Logfile of random's system information tool 1.08 (written by random/random)
Run by feryking at 2010-12-17 10:33:36
Microsoft Windows 7 Ultimate
System drive C: has 19 GB (19%) free of 100 GB
Total RAM: 4094 MB (64% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:33:44, on 17.12.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files (x86)\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files\trend micro\feryking.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SRSHDAudioLab] "C:\Program Files\SRS Labs\SRS HD Audio Lab\HDAL.exe" auto
O4 - HKCU\..\Run: [UIWatcher] C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\UIWatcher.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgfws9.exe
O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8716 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
"C:\Program Files (x86)\AVG\AVG9\avgchsva.exe"
"C:\Program Files (x86)\AVG\AVG9\avgrsa.exe"
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
/pipeName=3d022a3a-a6fd-479b-8788-e79362f00671 /coreSdkOptions=30 /logConfFile="C:\ProgramData\avg9\temp\ba2bcef3-863a-4948-b751-02e396e76395-200-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG9\" /tempPath="C:\ProgramData\avg9\temp\"
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe" AVGIDSAgent
"taskhost.exe"
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe" /noui
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\brs.exe"
"C:\Program Files (x86)\AVG\AVG9\avgtray.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe"
\??\C:\Windows\system32\conhost.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe"
"C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe"
"C:\Program Files (x86)\AVG\AVG9\avgfws9.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 3008
"C:\Program Files (x86)\AVG\AVG9\avgemc.exe"
"C:\Program Files (x86)\AVG\AVG9\avgam.exe"
"C:\Program Files (x86)\AVG\AVG9\avgnsa.exe"
/pipeName=b00dd8bd-6eae-477e-a360-97db839dcdb8 /coreSdkOptions=0 /binaryPath="C:\Program Files (x86)\AVG\AVG9\"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-0920b55e-0f84-429b-9766-a9fbe9594e63 -SystemEventPortName:HostProcess-c3ef495c-4275-42ee-8593-909d68d03bf7 -IoCancelEventPortName:HostProcess-0f7c8d04-511c-4634-b5b4-f20cda147e26 -NonStateChangingEventPortName:HostProcess-d0c7765d-c0a0-4c97-b700-796e2cac6ffd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d18fa711-d3aa-4c21-bf07-e8da3fa85e84
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
/pipeName=d557ee45-9d69-4d05-903a-0f0a5998833f /coreSdkOptions=18 /logConfFile="C:\ProgramData\avg9\temp\e0df63c1-9544-436c-9017-99ffbcaa9efe-ca4-oopp.tmp" /loggerName=AVG.NS.Core /tempPath="C:\ProgramData\avg9\temp\"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe -Embedding
"C:\Program Files (x86)\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:3660 CREDAT:71937
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:3660 CREDAT:6408
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2732774832-2811552041-2680219165-100112_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2732774832-2811552041-2680219165-100112 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe14_ Global\UsGthrCtrlFltPipeMssGthrPipe14 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\feryking\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll [2010-12-16 2334560]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-11-25 371888]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg64.dll [2010-11-25 322104]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG9\avgssie.dll [2010-12-16 1623392]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-11-25 278192]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll [2010-11-25 814648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-11-25 371888]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-11-25 278192]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 190536]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-30 11660904]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe []
