dll
    2010-11-17 19:02:51 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
    2010-11-17 19:02:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
    2010-11-17 19:02:51 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
    2010-11-17 19:02:51 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
    2010-11-17 19:02:51 ----A---- C:\Windows\system32\XAudio2_2.dll
    2010-11-17 19:02:51 ----A---- C:\Windows\system32\XAPOFX1_1.dll
    2010-11-17 19:02:51 ----A---- C:\Windows\system32\xactengine3_3.dll
    2010-11-17 19:02:51 ----A---- C:\Windows\system32\X3DAudio1_5.dll
    2010-11-17 19:02:50 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
    2010-11-17 19:02:50 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
    2010-11-17 19:02:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
    2010-11-17 19:02:50 ----A---- C:\Windows\system32\xactengine3_2.dll
    2010-11-17 19:02:50 ----A---- C:\Windows\system32\d3dx10_39.dll
    2010-11-17 19:02:50 ----A---- C:\Windows\system32\D3DCompiler_39.dll
    2010-11-17 19:02:49 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
    2010-11-17 19:02:49 ----A---- C:\Windows\system32\D3DX9_39.dll
    2010-11-17 19:02:47 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
    2010-11-17 19:02:47 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
    2010-11-17 19:02:47 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
    2010-11-17 19:02:47 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
    2010-11-17 19:02:47 ----A---- C:\Windows\system32\XAudio2_1.dll
    2010-11-17 19:02:47 ----A---- C:\Windows\system32\XAPOFX1_0.dll
    2010-11-17 19:02:47 ----A---- C:\Windows\system32\xactengine3_1.dll
    2010-11-17 19:02:47 ----A---- C:\Windows\system32\X3DAudio1_4.dll
    2010-11-17 19:02:46 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
    2010-11-17 19:02:46 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
    2010-11-17 19:02:46 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
    2010-11-17 19:02:46 ----A---- C:\Windows\system32\D3DX9_38.dll
    2010-11-17 19:02:46 ----A---- C:\Windows\system32\d3dx10_38.dll
    2010-11-17 19:02:46 ----A---- C:\Windows\system32\D3DCompiler_38.dll
    2010-11-17 19:02:45 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
    2010-11-17 19:02:45 ----A---- C:\Windows\system32\XAudio2_0.dll
    2010-11-17 19:02:44 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
    2010-11-17 19:02:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
    2010-11-17 19:02:44 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
    2010-11-17 19:02:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
    2010-11-17 19:02:44 ----A---- C:\Windows\system32\xactengine3_0.dll
    2010-11-17 19:02:44 ----A---- C:\Windows\system32\X3DAudio1_3.dll
    2010-11-17 19:02:44 ----A---- C:\Windows\system32\d3dx10_37.dll
    2010-11-17 19:02:44 ----A---- C:\Windows\system32\D3DCompiler_37.dll
    2010-11-17 19:02:43 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
    2010-11-17 19:02:43 ----A---- C:\Windows\system32\D3DX9_37.dll
    2010-11-17 19:02:42 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
    2010-11-17 19:02:42 ----A---- C:\Windows\system32\xactengine2_10.dll
    2010-11-17 19:02:41 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
    2010-11-17 19:02:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
    2010-11-17 19:02:41 ----A---- C:\Windows\system32\d3dx10_36.dll
    2010-11-17 19:02:41 ----A---- C:\Windows\system32\D3DCompiler_36.dll
    2010-11-17 19:02:40 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
    2010-11-17 19:02:40 ----A---- C:\Windows\system32\d3dx9_36.dll
    2010-11-17 19:02:39 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
    2010-11-17 19:02:39 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
    2010-11-17 19:02:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
    2010-11-17 19:02:39 ----A---- C:\Windows\system32\xactengine2_9.dll
    2010-11-17 19:02:39 ----A---- C:\Windows\system32\d3dx10_35.dll
    2010-11-17 19:02:39 ----A---- C:\Windows\system32\D3DCompiler_35.dll
    2010-11-17 19:02:38 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
    2010-11-17 19:02:38 ----A---- C:\Windows\system32\d3dx9_35.dll
    2010-11-17 19:02:37 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
    2010-11-17 19:02:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
    2010-11-17 19:02:37 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
