USB Windows 7 x64

Zpráva

Lord-Diablo · #1 Příspěvek od **Lord-Diablo** » 20 pro 2010 11:07

Dobry den,

chtel bych se zeptat uz drive jsem mel problem v tom, ze kdyz jsem vlozil treba flashku do USB tak nacitani bylo silene dlouha a pc byl jako zaseknuty a to trvalo treba i 15min.

Tak jsem vse smazal, nainstaloval jsem Win7 x64 a vse jelo jak ma. Neco jsem dal do usb a nacteni trvalo ani ne 1 minutu. Ale nyni mam problem znovu, tak jestli mi to nedela nejaky vor a nebo nejaky zmetek v PC. Treba se s tim uz nekdo setkal,

diky za pomoc.
L-D

#2 Příspěvek od **motji** » 20 pro 2010 11:34

Hezké poledne

Vložte log ze Rsitu, viz můj podpis

Lord-Diablo · #3 Příspěvek od **Lord-Diablo** » 20 pro 2010 11:44

Dekuji za rychlou odpoved

log je v priloze, byl moc dlouhy na to, abych ho mohl vlozit jako prispevek.

Dekuji za pomoc

#4 Příspěvek od **motji** » 20 pro 2010 12:10

Rozdělte ho do více příspěvků, je to pro mě přehlednější

Lord-Diablo · #5 Příspěvek od **Lord-Diablo** » 20 pro 2010 12:16

info.txt logfile of random's system information tool 1.08 2010-12-20 11:40:12

======Uninstall list======

-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_activeX.exe
-->MsiExec /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}
1-More WebCam-->"C:\Program Files (x86)\1-More WebCam\uninstall.exe"
64 Bit HP CIO Components Installer-->MsiExec.exe /I{C788B026-20BD-4E96-B698-533F1D6C5013}
Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak-->msiexec /I {AC76BA86-1029-4770-7760-000000000004}
Adobe Flash Player 10 ActiveX-->MsiExec.exe /X{B7B3E9B3-FB14-4927-894B-E9124509AF5A}
Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_Plugin.exe -maintain plugin
Adobe Flash Player 9 ActiveX-->MsiExec.exe /X{8E9DB7EF-5DD3-499E-BA2A-A1F3153A4DF8}
aTube Catcher-->C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\uninstall.exe
avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup
Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)-->C:\PROGRA~1\DIFX\F4092DA208C2C970\dpinst.exe /u C:\Windows\system32\DRVSTORE\pccsmcfdx6_8A3BAB842294F8D9255C3CF2A3B1CECAEEB8EA7E\pccsmcfdx64.inf
Call of Duty: Black Ops - Multiplayer-->"C:\Program Files (x86)\Steam\steam.exe" steam://uninstall/42710
Call of Duty: Black Ops-->"C:\Program Files (x86)\Steam\steam.exe" steam://uninstall/42700
Camtasia Studio 6-->MsiExec.exe /I{49253DE2-FC99-4BE3-99A4-DAB01A8E6088}
CoffeeCup Web Form Builder-->C:\PROGRA~2\COFFEE~1\COFFEE~1\UNWISE.EXE C:\PROGRA~2\COFFEE~1\COFFEE~1\INSTALL.LOG
Components Setup-->C:\Program Files (x86)\InstallShield Installation Information\{31187E06-E131-4709-9285-7D105D77AA89}\setup.exe -runfromtemp -l0x0009
Conduit Engine-->C:\PROGRA~2\CONDUI~1\ConduitEngineUninstall.exe
DAEMON Tools Toolbar-->C:\Program Files (x86)\DAEMON Tools Toolbar\uninst.exe
DivX-Setup-->C:\ProgramData\DivX\Setup\DivXSetup.exe /uninstall /bundleGroupId divx.com
DVD Flick-->"C:\Program Files (x86)\DVD Flick\unins000.exe"
Feed Viewer for Windows SideShow-->MsiExec.exe /X{E4DA04B6-3EC4-4DFD-A14E-44959EF36D5B}
FM Screen Capture Codec (Remove Only)-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\Windows\INF\fmcodec.inf
FormatFactory 2.60-->C:\Program Files (x86)\FreeTime\FormatFactory\uninst.exe
HP Customer Participation Program 14.0-->C:\Program Files (x86)\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat -forcereboot
HP Imaging Device Functions 14.0-->C:\Program Files (x86)\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart B010 All-In-One Driver Software 14.0 Rel. 7-->C:\Program Files (x86)\HP\Digital Imaging\{81830FEF-866C-4DC0-9435-B6287B1EDD8A}\setup\hpzscr40.exe -datfile hposcr51.dat -onestop -forcereboot
HP Smart Web Printing 4.60-->C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat
HP Solution Center 14.0-->C:\Program Files (x86)\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot
HP Update-->MsiExec.exe /X{74DC0593-6BC6-4001-AD5F-D810AFB68D86}
ICQ Toolbar-->C:\Program Files (x86)\ICQ6Toolbar\ICQUnToolbar.exe
ICQ7.2-->"C:\Program Files (x86)\InstallShield Installation Information\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}\ICQ7.exe" -runfromtemp -l0x0009 -removeonly
IM Magician-->C:\Program Files (x86)\InstallShield Installation Information\{2969CB97-DF91-4752-BE47-8A73AE810E6C}\setup.exe -runfromtemp -l0x0009 -removeonly
Java(TM) 6 Update 22-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216022FF}
linguatec Voice Reader-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{93293322-B694-4270-B7FE-DDE1A681ACCA}\setup.exe" -l0x7 -removeonly
ManyCam 2.6.25 (remove only)-->"C:\Program Files (x86)\ManyCam\uninstall.exe"
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /x64 /lcid 1029 /parameterfolder ClientLP
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->MsiExec.exe /X{790E02A1-145A-3843-8C13-A4F41C9B48B7}
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
Microsoft Default Manager-->MsiExec.exe /X{61BEA823-ECAF-49F1-8378-A59B3B8AD247}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Czech) 2007-->MsiExec.exe /X{90120000-002A-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{A147FD6E-32F2-4009-BDC9-8B4E2B1B21EB}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{071c9b48-7c32-4621-a0ac-3f809523288f}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Mozilla Firefox (3.6.12)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
MSN Toolbar Platform-->MsiExec.exe /I{58E65E96-6649-4CBE-9382-35326D694E6F}
MSN Toolbar-->C:\Program Files (x86)\MSN Toolbar Installer\InstallManager.exe /UNINSTALL
MSVC80_x64_v2-->MsiExec.exe /I{4D668D4F-FAA2-4726-834C-31F4614F312E}
MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
MSVC90_x64-->MsiExec.exe /I{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}
MSVC90_x86-->MsiExec.exe /I{AF111648-99A1-453E-81DD-80DBBF6DAD0D}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
neoDVDvideo 8 LP edition-->C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{7874B2D1-E558-4533-B6C2-E1087F344D00}
Nokia Connectivity Cable Driver-->MsiExec.exe /I{F1FDAA01-988C-423F-AC12-0D8F333943FD}
Nokia Ovi Player-->MsiExec.exe /I{50D25574-2C48-4AEC-8FFC-32AEAD2EAEFF}
Nokia Ovi Suite Software Updater-->MsiExec.exe /X{EE5B5B24-EEFC-4C8B-BF8B-256D705BAD89}
Nokia Ovi Suite-->C:\ProgramData\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer.exe
Nokia Ovi Suite-->MsiExec.exe /X{B8B4446F-87E1-4423-A47A-16832C24A199}
Nokia_Multimedia_Common_Components_2_5-->MsiExec.exe /I{70B31335-50EE-4834-8431-27412CDE62BD}
NVIDIA Ovladač 3D Vision 260.99-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.0\NVI2.DLL",UninstallPackage Display.3DVision
NVIDIA Ovladače grafiky 260.99-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.0\NVI2.DLL",UninstallPackage Display.Driver
NVIDIA PhysX-->MsiExec.exe /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}
NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask
NVIDIA Systémový software PhysX 9.10.0514-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.0\NVI2.DLL",UninstallPackage Display.PhysX
Opera 10.63-->MsiExec.exe /X{87CC8013-56D1-43E1-A0A5-AD406B4EBA95}
Ovi Desktop Sync Engine-->MsiExec.exe /X{8112C6B3-91E1-4560-8AB9-876DADFA37C5}
OviMPlatform-->MsiExec.exe /I{749A1EDD-16C2-4C63-B013-D38F0F953973}
PC Connectivity Solution-->MsiExec.exe /I{45DF6D99-666D-41FA-8D62-0E183B6240F3}
Photodex Presenter-->C:\Program Files (x86)\Photodex Presenter\uninst.exe
ProShow Producer-->C:\Program Files (x86)\Photodex\ProShowProducer\uninst.exe
PVSonyDll-->MsiExec.exe /I{3D3E663D-4E7E-4577-A560-7ECDDD45548A}
Raptr-->"C:\Program Files (x86)\Raptr\uninstall.exe"
RAR Password Cracker 4.12-->C:\Program Files (x86)\RAR Password Cracker\uninstall.exe
RssBandit-->MsiExec.exe /I{D5D7A88A-5395-4D43-AD18-713B804A1EF6}
SceneGrabber.NET-->MsiExec.exe /I{C8793276-2F36-454A-A524-9957B979FDE1}
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FD8D7C9A-E56A-3E7B-BA6D-FE68F13296E3} /parameterfolder Client
Shop for HP Supplies-->C:\Program Files (x86)\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
Skype Toolbars-->MsiExec.exe /I{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Skype™ 5.0-->MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
The KMPlayer (remove only)-->"C:\Program Files (x86)\The KMPlayer\uninstall.exe"
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {A45DD0BE-3CD9-3F1E-B233-B90C6983AE77} /parameterfolder Client
VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
Vuze Remote Toolbar-->C:\PROGRA~2\VUZE_R~1\UNWISE.EXE /U C:\PROGRA~2\VUZE_R~1\INSTALL.LOG
Vuze-->C:\Program Files (x86)\Vuze\uninstall.exe
Windows Live ID Sign-in Assistant-->MsiExec.exe /X{9B48B0AC-C813-4174-9042-476A887592C7}
WinMerge 2.10.4.0-->"C:\Program Files (x86)\WinMerge\unins000.exe"
WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Zrychleni Pocitace-->"C:\Program Files\Zrychleni Pocitace\unins000.exe"

Lord-Diablo · #6 Příspěvek od **Lord-Diablo** » 20 pro 2010 12:17

======System event log======

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Cryptographic Services byl změněn na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090714051424.262212-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Windows Modules Installer byl změněn na: stopped
Record Number: 4
Source Name: Service Control Manager
Time Written: 20090714051424.168612-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Software Protection byl změněn na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20090714051424.059412-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Windows Event Log byl změněn na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20090714051424.012612-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Volume Shadow Copy byl změněn na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20090714051423.934612-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247E29-32
Event Code: 1001
Message: Chybný blok , typ 0
Název události: PnPRequestAdditionalSoftware
Reakce: Není k dispozici
ID souboru CAB: 0

Podpis problému:
P1: x64
P2: USB\VID_09DA&PID_0080&REV_020<
P3: 6.1.0.0
P4: 0405
P5: input.inf
P6: *
P7:
P8:
P9:
P10:

Připojené soubory:

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_d223c3ca8ac183f9fd78e5a63140288dc1340_cab_07be626a

Symbol analýzy:
Opětovné hledání řešení: 0
ID hlášení: 7bc568e2-02b4-11e0-81ce-001fd0982525
Stav hlášení: 4
Record Number: 5
Source Name: Windows Error Reporting
Time Written: 20101208101822.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20101208101648.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20101208101645.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.

Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20101208101641.834895-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247E29-32
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20101208101641.000000-000
Event Type: Informace
User:

Lord-Diablo · #7 Příspěvek od **Lord-Diablo** » 20 pro 2010 12:17

=====Security event log=====

Computer Name: 37L4247E29-32
Event Code: 4735
Message: Byla změněna zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247E29-32$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Změněné atributy:
Název účtu SAM: -
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101208101624.487664-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4731
Message: Byla vytvořena zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247E29-32$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Nová skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Atributy:
Název účtu SAM: Backup Operators
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101208101624.487664-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.

Počet prvků: 0
ID zásady: 0x32017
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101208101624.191264-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0

Typ přihlášení: 0

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x4
Název procesu:

Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101208101622.568861-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4608
Message: Spouští se systém Windows.

Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101208101622.553261-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%CommonProgramFiles%\Microsoft Shared\Windows Live;C:\Program Files (x86)\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=170a

-----------------EOF-----------------

#8 Příspěvek od **motji** » 20 pro 2010 12:25

Ještě poprosím o ten druhý log s názvem log.txt

Lord-Diablo · #9 Příspěvek od **Lord-Diablo** » 20 pro 2010 15:56

Logfile of random's system information tool 1.08 (written by random/random)
Run by Web-Tuning at 2010-12-20 15:53:42
Microsoft Windows 7 Ultimate
System drive C: has 37 GB (37%) free of 100 GB
Total RAM: 4094 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:53:45, on 20.12.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\IM Magician\vicamon.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\DivX\DivX Plus Web Player\DDMService.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe
C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Web-Tuning.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/xmas/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
O2 - BHO: MSN Toolbar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: MSN Toolbar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [NokiaMusic FastStart] "C:\Program Files (x86)\Nokia\Ovi Player\NokiaOviPlayer.exe" /command:faststart
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [MSN Toolbar] "C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [IMMON] "C:\Program Files (x86)\IM Magician\Vicamon.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [DivX Download Manager] "C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe" start
O4 - HKCU\..\Run: [Google Update] "C:\Users\Web-Tuning\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Raptr] C:\PROGRA~2\Raptr\raptrstub.exe --startup
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ManyCam] "C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GRA32A~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\Windows\SysWOW64\bgsvcgen.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files (x86)\Photodex\ProShowProducer\ScsiAccess.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15319 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\SysWOW64\bgsvcgen.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Photodex\ProShowProducer\ScsiAccess.exe"
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
WLIDSvcM.exe 2260
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /silent
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe" /watchfiles startup
"C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe"
"C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\IM Magician\vicamon.exe"
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Program Files (x86)\DivX\DivX Plus Web Player\DDMService.exe" start
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Photosmart B010 series#1291875035" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\PROGRA~2\Raptr\raptr.exe" --log_to_file --from_stub --startup
raptr_im.exe
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe"
"C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" "-launchedbycsxs"
"C:\Program Files (x86)\Steam\steam.exe" "steam://rungameid/42710"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3148.026E7900.966629143 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3148.02748600.948247273 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3148.02748480.989923977 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3148.047EFD80.1719001022 /prefetch:3
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\8.0.552.224\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\Web-Tuning\AppData\Local\Google\Chrome\User Data\Default" --channel=3148.07F4EE4C.1950115982 /prefetch:4
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Web-Tuning\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1867650037-4279840285-2190968544-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1867650037-4279840285-2190968544-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-11-05 138624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27 1250696]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
Vuze Remote Toolbar - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
MSN Toolbar BHO - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll [2009-11-16 506720]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-12-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - MSN Toolbar - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll [2009-11-16 506720]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-10-27 1049912]
{ba14329e-9550-4989-b3f2-9732e92d17cc} - Vuze Remote Toolbar - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll [2010-12-09 3911776]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Web-Tuning\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-08 136176]
""= []
"Raptr"=C:\PROGRA~2\Raptr\raptrstub.exe [2010-12-16 53160]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"ManyCam"=C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe [2010-11-30 1735752]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"=C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"NokiaMusic FastStart"=C:\Program Files (x86)\Nokia\Ovi Player\NokiaOviPlayer.exe [2010-03-04 2192672]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2009-11-18 54576]
""= []
"MSN Toolbar"=C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe [2009-11-16 240992]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2009-07-17 288080]
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"IMMON"=C:\Program Files (x86)\IM Magician\Vicamon.exe [2009-05-07 143360]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2010-12-09 1226608]
"DivX Download Manager"=C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe [2010-12-08 63360]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Lord-Diablo · #10 Příspěvek od **Lord-Diablo** » 20 pro 2010 15:56

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-12-20 12:29:07 ----D---- C:\Temp
2010-12-20 11:40:01 ----D---- C:\rsit
2010-12-20 11:40:01 ----D---- C:\Program Files\trend micro
2010-12-20 00:20:10 ----D---- C:\Program Files (x86)\linguatec
2010-12-16 23:02:02 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Local
2010-12-16 23:01:50 ----D---- C:\Users\Web-Tuning\AppData\Roaming\DivX
2010-12-16 23:01:37 ----D---- C:\Program Files\DivX
2010-12-16 22:59:16 ----D---- C:\Program Files (x86)\DivX
2010-12-16 22:56:42 ----D---- C:\ProgramData\DivX
2010-12-15 21:19:13 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-12-15 21:18:59 ----D---- C:\ProgramData\NVIDIA
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvdecodemft.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\OpenCL.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvwgf2umx.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvoglv64.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvgenco642030.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvdispco642050.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvdecodemft.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvd3dumx.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvcuvid.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvcuvenc.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvcuda.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvcompiler.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvapi64.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2010-12-15 21:17:11 ----D---- C:\NVIDIA
2010-12-15 19:54:46 ----D---- C:\ProgramData\NVIDIA Corporation
2010-12-15 19:54:43 ----D---- C:\Program Files\NVIDIA Corporation
2010-12-15 18:33:31 ----D---- C:\Users\Web-Tuning\AppData\Roaming\ManyCam
2010-12-15 18:33:26 ----D---- C:\Program Files (x86)\ManyCam
2010-12-15 18:13:19 ----D---- C:\Program Files (x86)\Free Labs
2010-12-15 18:04:40 ----D---- C:\Program Files (x86)\1-More WebCam
2010-12-15 18:00:29 ----D---- C:\Program Files (x86)\Biromsoft
2010-12-15 17:47:21 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Vimisoft Studio
2010-12-15 17:47:10 ----A---- C:\Windows\SYSWOW64\vgf.dll
2010-12-15 17:47:09 ----A---- C:\Windows\SYSWOW64\newlistview2.dll
2010-12-15 17:46:49 ----D---- C:\Program Files (x86)\Vimicro Corporation
2010-12-15 17:46:30 ----D---- C:\Program Files (x86)\IM Magician
2010-12-15 17:45:29 ----D---- C:\Users\Web-Tuning\AppData\Roaming\InstallShield
2010-12-15 17:43:09 ----D---- C:\Program Files (x86)\RKComputer
2010-12-15 03:12:55 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-12-15 03:12:55 ----A---- C:\Windows\system32\tzres.dll
2010-12-15 03:12:48 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2010-12-15 03:12:48 ----A---- C:\Windows\system32\wmicmiplugin.dll
2010-12-15 03:12:48 ----A---- C:\Windows\system32\taskschd.dll
2010-12-15 03:12:48 ----A---- C:\Windows\system32\taskeng.exe
2010-12-15 03:12:48 ----A---- C:\Windows\system32\taskcomp.dll
2010-12-15 03:12:48 ----A---- C:\Windows\system32\schtasks.exe
2010-12-15 03:12:48 ----A---- C:\Windows\system32\schedsvc.dll
2010-12-15 03:12:47 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2010-12-15 03:12:47 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2010-12-15 03:12:47 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2010-12-15 03:12:46 ----A---- C:\Windows\system32\atmfd.dll
2010-12-15 03:12:45 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2010-12-15 03:12:45 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2010-12-15 03:12:45 ----A---- C:\Windows\system32\win32k.sys
2010-12-15 03:12:45 ----A---- C:\Windows\system32\atmlib.dll
2010-12-15 03:12:44 ----A---- C:\Windows\SYSWOW64\webio.dll
2010-12-15 03:12:44 ----A---- C:\Windows\system32\webio.dll
2010-12-15 03:12:42 ----A---- C:\Windows\system32\consent.exe
2010-12-15 03:12:40 ----A---- C:\Windows\system32\mshtml.dll
2010-12-15 03:12:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-12-15 03:12:39 ----A---- C:\Windows\system32\iertutil.dll
2010-12-15 03:12:38 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-12-15 03:12:38 ----A---- C:\Windows\system32\mstime.dll
2010-12-15 03:12:38 ----A---- C:\Windows\system32\ieframe.dll
2010-12-15 03:12:37 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-12-15 03:12:36 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-12-15 03:12:36 ----A---- C:\Windows\system32\wininet.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\urlmon.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\mshtmled.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\msfeedssync.exe
2010-12-15 03:12:35 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\msfeeds.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\licmgr10.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\jsproxy.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\ieui.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\iepeers.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\iedkcs32.dll
2010-12-15 00:59:21 ----D---- C:\Program Files (x86)\Mediostream
2010-12-15 00:59:21 ----A---- C:\Windows\SYSWOW64\GenSvcInst.exe
2010-12-15 00:59:21 ----A---- C:\Windows\SYSWOW64\bgsvcgen.exe
2010-12-15 00:14:55 ----D---- C:\Users\Web-Tuning\AppData\Roaming\RssBandit
2010-12-15 00:14:54 ----D---- C:\Program Files (x86)\RssBandit
2010-12-15 00:11:31 ----D---- C:\Users\Web-Tuning\AppData\Roaming\DVD Flick
2010-12-15 00:11:20 ----D---- C:\Program Files (x86)\DVD Flick
2010-12-15 00:11:20 ----A---- C:\Windows\SYSWOW64\ssubtmr6.dll
2010-12-14 20:21:50 ----A---- C:\Windows\SYSWOW64\pncrt.dll
2010-12-14 20:21:35 ----D---- C:\Program Files (x86)\FreeTime
2010-12-14 17:35:12 ----D---- C:\Users\Web-Tuning\AppData\Roaming\VOS
2010-12-14 17:01:40 ----D---- C:\Program Files (x86)\RAR Password Cracker
2010-12-13 16:37:22 ----D---- C:\ProgramData\ABBYY
2010-12-13 16:35:05 ----D---- C:\Users\Web-Tuning\AppData\Roaming\ABBYY
2010-12-13 07:07:33 ----D---- C:\Program Files (x86)\WinMerge
2010-12-12 15:40:56 ----D---- C:\Program Files (x86)\Microsoft Works
2010-12-12 15:40:30 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-12-12 15:40:01 ----D---- C:\Windows\PCHEALTH
2010-12-12 15:40:01 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-12-12 15:38:06 ----D---- C:\Program Files\Microsoft Office
2010-12-12 15:38:00 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2010-12-12 15:37:17 ----D---- C:\ProgramData\Microsoft Help
2010-12-12 15:37:17 ----D---- C:\Program Files (x86)\Microsoft Office
2010-12-12 15:35:48 ----RHD---- C:\MSOCache
2010-12-12 15:28:18 ----D---- C:\Users\Web-Tuning\AppData\Roaming\HPAppData
2010-12-12 15:09:01 ----D---- C:\Users\Web-Tuning\AppData\Roaming\CoffeeCup Software
2010-12-12 15:08:51 ----D---- C:\Program Files (x86)\CoffeeCup Software
2010-12-12 15:06:15 ----D---- C:\Program Files (x86)\Windows SideShow
2010-12-12 14:37:16 ----D---- C:\Program Files (x86)\IPACS
2010-12-12 14:26:30 ----D---- C:\Program Files (x86)\DAEMON Tools Toolbar
2010-12-12 14:25:54 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-12-12 14:25:33 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2010-12-12 14:24:57 ----D---- C:\Users\Web-Tuning\AppData\Roaming\DAEMON Tools Lite
2010-12-12 14:24:53 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-12-12 13:23:27 ----D---- C:\ProgramData\Sun
2010-12-12 13:23:12 ----A---- C:\Windows\SYSWOW64\javaws.exe
2010-12-12 13:23:12 ----A---- C:\Windows\SYSWOW64\javaw.exe
2010-12-12 13:23:12 ----A---- C:\Windows\SYSWOW64\java.exe
2010-12-12 13:23:12 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2010-12-12 13:23:03 ----D---- C:\Program Files (x86)\Java
2010-12-12 12:57:25 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Raptr
2010-12-12 12:57:25 ----D---- C:\Program Files (x86)\Raptr
2010-12-12 12:56:17 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Azureus
2010-12-12 12:54:43 ----D---- C:\Program Files (x86)\Vuze
2010-12-12 12:54:39 ----D---- C:\Program Files (x86)\Conduit
2010-12-12 12:54:37 ----D---- C:\Program Files (x86)\ConduitEngine
2010-12-12 12:54:36 ----D---- C:\Program Files (x86)\Vuze_Remote
2010-12-12 10:47:20 ----D---- C:\Program Files (x86)\DsNET Corp
2010-12-12 10:44:44 ----D---- C:\Program Files\Zrychleni Pocitace
2010-12-12 10:32:46 ----D---- C:\Windows\XSxS
2010-12-12 10:32:46 ----D---- C:\Program Files (x86)\Xenocode
2010-12-11 13:48:31 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Thinstall
2010-12-10 16:38:56 ----D---- C:\Program Files (x86)\ICQ6Toolbar
2010-12-10 16:38:55 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-12-10 16:38:55 ----D---- C:\ProgramData\ICQ
2010-12-10 16:38:47 ----D---- C:\Users\Web-Tuning\AppData\Roaming\ICQ
2010-12-10 16:38:44 ----D---- C:\Program Files (x86)\ICQ7.2
2010-12-10 09:16:08 ----D---- C:\Program Files (x86)\directx
2010-12-10 08:15:52 ----D---- C:\Program Files (x86)\MSXML 4.0
2010-12-10 08:09:19 ----D---- C:\Windows\SYSWOW64\Wat
2010-12-10 08:09:19 ----D---- C:\Windows\system32\Wat
2010-12-09 20:23:54 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2010-12-09 20:23:54 ----A---- C:\Windows\system32\msv1_0.dll
2010-12-09 20:18:00 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2010-12-09 20:18:00 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2010-12-09 20:18:00 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2010-12-09 20:18:00 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2010-12-09 20:18:00 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2010-12-09 20:18:00 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-12-09 20:18:00 ----A---- C:\Windows\system32\PresentationHost.exe
2010-12-09 20:18:00 ----A---- C:\Windows\system32\netfxperf.dll
2010-12-09 20:18:00 ----A---- C:\Windows\system32\mscoree.dll
2010-12-09 20:18:00 ----A---- C:\Windows\system32\dfshim.dll
2010-12-09 20:17:42 ----A---- C:\Windows\system32\browserchoice.exe
2010-12-09 20:13:12 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2010-12-09 20:13:12 ----A---- C:\Windows\system32\drivers\ks.sys
2010-12-09 16:38:53 ----D---- C:\Program Files (x86)\SiteGrinder 3
2010-12-09 16:21:35 ----D---- C:\Program Files (x86)\targit
2010-12-09 16:05:02 ----A---- C:\Windows\SYSWOW64\tsccvid.dll
2010-12-09 16:05:01 ----D---- C:\Windows\SYSWOW64\QuickTime
2010-12-09 16:04:57 ----D---- C:\ProgramData\TechSmith
2010-12-09 16:04:52 ----D---- C:\Program Files (x86)\TechSmith
2010-12-09 16:01:42 ----D---- C:\ProgramData\Bimesoft
2010-12-09 15:08:57 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Opera
2010-12-09 15:08:51 ----D---- C:\Program Files (x86)\Opera
2010-12-09 15:03:38 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-12-09 11:25:46 ----D---- C:\Windows\Minidump
2010-12-09 08:48:48 ----D---- C:\Program Files (x86)\The KMPlayer
2010-12-09 08:31:18 ----D---- C:\Program Files (x86)\Photodex
2010-12-09 08:29:33 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Photodex
2010-12-09 08:26:47 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Netscape
2010-12-09 08:26:47 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Mozilla
2010-12-09 08:26:47 ----D---- C:\Program Files (x86)\Photodex Presenter
2010-12-09 08:26:46 ----D---- C:\ProgramData\Photodex
2010-12-09 07:59:42 ----D---- C:\ProgramData\FLEXnet
2010-12-09 07:52:48 ----RA---- C:\Windows\system32\AdobePDFUI.dll
2010-12-09 07:50:44 ----D---- C:\ProgramData\Adobe
2010-12-09 07:50:44 ----D---- C:\Program Files (x86)\Adobe
2010-12-09 07:12:41 ----D---- C:\ProgramData\WEBREG
2010-12-09 07:10:40 ----D---- C:\Users\Web-Tuning\AppData\Roaming\HP
2010-12-09 07:09:15 ----D---- C:\Program Files (x86)\MSN Toolbar
2010-12-09 07:09:15 ----D---- C:\Program Files (x86)\Microsoft
2010-12-09 07:09:10 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-12-09 07:08:59 ----D---- C:\Program Files (x86)\MSN Toolbar Installer
2010-12-09 07:08:54 ----D---- C:\Users\Web-Tuning\AppData\Roaming\HpUpdate
2010-12-09 07:08:22 ----D---- C:\ProgramData\HP Product Assistant
2010-12-09 07:07:50 ----D---- C:\Windows\SYSWOW64\Macromed
2010-12-09 07:06:53 ----A---- C:\Windows\system32\hpf3l101.dll
2010-12-09 07:06:21 ----HD---- C:\Config.Msi
2010-12-09 07:06:15 ----D---- C:\Program Files (x86)\HP
2010-12-09 07:05:47 ----D---- C:\ProgramData\HP
2010-12-09 07:05:42 ----A---- C:\Windows\system32\hpzids40.dll
2010-12-09 07:05:42 ----A---- C:\Windows\system32\hposwia_p04h.dll
2010-12-09 07:05:41 ----A---- C:\Windows\system32\hpost_p04h.dll
2010-12-09 07:05:41 ----A---- C:\Windows\system32\hposc_p04a.dll
2010-12-09 06:09:44 ----A---- C:\Windows\system32\drivers\aswSP.sys
2010-12-09 06:09:44 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2010-12-09 06:09:42 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2010-12-09 06:09:41 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2010-12-09 06:09:37 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2010-12-09 06:09:11 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2010-12-09 06:09:10 ----D---- C:\ProgramData\Alwil Software
2010-12-09 06:09:10 ----D---- C:\Program Files\Alwil Software
2010-12-09 05:53:59 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Nokia Ovi Suite
2010-12-09 05:45:50 ----D---- C:\ProgramData\Nokia
2010-12-09 05:38:55 ----D---- C:\ProgramData\PC Suite
2010-12-09 05:38:47 ----D---- C:\Users\Web-Tuning\AppData\Roaming\PC Suite
2010-12-09 05:37:51 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2010-12-09 05:36:12 ----D---- C:\ProgramData\NokiaInstallerCache
2010-12-09 03:08:25 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2010-12-09 03:08:25 ----A---- C:\Windows\system32\asycfilt.dll
2010-12-09 03:08:23 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2010-12-09 03:08:23 ----A---- C:\Windows\system32\ntdll.dll
2010-12-09 03:08:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2010-12-09 03:08:22 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2010-12-09 03:08:22 ----A---- C:\Windows\system32\vbscript.dll
2010-12-09 03:08:22 ----A---- C:\Windows\system32\t2embed.dll
2010-12-09 03:08:21 ----A---- C:\Windows\system32\ole32.dll
2010-12-09 03:08:20 ----A---- C:\Windows\SYSWOW64\ole32.dll
2010-12-09 03:08:19 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2010-12-09 03:08:19 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-12-09 03:08:16 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2010-12-09 03:08:16 ----A---- C:\Windows\system32\CertEnroll.dll
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\secproc.dll
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2010-12-09 03:07:59 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-12-09 03:07:59 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-12-09 03:07:59 ----A---- C:\Windows\system32\secproc_isv.dll
2010-12-09 03:07:59 ----A---- C:\Windows\system32\secproc.dll
2010-12-09 03:07:59 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-12-09 03:07:59 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-12-09 03:07:59 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-12-09 03:07:59 ----A---- C:\Windows\system32\RMActivate.exe
2010-12-09 03:07:48 ----A---- C:\Windows\system32\shell32.dll
2010-12-09 03:07:47 ----A---- C:\Windows\SYSWOW64\shell32.dll
2010-12-09 03:07:46 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2010-12-09 03:07:46 ----A---- C:\Windows\system32\inetcomm.dll
2010-12-09 03:07:45 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2010-12-09 03:07:45 ----A---- C:\Windows\system32\CPFilters.dll
2010-12-09 03:07:44 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2010-12-09 03:07:44 ----A---- C:\Windows\system32\psisdecd.dll
2010-12-09 03:07:44 ----A---- C:\Windows\system32\msdri.dll
2010-12-09 03:07:33 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-12-09 03:07:30 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2010-12-09 03:07:30 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2010-12-09 03:07:30 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-12-09 03:07:27 ----A---- C:\Windows\SYSWOW64\schannel.dll
2010-12-09 03:07:27 ----A---- C:\Windows\system32\schannel.dll
2010-12-09 03:07:23 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2010-12-09 03:07:23 ----A---- C:\Windows\system32\comctl32.dll
2010-12-09 03:07:21 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2010-12-09 03:07:21 ----A---- C:\Windows\system32\oleaut32.dll
2010-12-09 03:07:20 ----A---- C:\Windows\SYSWOW64\explorer.exe
2010-12-09 03:07:20 ----A---- C:\Windows\system32\winlogon.exe
2010-12-09 03:07:20 ----A---- C:\Windows\explorer.exe
2010-12-09 03:07:15 ----A---- C:\Windows\SYSWOW64\wow32.dll
2010-12-09 03:07:15 ----A---- C:\Windows\SYSWOW64\user.exe
2010-12-09 03:07:15 ----A---- C:\Windows\SYSWOW64\setup16.exe
2010-12-09 03:07:15 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2010-12-09 03:07:15 ----A---- C:\Windows\SYSWOW64\instnm.exe
2010-12-09 03:07:15 ----A---- C:\Windows\system32\wow64.dll
2010-12-09 03:07:13 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2010-12-09 03:07:13 ----A---- C:\Windows\system32\rtutils.dll
2010-12-09 03:06:55 ----A---- C:\Windows\system32\spoolsv.exe
2010-12-09 03:06:54 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2010-12-09 03:06:54 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-12-09 03:06:54 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-12-09 03:06:54 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-12-09 03:06:53 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-12-09 03:06:52 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-12-09 03:06:52 ----A---- C:\Windows\system32\cdd.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\quartz.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\wmpmde.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\tsbyuv.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\quartz.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\msyuv.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\msvidc32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\msrle32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\iyuv_32.dll
2010-12-09 03:06:31 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2010-12-09 03:06:31 ----A---- C:\Windows\system32\msxml3.dll
2010-12-09 03:06:31 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-12-09 03:06:29 ----A---- C:\Windows\SYSWOW64\jscript.dll
2010-12-09 03:06:29 ----A---- C:\Windows\system32\jscript.dll
2010-12-09 03:06:27 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2010-12-09 03:06:27 ----A---- C:\Windows\SYSWOW64\secur32.dll
2010-12-09 03:06:27 ----A---- C:\Windows\system32\lsasrv.dll
2010-12-09 03:06:27 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-12-09 03:06:15 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2010-12-09 03:06:15 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2010-12-09 03:06:13 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2010-12-09 03:06:13 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2010-12-09 03:06:13 ----A---- C:\Windows\system32\msasn1.dll
2010-12-09 03:06:13 ----A---- C:\Windows\system32\fontsub.dll
2010-12-09 03:06:02 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2010-12-09 03:06:02 ----A---- C:\Windows\SYSWOW64\wmp.dll
2010-12-09 03:06:02 ----A---- C:\Windows\system32\wmp.dll
2010-12-09 03:06:01 ----A---- C:\Windows\system32\wmploc.DLL
2010-12-09 03:05:58 ----A---- C:\Windows\system32\drivers\srv.sys
2010-12-09 03:05:57 ----A---- C:\Windows\SYSWOW64\sscore.dll
2010-12-09 03:05:57 ----A---- C:\Windows\system32\srvsvc.dll
2010-12-09 03:05:57 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-12-09 03:05:57 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-12-08 14:39:00 ----D---- C:\Users\Web-Tuning\AppData\Roaming\GHISLER
2010-12-08 14:39:00 ----D---- C:\totalcmd
2010-12-08 14:39:00 ----A---- C:\Windows\UC.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\RAR.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\PKZIP.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\PKUNZIP.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\NOCLOSE.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\LHA.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\ARJ.PIF
2010-12-08 14:31:00 ----D---- C:\Users\Web-Tuning\AppData\Roaming\WinRAR
2010-12-08 14:30:54 ----D---- C:\Program Files\WinRAR
2010-12-08 12:46:11 ----D---- C:\Users\Web-Tuning\AppData\Roaming\skypePM
2010-12-08 12:45:14 ----RD---- C:\Program Files (x86)\Skype
2010-12-08 12:45:14 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Skype
2010-12-08 12:45:13 ----D---- C:\ProgramData\Skype
2010-12-08 12:42:31 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-12-08 12:42:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-12-08 12:42:31 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-12-08 12:42:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-12-08 12:42:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-12-08 12:42:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-12-08 12:42:31 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-12-08 12:42:31 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-12-08 12:42:29 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\xinput1_3.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\d3dx10.dll
2010-12-08 12:42:22 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-12-08 12:42:22 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2010-12-08 12:42:22 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-12-08 12:42:22 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2010-12-08 12:42:22 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2010-12-08 12:42:22 ----A---- C:\Windows\system32\xinput1_2.dll
2010-12-08 12:42:22 ----A---- C:\Windows\system32\xinput1_1.dll
2010-12-08 12:42:22 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-12-08 12:42:22 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-12-08 12:42:22 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-12-08 12:42:21 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2010-12-08 12:42:21 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2010-12-08 12:42:21 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-12-08 12:42:21 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2010-12-08 12:42:21 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-12-08 12:42:21 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-12-08 12:42:21 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-12-08 12:42:21 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-12-08 12:42:20 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2010-12-08 12:42:20 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2010-12-08 12:42:20 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2010-12-08 12:42:20 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2010-12-08 12:42:20 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2010-12-08 12:42:20 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-12-08 12:42:20 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-12-08 12:42:20 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-12-08 12:42:20 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-12-08 12:42:20 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-12-08 12:38:27 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Nokia
2010-12-08 12:36:15 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2010-12-08 12:36:07 ----D---- C:\ProgramData\NokiaMusic
2010-12-08 12:34:56 ----D---- C:\Program Files\DIFX
2010-12-08 12:34:55 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2010-12-08 12:34:54 ----DC---- C:\Windows\system32\DRVSTORE
2010-12-08 12:34:28 ----D---- C:\Program Files (x86)\Nokia
2010-12-08 12:34:28 ----A---- C:\Windows\system32\nmwcdclsx64.dll
2010-12-08 11:51:27 ----N---- C:\Windows\system32\MpSigStub.exe
2010-12-08 11:47:44 ----D---- C:\Program Files (x86)\Steam
2010-12-08 11:47:03 ----SHD---- C:\Windows\Installer
2010-12-08 11:37:26 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Macromedia
2010-12-08 11:37:26 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Adobe
2010-12-08 11:28:32 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2010-12-08 11:28:32 ----A---- C:\Windows\system32\wintrust.dll
2010-12-08 11:28:31 ----A---- C:\Windows\SYSWOW64\cabview.dll
2010-12-08 11:28:31 ----A---- C:\Windows\system32\cabview.dll
2010-12-08 11:24:37 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Identities
2010-12-08 11:24:21 ----SD---- C:\Users\Web-Tuning\AppData\Roaming\Microsoft
2010-12-08 11:24:21 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Media Center Programs
2010-12-08 11:22:58 ----SHD---- C:\Recovery
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Šablony
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Plocha
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Oblíbené položky
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Nabídka Start
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Dokumenty
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Data aplikací
2010-12-08 11:18:48 ----D---- C:\Windows\SoftwareDistribution
2010-12-08 11:16:20 ----D---- C:\Windows\Prefetch
2010-12-08 11:16:16 ----ASH---- C:\pagefile.sys
2010-12-08 11:16:07 ----SHD---- C:\System Volume Information
2010-12-08 11:16:07 ----ASH---- C:\hiberfil.sys
2010-12-08 11:15:09 ----D---- C:\Windows\Panther
2010-12-08 11:14:58 ----RASH---- C:\BOOTSECT.BAK
2010-12-08 11:14:56 ----SHD---- C:\Boot