"SRSHDAudioLab"=C:\Program Files\SRS Labs\SRS HD Audio Lab\HDAL.exe auto []
"UIWatcher"=C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\UIWatcher.exe []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ATICustomerCare"=C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [2010-05-04 311296]
"NBKeyScan"=C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe []
"WinampAgent"=C:\Program Files (x86)\Winamp\winampa.exe []
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2010-02-02 87336]
"BDRegion"=C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2010-08-26 75048]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-11-25 336384]
"AVG9_TRAY"=C:\PROGRA~2\AVG\AVG9\avgtray.exe [2010-12-16 2069344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="avgrssta.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-12-17 10:33:36 ----D---- C:\rsit
2010-12-17 10:33:36 ----D---- C:\Program Files\trend micro
2010-12-17 10:23:07 ----D---- C:\Program Files\Zrychleni Pocitace
2010-12-17 07:17:41 ----A---- C:\Windows\system32\mshtml.dll
2010-12-17 07:17:41 ----A---- C:\Windows\system32\iertutil.dll
2010-12-17 07:17:40 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-12-17 07:17:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-12-17 07:17:40 ----A---- C:\Windows\system32\mstime.dll
2010-12-17 07:17:40 ----A---- C:\Windows\system32\ieframe.dll
2010-12-17 07:17:39 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-12-17 07:17:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-12-17 07:17:39 ----A---- C:\Windows\system32\wininet.dll
2010-12-17 07:17:38 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-12-17 07:17:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-12-17 07:17:38 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-12-17 07:17:38 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-12-17 07:17:38 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-12-17 07:17:38 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-12-17 07:17:38 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-12-17 07:17:38 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-12-17 07:17:38 ----A---- C:\Windows\system32\urlmon.dll
2010-12-17 07:17:38 ----A---- C:\Windows\system32\mshtmled.dll
2010-12-17 07:17:38 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-12-17 07:17:38 ----A---- C:\Windows\system32\msfeeds.dll
2010-12-17 07:17:38 ----A---- C:\Windows\system32\ieui.dll
2010-12-17 07:17:38 ----A---- C:\Windows\system32\iepeers.dll
2010-12-17 07:17:38 ----A---- C:\Windows\system32\iedkcs32.dll
2010-12-17 07:17:37 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-12-17 07:17:37 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-12-17 07:17:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-12-17 07:17:37 ----A---- C:\Windows\system32\msfeedssync.exe
2010-12-17 07:17:37 ----A---- C:\Windows\system32\licmgr10.dll
2010-12-17 07:17:37 ----A---- C:\Windows\system32\jsproxy.dll
2010-12-16 17:49:25 ----D---- C:\Program Files (x86)\DVDFab 8
2010-12-16 15:41:54 ----D---- C:\ProgramData\SRSLabs
2010-12-16 15:41:17 ----D---- C:\Program Files (x86)\SRSLabs
2010-12-16 15:28:53 ----HD---- C:\ProgramData\{397E5558-CD6D-49C8-96AA-D3972167F879}
2010-12-16 15:28:52 ----D---- C:\Program Files (x86)\SurroundCAST
2010-12-16 15:08:21 ----A---- C:\Windows\HideWin.exe
2010-12-16 15:07:21 ----D---- C:\Windows\SYSWOW64\RTCOM
2010-12-16 15:07:21 ----D---- C:\Program Files\Realtek