    2010-11-17 19:02:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
    2010-11-17 19:02:37 ----A---- C:\Windows\system32\xactengine2_8.dll
    2010-11-17 19:02:37 ----A---- C:\Windows\system32\X3DAudio1_2.dll
    2010-11-17 19:02:37 ----A---- C:\Windows\system32\d3dx10_34.dll
    2010-11-17 19:02:37 ----A---- C:\Windows\system32\D3DCompiler_34.dll
    2010-11-17 19:02:36 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
    2010-11-17 19:02:36 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
    2010-11-17 19:02:36 ----A---- C:\Windows\system32\xinput1_3.dll
    2010-11-17 19:02:36 ----A---- C:\Windows\system32\d3dx9_34.dll
    2010-11-17 19:02:35 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
    2010-11-17 19:02:35 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
    2010-11-17 19:02:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
    2010-11-17 19:02:35 ----A---- C:\Windows\system32\xactengine2_7.dll
    2010-11-17 19:02:35 ----A---- C:\Windows\system32\d3dx10_33.dll
    2010-11-17 19:02:35 ----A---- C:\Windows\system32\D3DCompiler_33.dll
    2010-11-17 19:02:34 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
    2010-11-17 19:02:34 ----A---- C:\Windows\system32\d3dx9_33.dll
    2010-11-17 19:02:33 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
    2010-11-17 19:02:33 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
    2010-11-17 19:02:33 ----A---- C:\Windows\system32\xactengine2_6.dll
    2010-11-17 19:02:33 ----A---- C:\Windows\system32\xactengine2_5.dll
    2010-11-17 19:02:32 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
    2010-11-17 19:02:32 ----A---- C:\Windows\system32\d3dx10.dll
    2010-11-17 19:02:31 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
    2010-11-17 19:02:31 ----A---- C:\Windows\system32\d3dx9_32.dll
    2010-11-17 19:02:30 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
    2010-11-17 19:02:30 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
    2010-11-17 19:02:30 ----A---- C:\Windows\system32\xactengine2_4.dll
    2010-11-17 19:02:30 ----A---- C:\Windows\system32\x3daudio1_1.dll
    2010-11-17 19:02:29 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
    2010-11-17 19:02:29 ----A---- C:\Windows\system32\d3dx9_31.dll
    2010-11-17 19:02:28 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
    2010-11-17 19:02:28 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
    2010-11-17 19:02:28 ----A---- C:\Windows\system32\xinput1_2.dll
    2010-11-17 19:02:28 ----A---- C:\Windows\system32\xactengine2_3.dll
    2010-11-17 19:02:27 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
    2010-11-17 19:02:27 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
    2010-11-17 19:02:27 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
    2010-11-17 19:02:27 ----A---- C:\Windows\system32\xinput1_1.dll
    2010-11-17 19:02:27 ----A---- C:\Windows\system32\xactengine2_2.dll
    2010-11-17 19:02:27 ----A---- C:\Windows\system32\xactengine2_1.dll
    2010-11-17 19:02:22 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
    2010-11-17 19:02:22 ----A---- C:\Windows\system32\d3dx9_30.dll
    2010-11-17 19:02:21 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
    2010-11-17 19:02:21 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
    2010-11-17 19:02:21 ----A---- C:\Windows\system32\xactengine2_0.dll
    2010-11-17 19:02:21 ----A---- C:\Windows\system32\x3daudio1_0.dll
    2010-11-17 19:02:20 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
    2010-11-17 19:02:20 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
    2010-11-17 19:02:20 ----A---- C:\Windows\system32\d3dx9_29.dll
    2010-11-17 19:02:20 ----A---- C:\Windows\system32\d3dx9_28.dll
    2010-11-17 19:02:19 ----A---- C:\Windows\system32\d3dx9_27.dll
    2010-11-17 19:02:18 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
    2010-11-17 19:02:18 ----A---- C:\Windows\system32\d3dx9_26.dll
    2010-11-17 19:02:17 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
    2010-11-17 19:02:17 ----A---- C:\Windows\system32\d3dx9_25.dll
    2010-11-17 19:02:16 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
    2010-11-17 19:02:16 ----A---- C:\Windows\system32\d3dx9_24.dll
    2010-11-04 18:34:04 ----D---- C:\Users\Kamil\AppData\Roaming\My The Lord of the Rings, The Rise of the Witch-king Files
    2010-11-04 18:32:51 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll

    ======List of files/folders modified in the last 1 months======

    2010-12-03 20:33:02 ----D---- C:\Windows\Temp
    2010-12-03 20:31:05 ----RD---- C:\Program Files
    2010-12-03 20:29:07 ----SHD---- C:\System Volume Information
    2010-12-03 20:28:07 ----D---- C:\Users\Kamil\AppData\Roaming\Skype
    2010-12-03 20:25:53 ----D---- C:\Windows\debug
    2010-12-03 20:25:53 ----D---- C:\Windows
    2010-12-03 18:57:39 ----D---- C:\Users\Kamil\AppData\Roaming\skypePM
    2010-12-03 18:55:19 ----SHD---- C:\Windows\Installer
    2010-12-03 18:55:03 ----D---- C:\Windows\SYSWOW64\drivers
    2010-12-03 18:55:03 ----D---- C:\Windows\SysWOW64
    2010-12-03 18:55:03 ----D---- C:\Windows\system32\drivers
    2010-12-03 18:55:03 ----D---- C:\Windows\System32
    2010-12-03 18:27:50 ----RD---- C:\Program Files (x86)
    2010-12-03 18:27:50 ----HD---- C:\ProgramData
    2010-12-03 17:49:13 ----D---- C:\Windows\inf
    2010-12-03 17:49:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
    2010-12-03 17:46:19 ----D---- C:\Windows\system32\config
    2010-12-03 17:27:39 ----D---- C:\Windows\Prefetch
    2010-12-03 17:20:42 ----D---- C:\Windows\system32\Tasks
    2010-12-03 17:20:39 ----A---- C:\Windows\SYSWOW64\log.txt
    2010-12-03 11:38:44 ----D---- C:\ProgramData\Microsoft Help
    2010-12-03 11:35:45 ----RSD---- C:\Windows\assembly
    2010-12-02 10:05:28 ----D---- C:\Windows\winsxs
    2010-12-02 09:50:15 ----A---- C:\Windows\win.ini
    2010-12-01 22:32:25 ----D---- C:\Users\Kamil\AppData\Roaming\vlc
    2010-12-01 22:25:38 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
    2010-12-01 22:09:16 ----A---- C:\Windows\system32\AutoRunFilter.ini
    2010-12-01 19:00:01 ----D---- C:\Program Files (x86)\MSBuild
    2010-12-01 18:59:56 ----D---- C:\Program Files (x86)\Microsoft Office
    2010-12-01 18:59:54 ----D---- C:\Program Files (x86)\Common Files
    2010-12-01 18:59:50 ----D---- C:\Windows\ShellNew
    2010-12-01 18:59:31 ----RSD---- C:\Windows\Fonts
    2010-12-01 18:59:25 ----SD---- C:\ProgramData\Microsoft
    2010-12-01 18:59:25 ----D---- C:\Program Files (x86)\Microsoft.NET
    2010-12-01 18:58:35 ----D---- C:\Program Files\Common Files\Microsoft Shared
    2010-11-29 13:04:31 ----A---- C:\Windows\system32\acovcnt.exe
    2010-11-26 19:50:56 ----D---- C:\Windows\Microsoft.NET
    2010-11-24 08:58:05 ----D---- C:\Program Files\Internet Explorer
    2010-11-24 08:58:05 ----D---- C:\Program Files (x86)\Internet Explorer
    2010-11-24 08:54:20 ----D---- C:\Windows\SYSWOW64\en-US
    2010-11-24 08:54:20 ----D---- C:\Windows\system32\en-US
    2010-11-23 19:57:11 ----D---- C:\Windows\system32\catroot
    2010-11-22 11:31:47 ----D---- C:\Windows\system32\wdi
    2010-11-19 15:13:54 ----A---- C:\Windows\system32\ServiceFilter.ini
    2010-11-18 17:44:06 ----D---- C:\Windows\Logs
    2010-11-17 21:43:04 ----D---- C:\ProgramData\Norton
    2010-11-17 21:43:01 ----D---- C:\Windows\Tasks
    2010-11-15 18:10:56 ----SD---- C:\Users\Kamil\AppData\Roaming\Microsoft
    2010-11-14 10:39:28 ----D---- C:\Users\Kamil\AppData\Roaming\My Battle for Middle-earth(tm) II Files
    2010-11-11 09:40:53 ----A---- C:\Windows\system32\MRT.exe
    2010-11-08 10:55:01 ----D---- C:\Users\Kamil\AppData\Roaming\DivX
    2010-11-05 08:08:53 ----D---- C:\Windows\rescache
    2010-11-04 18:25:14 ----D---- C:\ProgramData\CyberLink

