Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Máte problém s virem? Vložte sem log z FRST nebo RSIT.
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST
[návod zde] nebo RSIT
[návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte
Pravidlo o zamykání témat . Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
adus07
Návštěvník
Příspěvky: 41 Registrován: 02 úno 2009 12:41
#1
Příspěvek
od adus07 » 03 pro 2010 20:38
Ahojte, vedeli by ste mi poradit? asi mam nejaky kvalitny virus, zmenilo mi dokonca pozadie v PC
Logfile of random's system information tool 1.08 (written by random/random)
Run by Kamil at 2010-12-03 20:33:01
Microsoft Windows 7 Home Premium
System drive C: has 73 GB (61%) free of 119 GB
Total RAM: 3949 MB (28% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:33:03, on 3. 12. 2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal
Running processes:
C:\Windows\SysWOW64\explorer.exe
C:\Program Files (x86)\Ares\Ares.exe
C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Kamil.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=ppcb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [NVIDIA driver monitor] C:\Users\Public\nvsvc32.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [tcactive] C:\Program Files (x86)\The Cleaner\tcap.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12412 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
D:\hamachi\hamachi-2.exe -s
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\SearchIndexer.exe /Embedding
ATKOSD.exe
WDC.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
explorer.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Ares\Ares.exe" "C:\Users\Kamil\Downloads\[isoHunt] Lavasoft Ad-Aware 2007 Professional 7.0.2.6.torrent"
"C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe"
"C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe" /SILENT
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"taskhost.exe"
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ba66cb71-ccce-4163-8c86-3ac4591e0385 -SystemEventPortName:HostProcess-258e240b-7f80-404e-932f-962e391693b6 -IoCancelEventPortName:HostProcess-c0e0b5d1-bf27-4ae1-86c7-c63d35f5836f -NonStateChangingEventPortName:HostProcess-c7eb742a-7cfe-4b7c-abc8-e7f489c4b8c7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:eb2d3dcf-de0d-433d-a083-b8d28720f88c
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\NOTEPAD.EXE" C:\rsit\info.txt
taskmgr.exe /3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=5276.01298A80.1406814244 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=5276.011ECD80.1596634846 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=CacheSize/CacheSizeGroup_0/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=5276.069A4600.1422195217 /prefetch:3
"C:\Users\Kamil\Downloads\RSITx64.exe"
taskeng.exe {F1614F91-857C-4784-8033-9283F5AE2E28}
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-08 68960]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-04-08 346736]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll [2010-04-08 318960]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-10-18 3908192]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
BitTorrentBar Toolbar - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll [2010-10-18 3908192]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-08 256112]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27 1250696]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2010-04-08 761840]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2010-04-08 458736]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-04-08 346736]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-08 256112]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - BitTorrentBar Toolbar - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll [2010-10-18 3908192]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-10-18 3908192]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-01-13 635784]
"ASUS WebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [2009-12-24 1736704]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SAIICpl.exe [2009-11-19 307768]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-08-12 2916584]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EA Core"=C:\Program Files (x86)\Electronic Arts\EADM\Core.exe -silent []
"NVIDIA driver monitor"=C:\Users\Public\nvsvc32.exe []
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2008-12-02 3882312]
"ares"=C:\Program Files (x86)\Ares\Ares.exe [2010-07-10 1015808]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2010-10-11 14940040]
"tcactive"=C:\Program Files (x86)\The Cleaner\tcap.exe [2010-02-18 2781184]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2010-04-08 3054136]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
D:\bitt torrent\BitTorrent.exe [2010-11-17 745848]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
D:\daemon\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
D:\hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
D:\hry\gameplay\Steam.exe -silent []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"UpdateLBPShortCut"=C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"UpdateP2GoShortCut"=C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-01-22 98304]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-02-04 7350912]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2010-01-05 170624]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"Setwallpaper"=c:\programdata\SetWallpaper.cmd []
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2010-09-16 1164584]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
FancyStart daemon.lnk - C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe
SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-12-03 20:31:05 ----D---- C:\rsit
2010-12-03 20:31:05 ----D---- C:\Program Files\trend micro
2010-12-03 20:23:10 ----D---- C:\Program Files\CCleaner
2010-12-03 20:20:27 ----D---- C:\32788R22FWJFW
2010-12-03 18:27:50 ----D---- C:\ProgramData\Lavasoft
2010-12-03 18:27:50 ----D---- C:\Program Files (x86)\Lavasoft
2010-12-03 17:49:19 ----A---- C:\Bug.txt
2010-12-03 17:49:17 ----A---- C:\Windows\SYSWOW64\cmd.execf
2010-12-03 17:47:10 ----D---- C:\Users\Kamil\AppData\Roaming\thecleaner
2010-12-03 17:46:55 ----D---- C:\Program Files (x86)\The Cleaner
2010-12-03 17:18:27 ----A---- C:\Users\Kamil\AppData\Roaming\jejZTuDsg.exe
2010-12-03 17:18:20 ----D---- C:\ProgramData\mLcJo04300
2010-12-01 22:04:50 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-12-01 19:00:08 ----D---- C:\Program Files (x86)\Microsoft Works
2010-12-01 18:59:54 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-12-01 18:59:25 ----D---- C:\Windows\PCHEALTH
2010-12-01 18:57:31 ----D---- C:\Program Files\Microsoft Office
2010-12-01 18:57:27 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2010-12-01 18:56:34 ----RHD---- C:\MSOCache
2010-11-20 00:50:47 ----D---- C:\Program Files (x86)\AGEIA Technologies
2010-11-20 00:50:46 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-11-20 00:42:51 ----D---- C:\Program Files (x86)\Activision
2010-11-18 09:17:20 ----D---- C:\Program Files (x86)\Ubisoft
2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Vbar332.dll
2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Msrepl35.dll
2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Msrd2x35.dll
2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Msjter35.dll
2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Msjint35.dll
2010-11-17 20:37:00 ----A---- C:\Windows\SYSWOW64\Msjet35.dll
2010-11-17 20:36:58 ----D---- C:\Program Files (x86)\Virtuosa
2010-11-17 19:26:01 ----D---- C:\Program Files (x86)\Conduit
2010-11-17 19:25:58 ----D---- C:\Program Files (x86)\ConduitEngine
2010-11-17 19:25:55 ----D---- C:\Program Files (x86)\BitTorrentBar
2010-11-17 19:25:53 ----D---- C:\extensions
2010-11-17 19:25:18 ----D---- C:\Users\Kamil\AppData\Roaming\BitTorrent
2010-11-17 19:23:50 ----D---- C:\directory
2010-11-17 19:03:05 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-11-17 19:03:05 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-11-17 19:03:05 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-11-17 19:03:05 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-11-17 19:03:04 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-11-17 19:03:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-11-17 19:03:04 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-11-17 19:03:04 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-11-17 19:03:03 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-11-17 19:03:03 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-11-17 19:03:03 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-11-17 19:03:03 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-11-17 19:03:03 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-11-17 19:03:03 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-11-17 19:03:02 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-11-17 19:03:02 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-11-17 19:03:02 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-11-17 19:03:02 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-11-17 19:03:02 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-11-17 19:03:02 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-11-17 19:03:01 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-11-17 19:03:01 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-11-17 19:03:01 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-11-17 19:03:01 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-11-17 19:03:00 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2010-11-17 19:03:00 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-11-17 19:03:00 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-11-17 19:03:00 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-11-17 19:02:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-11-17 19:02:59 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-11-17 19:02:58 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-11-17 19:02:58 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-11-17 19:02:58 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-11-17 19:02:58 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-11-17 19:02:57 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-11-17 19:02:57 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2010-11-17 19:02:57 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-11-17 19:02:57 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-11-17 19:02:56 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-11-17 19:02:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-11-17 19:02:56 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-11-17 19:02:56 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-11-17 19:02:55 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-11-17 19:02:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-11-17 19:02:55 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-11-17 19:02:55 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-11-17 19:02:55 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-11-17 19:02:55 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-11-17 19:02:54 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-11-17 19:02:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-11-17 19:02:54 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-11-17 19:02:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-11-17 19:02:54 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-11-17 19:02:54 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-11-17 19:02:54 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-11-17 19:02:54 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-11-17 19:02:53 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-11-17 19:02:53 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-11-17 19:02:52 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-11-17 19:02:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-11-17 19:02:52 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-11-17 19:02:52 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-11-17 19:02:51 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-11-17 19:02:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-11-17 19:02:51 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-11-17 19:02:51 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-11-17 19:02:51 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-11-17 19:02:51 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-11-17 19:02:51 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-11-17 19:02:51 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-11-17 19:02:50 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-11-17 19:02:50 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-11-17 19:02:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-11-17 19:02:50 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-11-17 19:02:50 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-11-17 19:02:50 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-11-17 19:02:49 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-11-17 19:02:49 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-11-17 19:02:47 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-11-17 19:02:47 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-11-17 19:02:47 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-11-17 19:02:47 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-11-17 19:02:47 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-11-17 19:02:47 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-11-17 19:02:47 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-11-17 19:02:47 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-11-17 19:02:46 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-11-17 19:02:46 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-11-17 19:02:46 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-11-17 19:02:46 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-11-17 19:02:46 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-11-17 19:02:46 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-11-17 19:02:45 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-11-17 19:02:45 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-11-17 19:02:44 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-11-17 19:02:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-11-17 19:02:44 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-11-17 19:02:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-11-17 19:02:44 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-11-17 19:02:44 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-11-17 19:02:44 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-11-17 19:02:44 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-11-17 19:02:43 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-11-17 19:02:43 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-11-17 19:02:42 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-11-17 19:02:42 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-11-17 19:02:41 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-11-17 19:02:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-11-17 19:02:41 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-11-17 19:02:41 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-11-17 19:02:40 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-11-17 19:02:40 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-11-17 19:02:39 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-11-17 19:02:39 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-11-17 19:02:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-11-17 19:02:39 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-11-17 19:02:39 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-11-17 19:02:39 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-11-17 19:02:38 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-11-17 19:02:38 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-11-17 19:02:37 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-11-17 19:02:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-11-17 19:02:37 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-11-17 19:02:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-11-17 19:02:37 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-11-17 19:02:37 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-11-17 19:02:37 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-11-17 19:02:37 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-11-17 19:02:36 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-11-17 19:02:36 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-11-17 19:02:36 ----A---- C:\Windows\system32\xinput1_3.dll
2010-11-17 19:02:36 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-11-17 19:02:35 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-11-17 19:02:35 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-11-17 19:02:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-11-17 19:02:35 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-11-17 19:02:35 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-11-17 19:02:35 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-11-17 19:02:34 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-11-17 19:02:34 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-11-17 19:02:33 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-11-17 19:02:33 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-11-17 19:02:33 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-11-17 19:02:33 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-11-17 19:02:32 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-11-17 19:02:32 ----A---- C:\Windows\system32\d3dx10.dll
2010-11-17 19:02:31 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-11-17 19:02:31 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-11-17 19:02:30 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-11-17 19:02:30 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-11-17 19:02:30 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-11-17 19:02:30 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-11-17 19:02:29 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-11-17 19:02:29 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-11-17 19:02:28 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-11-17 19:02:28 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-11-17 19:02:28 ----A---- C:\Windows\system32\xinput1_2.dll
2010-11-17 19:02:28 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-11-17 19:02:27 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2010-11-17 19:02:27 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2010-11-17 19:02:27 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2010-11-17 19:02:27 ----A---- C:\Windows\system32\xinput1_1.dll
2010-11-17 19:02:27 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-11-17 19:02:27 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-11-17 19:02:22 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-11-17 19:02:22 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-11-17 19:02:21 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2010-11-17 19:02:21 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2010-11-17 19:02:21 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-11-17 19:02:21 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-11-17 19:02:20 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2010-11-17 19:02:20 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2010-11-17 19:02:20 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-11-17 19:02:20 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-11-17 19:02:19 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-11-17 19:02:18 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2010-11-17 19:02:18 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-11-17 19:02:17 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2010-11-17 19:02:17 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-11-17 19:02:16 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2010-11-17 19:02:16 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-11-04 18:34:04 ----D---- C:\Users\Kamil\AppData\Roaming\My The Lord of the Rings, The Rise of the Witch-king Files
2010-11-04 18:32:51 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
======List of files/folders modified in the last 1 months======
2010-12-03 20:33:02 ----D---- C:\Windows\Temp
2010-12-03 20:31:05 ----RD---- C:\Program Files
2010-12-03 20:29:07 ----SHD---- C:\System Volume Information
2010-12-03 20:28:07 ----D---- C:\Users\Kamil\AppData\Roaming\Skype
2010-12-03 20:25:53 ----D---- C:\Windows\debug
2010-12-03 20:25:53 ----D---- C:\Windows
2010-12-03 18:57:39 ----D---- C:\Users\Kamil\AppData\Roaming\skypePM
2010-12-03 18:55:19 ----SHD---- C:\Windows\Installer
2010-12-03 18:55:03 ----D---- C:\Windows\SYSWOW64\drivers
2010-12-03 18:55:03 ----D---- C:\Windows\SysWOW64
2010-12-03 18:55:03 ----D---- C:\Windows\system32\drivers
2010-12-03 18:55:03 ----D---- C:\Windows\System32
2010-12-03 18:27:50 ----RD---- C:\Program Files (x86)
2010-12-03 18:27:50 ----HD---- C:\ProgramData
2010-12-03 17:49:13 ----D---- C:\Windows\inf
2010-12-03 17:49:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-12-03 17:46:19 ----D---- C:\Windows\system32\config
2010-12-03 17:27:39 ----D---- C:\Windows\Prefetch
2010-12-03 17:20:42 ----D---- C:\Windows\system32\Tasks
2010-12-03 17:20:39 ----A---- C:\Windows\SYSWOW64\log.txt
2010-12-03 11:38:44 ----D---- C:\ProgramData\Microsoft Help
2010-12-03 11:35:45 ----RSD---- C:\Windows\assembly
2010-12-02 10:05:28 ----D---- C:\Windows\winsxs
2010-12-02 09:50:15 ----A---- C:\Windows\win.ini
2010-12-01 22:32:25 ----D---- C:\Users\Kamil\AppData\Roaming\vlc
2010-12-01 22:25:38 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-12-01 22:09:16 ----A---- C:\Windows\system32\AutoRunFilter.ini
2010-12-01 19:00:01 ----D---- C:\Program Files (x86)\MSBuild
2010-12-01 18:59:56 ----D---- C:\Program Files (x86)\Microsoft Office
2010-12-01 18:59:54 ----D---- C:\Program Files (x86)\Common Files
2010-12-01 18:59:50 ----D---- C:\Windows\ShellNew
2010-12-01 18:59:31 ----RSD---- C:\Windows\Fonts
2010-12-01 18:59:25 ----SD---- C:\ProgramData\Microsoft
2010-12-01 18:59:25 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-12-01 18:58:35 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-11-29 13:04:31 ----A---- C:\Windows\system32\acovcnt.exe
2010-11-26 19:50:56 ----D---- C:\Windows\Microsoft.NET
2010-11-24 08:58:05 ----D---- C:\Program Files\Internet Explorer
2010-11-24 08:58:05 ----D---- C:\Program Files (x86)\Internet Explorer
2010-11-24 08:54:20 ----D---- C:\Windows\SYSWOW64\en-US
2010-11-24 08:54:20 ----D---- C:\Windows\system32\en-US
2010-11-23 19:57:11 ----D---- C:\Windows\system32\catroot
2010-11-22 11:31:47 ----D---- C:\Windows\system32\wdi
2010-11-19 15:13:54 ----A---- C:\Windows\system32\ServiceFilter.ini
2010-11-18 17:44:06 ----D---- C:\Windows\Logs
2010-11-17 21:43:04 ----D---- C:\ProgramData\Norton
2010-11-17 21:43:01 ----D---- C:\Windows\Tasks
2010-11-15 18:10:56 ----SD---- C:\Users\Kamil\AppData\Roaming\Microsoft
2010-11-14 10:39:28 ----D---- C:\Users\Kamil\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2010-11-11 09:40:53 ----A---- C:\Windows\system32\MRT.exe
2010-11-08 10:55:01 ----D---- C:\Users\Kamil\AppData\Roaming\DivX
2010-11-05 08:08:53 ----D---- C:\Windows\rescache
2010-11-04 18:25:14 ----D---- C:\ProgramData\CyberLink
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-12-17 538136]
R0 lullaby;lullaby; C:\Windows\system32\DRIVERS\lullaby.sys [2009-06-18 15928]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-09-18 834544]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 168544]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 126320]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-07-14 145920]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-01-22 6233088]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-01-22 161280]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-09-30 121872]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-01 98344]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2009-07-01 132648]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-01 21160]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2009-10-30 704512]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-01-18 128512]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 33856]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2009-08-18 143472]
R3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits); C:\Windows\system32\DRIVERS\JME.sys [2009-12-04 107120]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-08-20 1800192]
S3 amenytc4;amenytc4; C:\Windows\system32\drivers\amenytc4.sys []
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-01-22 6233088]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2008-12-08 61792]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 109056]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe [2008-07-07 611664]
R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-12-08 379520]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-01-22 202752]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2009-12-15 96896]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-02 864032]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-08-12 810144]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; D:\hamachi\hamachi-2.exe [2010-03-30 1823112]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-10-01 262144]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2314240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-08 135664]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-08-12 42360]
S3 fsssvc;Bezpečnosť rodiny v službe Windows Live; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-04-08 182768]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-11-18 403240]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-18 1255736]
-----------------EOF-----------------
Rudy
Site Admin
Příspěvky: 119428 Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
#2
Příspěvek
od Rudy » 03 pro 2010 20:54
Udělejte kompletní sken MBAM:
http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum :
https://platba.viry.cz/payment/ .
Navštivte:
e-mail:
rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
adus07
Návštěvník
Příspěvky: 41 Registrován: 02 úno 2009 12:41
#3
Příspěvek
od adus07 » 03 pro 2010 21:22
Kód: Vybrat vše
Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org
Verzia databázy: 5240
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
3. 12. 2010 21:21:12
mbam-log-2010-12-03 (21-21-05).txt
Typ kontroly: Úplná kontrola (C:\|D:\|E:\|F:\|G:\|)
Objektov kontrolovaných: 242164
Uplynutý čas: 21 min, 2 sek
Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 2
Infikované súbory: 4
Infikované služby pamäte:
(Škodlivé položky neboli zistené)
Infikované moduly pamäte:
(Škodlivé položky neboli zistené)
Infikované registračné kľúče:
(Škodlivé položky neboli zistené)
Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)
Infikované položky registračných dát:
(Škodlivé položky neboli zistené)
Infikované priečinky:
c:\directory\cybergate (Trojan.PWS) -> No action taken.
c:\directory\cybergate\windows32x (Trojan.PWS) -> No action taken.
Infikované súbory:
c:\Users\Kamil\Desktop\my shared folder\Phx_data\Res\EmuCfg.exe (Trojan.Agent) -> No action taken.
c:\Users\Kamil\Desktop\my shared folder\Phx_data\Res\GCFMgr.exe (Trojan.Agent) -> No action taken.
c:\Users\Kamil\Desktop\my shared folder\Phx_data\Res\RICO.exe (Backdoor.Bot) -> No action taken.
c:\Users\Kamil\Desktop\my shared folder\Phx_data\Res\ss.exe (Backdoor.Bot) -> No action taken.
Rudy
Site Admin
Příspěvky: 119428 Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
#4
Příspěvek
od Rudy » 03 pro 2010 21:52
Vše, co MBAM našel, smažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum :
https://platba.viry.cz/payment/ .
Navštivte:
e-mail:
rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.