2010-12-16 15:06:57 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\WavesGUILib.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\SRSWOW64.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\SRSTSX64.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\SRSTSH64.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\SRSHP64.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\SFSS_APO.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\SFNHK64.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\SFCOM64.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\SFAPO64.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\RtPgEx64.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2010-12-16 15:06:57 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RtkCfg64.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RtkAPO64.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RtkApi64.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RTEEP64A.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RTEEL64A.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RTEEG64A.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RTEED64A.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RTCOM64.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RP3DHT64.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RP3DAA64.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\RCoInst64.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\R4EEP64A.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\R4EEL64A.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\R4EEG64A.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\R4EED64A.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\R4EEA64A.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2010-12-16 15:06:56 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2010-12-16 15:06:55 ----D---- C:\Program Files (x86)\Realtek
2010-12-16 15:06:55 ----A---- C:\Windows\system32\FMAPO64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\AERTAR64.dll
2010-12-16 15:06:55 ----A---- C:\Windows\system32\AERTAC64.dll
2010-12-16 15:06:52 ----A---- C:\Windows\RtlExUpd.dll
2010-12-16 14:17:59 ----D---- C:\Users\feryking\AppData\Roaming\Ashampoo
2010-12-16 13:46:58 ----SHD---- C:\Config.Msi
2010-12-16 09:49:10 ----A---- C:\Windows\SYSWOW64\Remover.ini
2010-12-16 09:49:10 ----A---- C:\Windows\SYSWOW64\Remove.exe
2010-12-16 09:47:48 ----D---- C:\Windows\Downloaded Installations
2010-12-16 09:24:45 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2010-12-16 09:24:45 ----A---- C:\Windows\SYSWOW64\mfc71.dll
2010-12-16 09:24:42 ----D---- C:\Program Files (x86)\KYE
2010-12-16 08:53:32 ----A---- C:\Windows\system32\avgrssta.dll
2010-12-16 08:51:44 ----D---- C:\Users\feryking\AppData\Roaming\AVG9
2010-12-16 08:47:29 ----D---- C:\Windows\SYSWOW64\drivers\avg
2010-12-16 08:46:40 ----HD---- C:\$AVG
2010-12-16 08:46:25 ----D---- C:\Windows\system32\drivers\Avg
2010-12-16 08:46:20 ----A---- C:\Windows\system32\drivers\AVGIDSwa.sys
2010-12-16 08:46:19 ----A---- C:\Windows\system32\drivers\avgrkx64.sys
2010-12-16 08:46:18 ----A---- C:\Windows\system32\drivers\avgtdia.sys
2010-12-16 08:46:17 ----A---- C:\Windows\system32\drivers\avgldx64.sys
2010-12-16 08:46:16 ----A---- C:\Windows\system32\drivers\avgmfx64.sys
2010-12-16 08:45:48 ----D---- C:\ProgramData\avg9
2010-12-15 16:45:18 ----A---- C:\Windows\SYSWOW64\webio.dll
2010-12-15 16:45:18 ----A---- C:\Windows\system32\webio.dll
2010-12-15 16:45:17 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2010-12-15 16:45:17 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2010-12-15 16:45:17 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2010-12-15 16:45:17 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2010-12-15 16:45:17 ----A---- C:\Windows\system32\wmicmiplugin.dll
2010-12-15 16:45:17 ----A---- C:\Windows\system32\taskschd.dll
2010-12-15 16:45:17 ----A---- C:\Windows\system32\taskeng.exe
2010-12-15 16:45:17 ----A---- C:\Windows\system32\taskcomp.dll
2010-12-15 16:45:17 ----A---- C:\Windows\system32\schtasks.exe
2010-12-15 16:45:17 ----A---- C:\Windows\system32\schedsvc.dll
2010-12-15 16:45:16 ----A---- C:\Windows\system32\win32k.sys
2010-12-15 16:45:10 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-12-15 16:45:10 ----A---- C:\Windows\system32\tzres.dll
2010-12-15 16:45:06 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2010-12-15 16:45:06 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2010-12-15 16:45:06 ----A---- C:\Windows\system32\atmlib.dll
2010-12-15 16:45:06 ----A---- C:\Windows\system32\atmfd.dll
2010-12-15 16:44:26 ----A---- C:\Windows\system32\consent.exe
2010-12-15 07:44:42 ----D---- C:\Program Files (x86)\Let's fuck
2010-12-14 11:21:12 ----D---- C:\ProgramData\ATI
2010-12-14 11:20:15 ----A---- C:\Windows\system32\drivers\amdiox64.sys
2010-12-14 11:17:29 ----D---- C:\AMD
2010-12-14 08:55:13 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2010-12-13 21:09:21 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-12-11 22:14:57 ----D---- C:\Users\feryking\AppData\Roaming\CyberLink
2010-12-11 22:14:50 ----D---- C:\ProgramData\CyberLink
2010-12-11 22:13:36 ----D---- C:\Program Files (x86)\CyberLink
2010-12-11 22:13:36 ----A---- C:\Windows\SYSWOW64\msxml3a.dll
2010-12-11 22:13:24 ----D---- C:\ProgramData\Temp
2010-12-11 22:01:49 ----A---- C:\Windows\SYSWOW64\unrar.dll
2010-12-11 22:01:49 ----A---- C:\Windows\avisplitter.ini
2010-12-11 22:01:48 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2010-12-11 22:01:48 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2010-12-11 22:01:48 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2010-12-11 22:01:46 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2010-12-11 20:52:57 ----D---- C:\ProgramData\Futuremark
2010-12-11 20:51:54 ----RA---- C:\Windows\system32\drivers\Entech64.sys
2010-12-11 20:51:54 ----D---- C:\Windows\SYSWOW64\Futuremark
2010-12-11 20:50:43 ----D---- C:\Program Files (x86)\Futuremark
2010-12-11 20:50:42 ----D---- C:\Windows\45235788142C44BE8A4DDDE9A84492E5.TMP
2010-12-11 20:49:14 ----D---- C:\Users\feryking\AppData\Roaming\InstallShield
2010-12-11 20:35:50 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2010-12-11 20:35:50 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2010-12-11 20:35:50 ----A---- C:\Windows\system32\WMVDECOD.DLL
2010-12-11 20:35:50 ----A---- C:\Windows\system32\mfreadwrite.dll
2010-12-11 20:35:50 ----A---- C:\Windows\system32\mfps.dll
2010-12-11 20:35:49 ----A---- C:\Windows\SYSWOW64\mf.dll
2010-12-11 20:35:49 ----A---- C:\Windows\system32\mf.dll
2010-12-11 20:35:28 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2010-12-11 20:35:28 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2010-12-11 20:35:28 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2010-12-11 20:35:28 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2010-12-11 20:35:28 ----A---- C:\Windows\system32\FntCache.dll
2010-12-11 20:35:28 ----A---- C:\Windows\system32\DWrite.dll
2010-12-11 20:35:28 ----A---- C:\Windows\system32\d3d10warp.dll
2010-12-11 20:35:28 ----A---- C:\Windows\system32\d3d10_1core.dll
2010-12-11 20:35:28 ----A---- C:\Windows\system32\d2d1.dll
2010-12-11 20:35:09 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2010-12-11 20:35:09 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2010-12-11 20:35:09 ----A---- C:\Windows\system32\XpsRasterService.dll
2010-12-11 20:35:09 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2010-12-11 20:34:39 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2010-12-11 20:34:39 ----A---- C:\Windows\system32\ExplorerFrame.dll
2010-12-11 20:34:03 ----D---- C:\Program Files (x86)\Feedback Tool
2010-12-11 20:18:28 ----D---- C:\ProgramData\McAfee
2010-12-11 19:09:49 ----D---- C:\PerfLogs
2010-12-11 19:04:35 ----A---- C:\Windows\SYSWOW64\DfSdkBt.exe
2010-12-11 18:55:20 ----D---- C:\ProgramData\Ashampoo
2010-12-10 17:29:16 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-12-10 17:07:11 ----D---- C:\Program Files (x86)\Mafia II
2010-12-10 13:02:34 ----D---- C:\ProgramData\Driver Whiz
2010-12-10 12:58:22 ----D---- C:\ProgramData\Easy Driver Pro
2010-12-10 11:37:43 ----D---- C:\Users\feryking\AppData\Roaming\Media Player Classic
2010-12-10 10:45:05 ----D---- C:\Program Files (x86)\AC3Filter
2010-12-10 10:07:08 ----HD---- C:\Program Files (x86)\Temp
2010-12-10 09:24:55 ----D---- C:\Users\feryking\AppData\Roaming\COWON
2010-12-10 07:47:19 ----A---- C:\Windows\SYSWOW64\yv12vfw.dll
2010-12-10 07:47:19 ----A---- C:\Windows\SYSWOW64\x264vfw.dll
2010-12-10 07:47:19 ----A---- C:\Windows\SYSWOW64\vp7vfw.dll
2010-12-10 07:47:19 ----A---- C:\Windows\SYSWOW64\vp6vfw.dll
2010-12-10 07:47:19 ----A---- C:\Windows\SYSWOW64\i420vfw.dll
2010-12-10 07:47:19 ----A---- C:\Windows\SYSWOW64\huffyuv.dll
2010-12-10 07:47:18 ----A---- C:\Windows\SYSWOW64\rmoc3260.dll
2010-12-10 07:47:18 ----A---- C:\Windows\SYSWOW64\pndx5032.dll
2010-12-10 07:47:18 ----A---- C:\Windows\SYSWOW64\pndx5016.dll
2010-12-10 07:47:18 ----A---- C:\Windows\SYSWOW64\pncrt.dll
2010-12-10 07:47:17 ----D---- C:\Users\feryking\AppData\Roaming\Apple Computer
2010-12-10 07:47:15 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll.manifest
2010-12-10 07:47:14 ----D---- C:\Program Files (x86)\CS Software
2010-12-09 18:28:49 ----D---- C:\ProgramData\FLEXnet
2010-12-09 17:46:43 ----D---- C:\Users\feryking\AppData\Roaming\BSplayer PRO
2010-12-09 17:46:42 ----D---- C:\Program Files (x86)\Webteh
2010-12-09 17:18:15 ----D---- C:\ProgramData\Win7codecs
2010-12-08 08:16:31 ----D---- C:\ProgramData\Electronic Arts
2010-12-08 08:16:31 ----D---- C:\ProgramData\EA Core
2010-12-08 08:06:22 ----D---- C:\Program Files (x86)\Electronic Arts
2010-12-08 07:49:51 ----D---- C:\ProgramData\Solidshield
2010-11-26 05:20:20 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2010-11-26 04:19:32 ----A---- C:\Windows\system32\atio6axx.dll
2010-11-26 04:02:08 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2010-11-26 03:58:22 ----A---- C:\Windows\system32\atiapfxx.exe
2010-11-26 03:54:58 ----A---- C:\Windows\system32\ATIDEMGX.dll
2010-11-26 03:54:48 ----A---- C:\Windows\system32\atieclxx.exe
2010-11-26 03:54:12 ----A---- C:\Windows\system32\atiesrxx.exe
2010-11-26 03:53:00 ----A---- C:\Windows\system32\atitmm64.dll
2010-11-26 03:52:42 ----A---- C:\Windows\system32\atipdl64.dll
2010-11-26 03:52:36 ----A---- C:\Windows\SYSWOW64\atipdlxx.dll
2010-11-26 03:52:26 ----A---- C:\Windows\SYSWOW64\Oemdspif.dll
2010-11-26 03:52:20 ----A---- C:\Windows\system32\atimuixx.dll
2010-11-26 03:52:16 ----A---- C:\Windows\system32\atiedu64.dll
2010-11-26 03:52:10 ----A---- C:\Windows\SYSWOW64\ati2edxx.dll
2010-11-26 03:30:20 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2010-11-26 03:30:20 ----A---- C:\Windows\system32\aticalrt64.dll
2010-11-26 03:30:18 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2010-11-26 03:30:10 ----A---- C:\Windows\system32\aticalcl64.dll
2010-11-26 03:30:08 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2010-11-26 03:29:58 ----A---- C:\Windows\system32\aticaldd64.dll
2010-11-26 03:29:52 ----A---- C:\Windows\system32\atiumd6a.dll
2010-11-26 03:28:44 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2010-11-26 03:24:06 ----A---- C:\Windows\system32\atiumd64.dll
2010-11-26 03:22:26 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2010-11-26 03:17:28 ----A---- C:\Windows\system32\atiadlxx.dll
2010-11-26 03:17:20 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2010-11-26 03:17:08 ----A---- C:\Windows\system32\atig6pxx.dll
2010-11-26 03:17:04 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2010-11-26 03:17:04 ----A---- C:\Windows\system32\atiglpxx.dll
2010-11-26 03:17:00 ----A---- C:\Windows\system32\atig6txx.dll
2010-11-26 03:16:54 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2010-11-26 03:16:46 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2010-11-26 03:15:42 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2010-11-26 03:15:00 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2010-11-26 03:09:18 ----A---- C:\Windows\system32\atimpc64.dll
2010-11-26 03:09:18 ----A---- C:\Windows\system32\amdpcom64.dll
2010-11-26 03:09:12 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2010-11-26 03:09:12 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2010-11-25 15:55:25 ----D---- C:\Users\feryking\AppData\Roaming\Google
2010-11-25 15:27:20 ----D---- C:\Program Files\Google
2010-11-25 15:27:14 ----D---- C:\ProgramData\Google
2010-11-25 15:27:14 ----D---- C:\Program Files (x86)\Google
2010-11-25 15:27:00 ----D---- C:\Windows\SYSWOW64\Adobe
======List of files/folders modified in the last 1 months======
2010-12-17 10:33:44 ----D---- C:\Windows\Prefetch
2010-12-17 10:33:40 ----D---- C:\Windows\Temp
2010-12-17 10:33:36 ----RD---- C:\Program Files
2010-12-17 09:45:56 ----D---- C:\Windows\SysWOW64
2010-12-17 09:45:35 ----D---- C:\Windows\Minidump
2010-12-17 09:45:31 ----D---- C:\Windows
2010-12-17 07:39:23 ----D---- C:\Windows\system32\config
2010-12-17 07:39:20 ----D---- C:\Windows\winsxs
2010-12-17 07:39:08 ----D---- C:\Windows\system32\catroot2
2010-12-17 07:39:07 ----D---- C:\Windows\system32\catroot
2010-12-17 07:24:44 ----D---- C:\Windows\SYSWOW64\migration
2010-12-17 07:24:44 ----D---- C:\Windows\system32\migration
2010-12-17 07:24:44 ----D---- C:\Windows\System32
2010-12-17 07:24:44 ----D---- C:\Program Files\Internet Explorer
2010-12-17 07:24:44 ----D---- C:\Program Files (x86)\Internet Explorer
2010-12-17 07:17:48 ----SHD---- C:\System Volume Information
2010-12-17 07:06:52 ----D---- C:\Windows\SYSWOW64\cs-CZ
2010-12-17 07:06:51 ----D---- C:\Windows\SYSWOW64\en-US
2010-12-17 07:06:51 ----D---- C:\Windows\system32\en-US
2010-12-17 07:06:51 ----D---- C:\Windows\system32\cs-CZ
2010-12-17 07:06:51 ----D---- C:\Windows\PolicyDefinitions
2010-12-16 18:58:00 ----D---- C:\Users\feryking\AppData\Roaming\uTorrent
2010-12-16 17:50:37 ----RD---- C:\Program Files (x86)
2010-12-16 16:53:49 ----D---- C:\Users\feryking\AppData\Roaming\ICQ
2010-12-16 15:41:54 ----HD---- C:\ProgramData
2010-12-16 15:41:18 ----SHD---- C:\Windows\Installer
2010-12-16 15:41:17 ----D---- C:\Program Files (x86)\Common Files
2010-12-16 15:36:53 ----D---- C:\Windows\Tasks
2010-12-16 15:36:50 ----D---- C:\Windows\system32\Tasks
2010-12-16 15:15:07 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-12-16 15:15:06 ----D---- C:\Windows\inf
2010-12-16 15:14:58 ----D---- C:\Windows\system32\DriverStore
2010-12-16 15:07:25 ----D---- C:\Windows\system32\drivers
2010-12-16 14:43:47 ----A---- C:\Windows\SYSWOW64\MsiExec.exe.log
2010-12-16 14:43:32 ----RSD---- C:\Windows\assembly
2010-12-16 14:43:30 ----D---- C:\ProgramData\Nero
2010-12-16 10:00:28 ----D---- C:\Windows\twain_32
2010-12-16 10:00:28 ----D---- C:\Windows\SYSWOW64\drivers
2010-12-16 08:47:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-12-16 08:45:48 ----D---- C:\Program Files (x86)\AVG
2010-12-16 08:45:04 ----SD---- C:\Users\feryking\AppData\Roaming\Microsoft
2010-12-16 08:41:00 ----D---- C:\ProgramData\AVG10
2010-12-16 07:18:59 ----D---- C:\Program Files (x86)\Activision
2010-12-15 18:47:47 ----D---- C:\Windows\rescache
2010-12-15 16:45:46 ----A---- C:\Windows\system32\MRT.exe
2010-12-15 16:45:40 ----D---- C:\Program Files\Windows Mail
2010-12-15 16:45:40 ----D---- C:\Program Files (x86)\Windows Mail
2010-12-14 11:30:13 ----D---- C:\Windows\LiveKernelReports
2010-12-14 11:21:09 ----D---- C:\Program Files (x86)\ATI Technologies
2010-12-14 11:20:56 ----D---- C:\Program Files\ATI Technologies
2010-12-14 08:55:09 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2010-12-14 08:54:56 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-12-13 21:09:23 ----SD---- C:\ProgramData\Microsoft
2010-12-11 20:33:40 ----D---- C:\Windows\Logs
2010-12-11 20:27:40 ----D---- C:\Windows\Downloaded Program Files
2010-12-11 19:09:48 ----D---- C:\Program Files SCi Games
2010-12-11 15:24:08 ----D---- C:\Program Files (x86)\uTorrent
2010-12-11 13:01:20 ----D---- C:\Program Files (x86)\EA Games
2010-12-11 13:00:34 ----D---- C:\Program Files (x86)\Codemasters
2010-12-11 12:23:21 ----D---- C:\ProgramData\Codemasters
2010-12-09 18:46:07 ----D---- C:\Program Files\Common Files
2010-12-09 18:45:22 ----D---- C:\Windows\system32\appmgmt