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-12-17 538136]
    R0 lullaby;lullaby; C:\Windows\system32\DRIVERS\lullaby.sys [2009-06-18 15928]
    R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
    R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
    R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-09-18 834544]
    R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
    R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
    R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
    R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 168544]
    R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 126320]
    R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-07-14 145920]
    R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-01-22 6233088]
    R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-01-22 161280]
    R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
    R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-09-30 121872]
    R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
    R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
    R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
    R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-01 98344]
    R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2009-07-01 132648]
    R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
    R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-01 21160]
    R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2009-10-30 704512]
    R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-01-18 128512]
    R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 33856]
    R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
    R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2009-08-18 143472]
    R3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits); C:\Windows\system32\DRIVERS\JME.sys [2009-12-04 107120]
    R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
    R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
    R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
    R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-08-20 1800192]
    S3 amenytc4;amenytc4; C:\Windows\system32\drivers\amenytc4.sys []
    S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-01-22 6233088]
    S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
    S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2008-12-08 61792]
    S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 109056]
    S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
    S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
    S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe [2008-07-07 611664]
    R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-12-08 379520]
    R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-01-22 202752]
    R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
    R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2009-12-15 96896]
    R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-02 864032]
    R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-08-12 810144]
    R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; D:\hamachi\hamachi-2.exe [2010-03-30 1823112]
    R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-10-01 262144]
    R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
    R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2314240]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-08 135664]
    S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
    S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-08-12 42360]
    S3 fsssvc;Bezpečnosť rodiny v službe Windows Live; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
    S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-04-08 182768]
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
    S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-11-18 403240]
    S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-18 1255736]

    -----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119428
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Mam problem... virus??

#2 Příspěvek od Rudy »

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

adus07
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 02 úno 2009 12:41

Re: Mam problem... virus??

#3 Příspěvek od adus07 »

Kód: Vybrat vše

Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Verzia databázy: 5240

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

3. 12. 2010 21:21:12
mbam-log-2010-12-03 (21-21-05).txt

Typ kontroly: Úplná kontrola (C:\|D:\|E:\|F:\|G:\|)
Objektov kontrolovaných: 242164
Uplynutý čas: 21 min, 2 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 2
Infikované súbory: 4

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
c:\directory\cybergate (Trojan.PWS) -> No action taken.
c:\directory\cybergate\windows32x (Trojan.PWS) -> No action taken.

Infikované súbory:
c:\Users\Kamil\Desktop\my shared folder\Phx_data\Res\EmuCfg.exe (Trojan.Agent) -> No action taken.
c:\Users\Kamil\Desktop\my shared folder\Phx_data\Res\GCFMgr.exe (Trojan.Agent) -> No action taken.
c:\Users\Kamil\Desktop\my shared folder\Phx_data\Res\RICO.exe (Backdoor.Bot) -> No action taken.
c:\Users\Kamil\Desktop\my shared folder\Phx_data\Res\ss.exe (Backdoor.Bot) -> No action taken.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119428
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Mam problem... virus??

#4 Příspěvek od Rudy »

Vše, co MBAM našel, smažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět