Logfile of random's system information tool 1.08 (written by random/random)
Run by Pivajz at 2011-02-13 19:29:26
Microsoft Windows 7 Ultimate
System drive C: has 111 GB (40%) free of 277 GB
Total RAM: 4061 MB (67% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:29:55, on 13.2.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\AWS\WeatherBug Alert\WeatherBugAlert.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.Exe
C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\mswinext.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\trend micro\Pivajz.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: TorrentMan Toolbar - {7c5c0f58-e061-457d-9033-77307f5ed00c} - C:\Program Files (x86)\TorrentMan\tbTorr.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: TorrentMan Toolbar - {7c5c0f58-e061-457d-9033-77307f5ed00c} - C:\Program Files (x86)\TorrentMan\tbTorr.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\progra~2\mcafee\siteadvisor\mcieplg.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dll
O3 - Toolbar: TorrentMan Toolbar - {7c5c0f58-e061-457d-9033-77307f5ed00c} - C:\Program Files (x86)\TorrentMan\tbTorr.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~2\mcafee\siteadvisor\mcieplg.dll
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Bing Bar] "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\mswinext.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [WeatherBugAlert] "C:\Program Files (x86)\AWS\WeatherBug Alert\WeatherBugAlert.exe" /st
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: mafia2.pif = C:\Users\Pivajz\DOWNLO~1\Mafia 2\Mafia 2\mafia2.EXE
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Dragon Age: Prameny - aktualizace obsahu (DAUpdaterSvc) - BioWare - C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11459 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\siteadvisor\saHook.dll" saHooker_Initialize_and_Wait
"C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\siteadvisor\saHook.dll" saHooker_Initialize_and_Wait
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" -hidden
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\AWS\WeatherBug Alert\WeatherBugAlert.exe" /st
WLIDSvcM.exe 1772
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9c5488da-19f8-43c9-93ab-370b55ff2036 -SystemEventPortName:HostProcess-830e428e-45e9-4462-b1fa-bd84c3d0abca -IoCancelEventPortName:HostProcess-9daafacc-d748-4f64-9090-3ec50d2ac7ce -NonStateChangingEventPortName:HostProcess-d140476f-e08c-455a-bdfd-1b19771bde91 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:527c12a6-3f5d-4030-851f-6b7e81f48205
"C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
"C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe"
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.Exe"
"C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\mswinext.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe" /SCHEDULESCAN
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "http://go.microsoft.com/fwlink/?LinkId=63849"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3316.7e08780.1081164694 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" 3316 plugin \\.\pipe\gecko-crash-server-pipe.3316
"C:\totalcmd\TOTALCMD.EXE"
"taskhost.exe"
"C:\Users\Pivajz\RSITX64.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll [2011-01-04 306536]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2008-05-01 1150976]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2011-01-08 798771]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-01-14 138624]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7c5c0f58-e061-457d-9033-77307f5ed00c}]
TorrentMan Toolbar - C:\Program Files (x86)\TorrentMan\tbTorr.dll [2008-07-27 1606680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\progra~2\mcafee\siteadvisor\mcieplg.dll [2011-01-04 251416]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar BHO - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dll [2010-03-24 549208]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Nero Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-12 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll [2011-01-04 306536]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Nero Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2011-01-08 798771]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2008-05-01 1150976]
{8dcb7100-df86-4384-8842-8fa844297b3f} - @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dll,-100 - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dll [2010-03-24 549208]
{7c5c0f58-e061-457d-9033-77307f5ed00c} - TorrentMan Toolbar - C:\Program Files (x86)\TorrentMan\tbTorr.dll [2008-07-27 1606680]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\progra~2\mcafee\siteadvisor\mcieplg.dll [2011-01-04 251416]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-02 159232]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-02 380928]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-02 358912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"=C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]
"Nektra OEAPI"= []
"OEXPRESS"= []
"WEBTRAN"= []
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-05 1305408]
"WeatherBugAlert"=C:\Program Files (x86)\AWS\WeatherBug Alert\WeatherBugAlert.exe [2010-02-22 442368]
"SpywareTerminatorUpdate"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2011-02-01 3318784]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NBAgent"=C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-03-26 1234216]
"SpywareTerminator"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2011-02-01 2557440]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"Bing Bar"=C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\mswinext.exe [2010-03-24 243544]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2009-11-11 288088]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Users\Pivajz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
mafia2.pif
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-02 259584]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2011-02-13 19:29:29 ----D---- C:\Program Files\trend micro
2011-02-13 19:29:25 ----D---- C:\rsit
2011-02-12 11:37:45 ----D---- C:\ProgramData\Sun
2011-02-12 11:37:29 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-02-12 11:37:29 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-02-12 11:37:29 ----A---- C:\Windows\SYSWOW64\java.exe
2011-02-12 11:37:29 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-02-12 11:37:21 ----D---- C:\Program Files (x86)\Java
2011-02-12 11:19:49 ----A---- C:\Windows\SYSWOW64\fstextv66.dll
2011-02-12 11:19:49 ----A---- C:\Windows\SYSWOW64\faxzrh.DLL
2011-02-12 11:19:49 ----A---- C:\Windows\SYSWOW64\FAXUTIL.DLL
2011-02-12 11:19:47 ----A---- C:\Windows\SYSWOW64\wav2.dll
2011-02-12 11:19:47 ----A---- C:\Windows\SYSWOW64\unrar3.dll
2011-02-12 11:19:47 ----A---- C:\Windows\SYSWOW64\unacev2.dll
2011-02-12 11:19:45 ----D---- C:\Program Files (x86)\FileSee
2011-02-11 21:56:23 ----D---- C:\ProgramData\BioWare
2011-02-11 15:42:57 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-02-10 13:44:18 ----D---- C:\Users\Pivajz\AppData\Roaming\COWON
2011-02-10 13:42:52 ----D---- C:\Program Files (x86)\JetAudio
2011-02-09 21:49:14 ----D---- C:\Users\Pivajz\AppData\Roaming\Apple Computer
2011-02-09 21:46:12 ----D---- C:\ProgramData\CyberLink
2011-02-09 21:46:03 ----D---- C:\Program Files (x86)\CyberLink
2011-02-09 14:31:15 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-02-09 14:31:15 ----A---- C:\Windows\system32\mshtml.dll
2011-02-09 14:31:13 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-02-09 14:31:12 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-02-09 14:31:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-02-09 14:31:12 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-02-09 14:31:12 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-02-09 14:31:12 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-02-09 14:31:12 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-02-09 14:31:12 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-02-09 14:31:12 ----A---- C:\Windows\system32\mstime.dll
2011-02-09 14:31:12 ----A---- C:\Windows\system32\mshtmled.dll
2011-02-09 14:31:12 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-02-09 14:31:12 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-09 14:31:12 ----A---- C:\Windows\system32\licmgr10.dll
2011-02-09 14:31:12 ----A---- C:\Windows\system32\iertutil.dll
2011-02-09 14:31:12 ----A---- C:\Windows\system32\iepeers.dll
2011-02-09 14:31:12 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-09 14:31:11 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-02-09 14:31:11 ----A---- C:\Windows\system32\msfeedssync.exe
2011-02-09 14:31:01 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-02-09 14:31:01 ----A---- C:\Windows\system32\kerberos.dll
2011-02-09 14:30:59 ----A---- C:\Windows\system32\win32k.sys
2011-02-09 14:30:57 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-02-09 14:30:57 ----A---- C:\Windows\system32\urlmon.dll
2011-02-09 14:30:57 ----A---- C:\Windows\system32\upnp.dll
2011-02-09 14:30:57 ----A---- C:\Windows\system32\msxml6.dll
2011-02-09 14:30:57 ----A---- C:\Windows\system32\msxml3.dll
2011-02-09 14:30:56 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-02-09 14:30:56 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-02-09 14:30:56 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-02-09 14:30:56 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-02-09 14:30:56 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-02-09 14:30:56 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-02-09 14:30:56 ----A---- C:\Windows\system32\wscapi.dll
2011-02-09 14:30:56 ----A---- C:\Windows\system32\wininet.dll
2011-02-09 14:30:56 ----A---- C:\Windows\system32\winhttp.dll
2011-02-09 14:30:56 ----A---- C:\Windows\system32\WebClnt.dll
2011-02-09 14:30:56 ----A---- C:\Windows\system32\ieframe.dll
2011-02-09 14:30:56 ----A---- C:\Windows\system32\davclnt.dll
2011-02-09 14:30:55 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2011-02-09 14:30:55 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-02-09 14:30:55 ----A---- C:\Windows\SYSWOW64\slwga.dll
2011-02-09 14:30:55 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2011-02-09 14:30:55 ----A---- C:\Windows\system32\wscsvc.dll
2011-02-09 14:30:55 ----A---- C:\Windows\system32\slwga.dll
2011-02-09 14:30:54 ----A---- C:\Windows\system32\winsrv.dll
2011-02-09 14:30:52 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-02-09 14:30:52 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-02-09 14:30:52 ----A---- C:\Windows\system32\cdd.dll
2011-02-09 14:30:49 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-02-09 14:30:49 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-02-09 14:30:49 ----A---- C:\Windows\system32\vbscript.dll
2011-02-09 14:30:49 ----A---- C:\Windows\system32\jscript.dll
2011-02-09 14:30:46 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-02-09 14:30:46 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-02-09 14:30:46 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-02-09 14:30:46 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-09 14:30:46 ----A---- C:\Windows\system32\ntdll.dll
2011-02-09 14:30:44 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-02-09 14:30:44 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-02-09 14:30:44 ----A---- C:\Windows\system32\atmlib.dll
2011-02-09 14:30:44 ----A---- C:\Windows\system32\atmfd.dll
2011-02-01 17:34:00 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2011-02-01 16:25:19 ----D---- C:\ProgramData\Apple Computer
2011-02-01 16:25:19 ----D---- C:\Program Files (x86)\QuickTime
2011-02-01 16:24:32 ----D---- C:\ProgramData\Apple
2011-02-01 16:24:32 ----D---- C:\Program Files (x86)\Apple Software Update
2011-02-01 16:10:27 ----D---- C:\Program Files (x86)\WinClamAVShield
2011-01-30 21:24:42 ----A---- C:\Windows\glview.INI
2011-01-30 21:24:15 ----D---- C:\Program Files (x86)\realtech VR
2011-01-30 20:27:46 ----D---- C:\NVIDIA
2011-01-30 20:15:25 ----A---- C:\Windows\SYSWOW64\fmodex.dll
2011-01-30 20:13:51 ----A---- C:\Windows\SYSWOW64\fmod_event.dll
2011-01-30 20:12:55 ----D---- C:\Windows\SYSWOW64\fmod_event
2011-01-30 18:25:31 ----D---- C:\Windows\1C4551A64743409391E41477CD655043.TMP
2011-01-30 18:25:23 ----D---- C:\ProgramData\Media Center Programs
2011-01-30 18:16:52 ----D---- C:\Program Files (x86)\Dragon Age
2011-01-26 18:45:07 ----A---- C:\Windows\system32\MRT.exe
2011-01-26 18:44:57 ----D---- C:\Windows\SYSWOW64\RTCOM
2011-01-26 18:44:57 ----D---- C:\Program Files\Realtek
2011-01-25 23:02:02 ----D---- C:\Program Files (x86)\McAfee
2011-01-23 21:53:59 ----A---- C:\Windows\SYSWOW64\vorbis.dll
2011-01-23 21:53:48 ----A---- C:\Windows\SYSWOW64\eax.dll
2011-01-23 21:52:57 ----A---- C:\Windows\SYSWOW64\ogg.dll
2011-01-23 21:34:47 ----A---- C:\Windows\SYSWOW64\vorbisfile.dll
2011-01-23 21:34:33 ----A---- C:\Windows\SYSWOW64\binkw32.dll
2011-01-23 21:16:29 ----D---- C:\Program Files (x86)\Mafia 2
2011-01-23 20:35:49 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-01-23 20:35:49 ----D---- C:\Program Files (x86)\Rockstar Games
2011-01-22 15:32:47 ----D---- C:\Users\Pivajz\AppData\Roaming\Win7codecs
2011-01-22 15:30:58 ----D---- C:\Windows\system32\appmgmt
2011-01-22 13:22:32 ----HD---- C:\Windows\PIF