2010-11-26 03:58:12 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2010-11-26 03:57:08 ----A---- C:\Windows\system32\aticfx64.dll
2010-11-26 03:49:04 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2010-11-26 03:40:14 ----A---- C:\Windows\system32\atidxx64.dll
2010-11-26 03:24:38 ----A---- C:\Windows\system32\coinst.dll
2010-11-26 03:16:04 ----A---- C:\Windows\system32\atiuxp64.dll
2010-11-26 03:15:58 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2010-11-26 03:15:52 ----A---- C:\Windows\system32\atiu9p64.dll
2010-11-21 19:33:26 ----D---- C:\Windows\system32\wfp
2010-11-21 19:33:25 ----D---- C:\Windows\AppCompat
2010-11-21 19:33:20 ----D---- C:\Windows\registration
2010-11-21 19:33:19 ----D---- C:\Windows\system32\wbem
2010-11-21 17:31:43 ----D---- C:\Windows\system32\LogFiles
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSErHrw7a;AVG9IDSErHr; C:\Windows\System32\Drivers\AVGIDSwa.sys [2010-12-16 27216]
R0 AvgRkx64;avgrkx64.sys; C:\Windows\System32\Drivers\avgrkx64.sys [2010-12-16 56008]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-10-22 834544]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2010-12-16 29976]
R1 AvgLdx64;AVG AVI Loader Driver x64; C:\Windows\System32\Drivers\avgldx64.sys [2010-12-16 269904]
R1 AvgMfx64;AVG On-access Scanner Minifilter Driver x64; C:\Windows\System32\Drivers\avgmfx64.sys [2010-12-16 35536]
R1 AvgTdiA;AVG Network Redirector x64; C:\Windows\System32\Drivers\avgtdia.sys [2010-12-16 317520]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/12/11 22:14:49]; \??\C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-08-26 146928]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-11-26 8120320]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-11-26 289792]
R3 AVGIDSDriverw7a;AVG9IDSDriver; \??\C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSDriver.sys [2010-12-16 132688]
R3 AVGIDSFilterw7a;AVG9IDSFilter; \??\C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSFilter.sys [2010-12-16 35920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-30 2647528]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 344680]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-27 26440]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2010-04-27 36936]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-27 16200]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 77512]
S3 a2gst1xd;a2gst1xd; C:\Windows\system32\drivers\a2gst1xd.sys []
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-11-26 8120320]
S3 ENTECH64;ENTECH64; \??\C:\Windows\system32\DRIVERS\ENTECH64.sys [2008-04-22 12744]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena\plugins\UI\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-10-26 33344]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 SRS_HDAL_Service;HD Audio Lab; C:\Windows\system32\drivers\SRS_HDAL_amd64.sys [2010-07-02 525040]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-11-26 203776]
R2 AMD Reservation Manager;AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
R2 avg9emc;AVG E-mail Scanner; C:\Program Files (x86)\AVG\AVG9\avgemc.exe [2010-12-16 921952]
R2 avg9wd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe [2010-12-16 308136]
R2 avgfws9;AVG Firewall; C:\Program Files (x86)\AVG\AVG9\avgfws9.exe [2010-12-16 2331544]
R2 AVGIDSAgent;AVG9IDSAgent; C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2010-12-16 5897808]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2010-10-22 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2010-10-22 218496]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-25 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-11-25 182768]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-10-22 1255736]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosim o preventivni kontrolu. Dekuji predem
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Prosim o preventivni kontrolu. Dekuji predem
Dik. To jsem chtel slyset. Hezky vecer!