======List of files/folders modified in the last 1 months======

2010-12-20 15:53:45 ----D---- C:\Windows\Temp
2010-12-20 11:40:01 ----RD---- C:\Program Files
2010-12-20 10:57:06 ----D---- C:\Windows\System32
2010-12-20 10:57:06 ----D---- C:\Windows\inf
2010-12-20 10:57:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-12-20 10:35:34 ----D---- C:\Windows\system32\config
2010-12-20 10:25:31 ----D---- C:\Windows\system32\drivers
2010-12-20 00:20:10 ----RD---- C:\Program Files (x86)
2010-12-19 23:57:48 ----D---- C:\Windows\SysWOW64
2010-12-18 12:40:56 ----D---- C:\Windows\Microsoft.NET
2010-12-18 12:40:17 ----RSD---- C:\Windows\assembly
2010-12-17 03:03:36 ----D---- C:\Windows\SYSWOW64\cs-CZ
2010-12-17 03:03:36 ----D---- C:\Windows\system32\cs-CZ
2010-12-17 03:01:16 ----D---- C:\Windows\SYSWOW64\en-US
2010-12-17 03:01:16 ----D---- C:\Windows\system32\en-US
2010-12-16 23:01:41 ----D---- C:\Program Files (x86)\Common Files
2010-12-16 22:56:42 ----HD---- C:\ProgramData
2010-12-16 03:59:39 ----D---- C:\Windows\rescache
2010-12-16 03:19:28 ----D---- C:\Windows\winsxs
2010-12-16 03:17:35 ----D---- C:\Windows\SYSWOW64\migration
2010-12-16 03:17:35 ----D---- C:\Windows\system32\migration
2010-12-16 03:17:35 ----D---- C:\Program Files\Windows Mail
2010-12-16 03:17:35 ----D---- C:\Program Files\Internet Explorer
2010-12-16 03:17:35 ----D---- C:\Program Files (x86)\Windows Mail
2010-12-16 03:17:35 ----D---- C:\Program Files (x86)\Internet Explorer
2010-12-16 03:01:36 ----D---- C:\Windows\system32\catroot
2010-12-15 21:23:11 ----D---- C:\Windows
2010-12-15 21:17:48 ----D---- C:\Windows\system32\DriverStore
2010-12-15 19:55:05 ----D---- C:\Windows\Help
2010-12-15 19:54:42 ----D---- C:\Windows\system32\catroot2
2010-12-13 07:22:57 ----D---- C:\Windows\LiveKernelReports
2010-12-12 16:46:43 ----D---- C:\Windows\system32\wdi
2010-12-12 15:40:47 ----D---- C:\Program Files (x86)\MSBuild
2010-12-12 15:40:26 ----D---- C:\Windows\ShellNew
2010-12-12 15:40:11 ----RSD---- C:\Windows\Fonts
2010-12-12 15:40:01 ----SD---- C:\ProgramData\Microsoft
2010-12-12 15:39:12 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-12-12 15:37:41 ----A---- C:\Windows\win.ini
2010-12-12 14:52:19 ----D---- C:\Windows\system32\Tasks
2010-12-12 10:32:58 ----RD---- C:\Users
2010-12-12 06:32:48 ----D---- C:\Windows\system32\LogFiles
2010-12-10 08:09:25 ----D---- C:\Windows\ehome
2010-12-10 08:09:22 ----D---- C:\Windows\AppPatch
2010-12-10 08:09:12 ----D---- C:\Program Files (x86)\Windows Media Player
2010-12-10 08:09:11 ----D---- C:\Program Files\Windows Media Player
2010-12-09 16:25:55 ----D---- C:\Windows\Logs
2010-12-09 07:56:37 ----D---- C:\Windows\system32\drivers\etc
2010-12-09 07:09:49 ----D---- C:\Windows\twain_32
2010-12-09 05:52:23 ----D---- C:\Windows\system32\drivers\UMDF
2010-12-08 12:36:12 ----D---- C:\Windows\Globalization
2010-12-08 11:43:13 ----D---- C:\Windows\system32\CodeIntegrity
2010-12-08 11:36:13 ----D---- C:\Windows\Tasks
2010-12-08 11:28:32 ----D---- C:\Windows\system32\restore
2010-12-08 11:24:34 ----SHD---- C:\$Recycle.Bin
2010-12-08 11:22:58 ----D---- C:\Program Files\Windows NT
2010-12-08 11:21:45 ----D---- C:\Windows\debug
2010-12-08 11:18:35 ----D---- C:\Windows\system32\sysprep
2010-12-08 11:16:41 ----D---- C:\Windows\CSC
2010-12-08 11:14:44 ----D---- C:\Windows\Setup

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-12 834544]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-09-07 28752]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-09-07 121936]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-09-07 51280]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-09-07 20048]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-09-07 61008]
R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-14 19968]
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2009-06-10 51712]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 amah2acc;amah2acc; C:\Windows\system32\drivers\amah2acc.sys []
S3 nmwcdcx64;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-02-26 25088]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2010-02-26 173056]
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-02-26 19456]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-02-26 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys [2010-02-26 9216]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 bgsvcgen;B's Recorder GOLD Library General Service; C:\Windows\SysWOW64\bgsvcgen.exe [2006-12-28 122512]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 ICQ Service;ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-10-27 247096]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-10-16 989800]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ScsiAccess;ScsiAccess; C:\Program Files (x86)\Photodex\ProShowProducer\ScsiAccess.exe [2010-12-09 181312]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-11-05 242048]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-12-08 403240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-12-09 651720]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-09 1255736]

-----------------EOF-----------------

#11 Příspěvek od **motji** » 20 pro 2010 17:52

Vložte flešku do pc.

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

VIRY.CZ

USB Windows 7 x64

USB Windows 7 x64

Re: USB Windows 7 x64

Re: USB Windows 7 x64

Re: USB Windows 7 x64

Re: USB Windows 7 x64

Re: USB Windows 7 x64

Re: USB Windows 7 x64

Re: USB Windows 7 x64

Re: USB Windows 7 x64

Re: USB Windows 7 x64

Re: USB Windows 7 x64