2011-01-20 01:14:12 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-01-20 01:14:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-01-20 01:14:12 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-01-20 01:14:12 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-01-20 01:14:10 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-01-20 00:37:25 ----D---- C:\Program Files (x86)\UltraISO
2011-01-19 23:07:39 ----D---- C:\Program Files (x86)\BitTorrent
2011-01-19 23:06:44 ----D---- C:\Users\Pivajz\AppData\Roaming\BitTorrent
2011-01-19 23:03:05 ----D---- C:\Program Files (x86)\TorrentMan
2011-01-19 23:03:05 ----D---- C:\Program Files (x86)\Conduit
2011-01-19 23:01:57 ----D---- C:\Program Files\BitLord2
2011-01-19 22:55:41 ----D---- C:\Program Files (x86)\TorrentForage
2011-01-19 22:55:31 ----A---- C:\ioY.ini
======List of files/folders modified in the last 1 months======
2011-02-13 19:29:55 ----D---- C:\Windows\Prefetch
2011-02-13 19:29:32 ----D---- C:\Windows\Temp
2011-02-13 19:29:29 ----RD---- C:\Program Files
2011-02-13 19:00:17 ----SHD---- C:\System Volume Information
2011-02-13 18:37:25 ----D---- C:\ProgramData\Spyware Terminator
2011-02-13 18:37:10 ----D---- C:\Program Files (x86)\Spyware Terminator
2011-02-13 18:31:35 ----D---- C:\Users\Pivajz\AppData\Roaming\Spyware Terminator
2011-02-13 18:21:24 ----D---- C:\Windows\System32
2011-02-13 18:21:24 ----D---- C:\Windows\inf
2011-02-13 18:21:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-13 09:40:06 ----D---- C:\Windows\system32\config
2011-02-12 12:07:57 ----SD---- C:\ProgramData\Microsoft
2011-02-12 11:37:45 ----SHD---- C:\Windows\Installer
2011-02-12 11:37:45 ----HD---- C:\ProgramData
2011-02-12 11:37:44 ----D---- C:\Program Files (x86)\Common Files
2011-02-12 11:37:29 ----D---- C:\Windows\SysWOW64
2011-02-12 11:37:21 ----RD---- C:\Program Files (x86)
2011-02-11 15:44:23 ----D---- C:\Windows\winsxs
2011-02-11 15:43:35 ----D---- C:\Windows\system32\DriverStore
2011-02-11 15:43:35 ----D---- C:\Windows\system32\drivers
2011-02-11 15:43:07 ----D---- C:\Windows\system32\catroot
2011-02-10 17:51:29 ----SD---- C:\Users\Pivajz\AppData\Roaming\Microsoft
2011-02-10 03:17:41 ----D---- C:\Program Files\Internet Explorer
2011-02-10 03:17:41 ----D---- C:\Program Files (x86)\Internet Explorer
2011-02-09 14:30:36 ----D---- C:\Windows\system32\catroot2
2011-02-02 21:03:19 ----D---- C:\Windows\system32\wdi
2011-02-02 21:00:25 ----D---- C:\totalcmd
2011-02-01 16:24:35 ----D---- C:\Windows\system32\Tasks
2011-01-31 19:48:51 ----D---- C:\Windows\SYSWOW64\config
2011-01-31 19:11:18 ----RSD---- C:\Windows\assembly
2011-01-30 21:24:42 ----D---- C:\Windows
2011-01-29 15:33:25 ----D---- C:\hry
2011-01-27 01:06:40 ----D---- C:\Windows\Microsoft.NET
2011-01-26 18:54:25 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-01-26 18:54:25 ----D---- C:\Windows\system32\cs-CZ
2011-01-26 18:51:46 ----D---- C:\Windows\SYSWOW64\en-US
2011-01-26 18:51:46 ----D---- C:\Windows\system32\en-US
2011-01-26 18:51:46 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-01-26 18:45:07 ----D---- C:\Windows\debug
2011-01-26 18:40:24 ----D---- C:\Windows\Logs
2011-01-25 23:02:03 ----D---- C:\ProgramData\McAfee
2011-01-22 15:32:47 ----D---- C:\ProgramData\Win7codecs
2011-01-19 23:03:05 ----RD---- C:\Users
2011-01-18 23:01:35 ----D---- C:\Program Files (x86)\McAfee Security Scan
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-01-10 254528]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [2010-01-29 115600]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2010-07-07 50696]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-09-02 7369728]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-09-07 2484072]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe [2010-11-24 101048]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-01-14 242048]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe [2011-02-01 948775]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-10 1255736]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
prosim o kontrolu logu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 119506
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosim o kontrolu logu
Odinstalujte AskBar. Jinak čisto.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosim o kontrolu logu
Dekuji !
- Rudy
- Site Admin
- Příspěvky: 119506
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosim o kontrolu logu
Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.