Re: zonealarm hlásí trojana
Napsal: 29 kvě 2010 15:21
Logfile of random's system information tool 1.07 (written by random/random)
Run by Pita at 2010-05-29 16:20:46
Systém Microsoft Windows XP Professional Service Pack 2
System drive L: has 77 GB (90%) free of 85 GB
Total RAM: 2047 MB (78% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:20:50, on 29.5.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
L:\WINDOWS\System32\smss.exe
L:\WINDOWS\system32\winlogon.exe
L:\WINDOWS\system32\services.exe
L:\WINDOWS\system32\lsass.exe
L:\WINDOWS\system32\Ati2evxx.exe
L:\WINDOWS\system32\svchost.exe
L:\WINDOWS\System32\svchost.exe
L:\WINDOWS\system32\ZoneLabs\vsmon.exe
L:\WINDOWS\system32\Ati2evxx.exe
L:\WINDOWS\Explorer.EXE
L:\Program Files\Alwil Software\Avast5\AvastSvc.exe
L:\WINDOWS\system32\spoolsv.exe
L:\Program Files\Java\jre6\bin\jqs.exe
L:\WINDOWS\system32\wbem\wmiapsrv.exe
L:\WINDOWS\system32\wscntfy.exe
L:\WINDOWS\RTHDCPL.EXE
L:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
L:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe
L:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe
L:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
L:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
L:\WINDOWS\system32\ctfmon.exe
L:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
L:\Program Files\DAEMON Tools\daemon.exe
L:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
L:\Program Files\Opera\opera.exe
L:\totalcmd\TOTALCMD.EXE
E:\net- foto bordel\RSIT.exe
L:\Program Files\trend micro\Pita.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - L:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - L:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [StartCCC] "L:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Ai Nap] "L:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [CPU Power Monitor] "L:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe"
O4 - HKLM\..\Run: [Cpu Level Up help] L:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "L:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast5] L:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] L:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "L:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] L:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] L:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] L:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] L:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O16 - DPF: {861FDA2A-2B57-4BDA-8B8B-305C9D5D8604} (_Multimedia Player) - http://stream.pussyharem.com/stream/mmp3.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - L:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - L:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - L:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - L:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - L:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - L:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - L:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - L:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Dragon Age: Prameny - aktualizace obsahu (DAUpdaterSvc) - BioWare - E:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - L:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - L:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 4403 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - L:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-04 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - L:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-05-04 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=L:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"RTHDCPL"=L:\WINDOWS\RTHDCPL.EXE [2007-08-10 16384000]
"Alcmtr"=L:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"Ai Nap"=L:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe [2007-09-06 1426432]
"CPU Power Monitor"=L:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe [2007-09-06 626688]
"Cpu Level Up help"=L:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe [2007-09-11 880640]
"ZoneAlarm Client"=L:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2008-07-09 919016]
"avast5"=L:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=L:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"DAEMON Tools"=L:\Program Files\DAEMON Tools\daemon.exe [2007-04-04 165784]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
E:\Program Files\QuickTime\QTTask.exe [2010-02-15 417792]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
L:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
L:\WINDOWS\system32\Ati2evxx.dll [2007-11-02 122880]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoDriveAutoRun"=255
"HonorAutoRunSetting"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"E:\DRAGON RISING\OFDR.exe"="E:\DRAGON RISING\OFDR.exe:*:Enabled:OF Dragon Rising"
"E:\Resolume 2.4\resolume.exe"="E:\Resolume 2.4\resolume.exe:*:Enabled:Resolume 2.4 beta"
"E:\Program Files\Dragon Age\bin_ship\daorigins.exe"="E:\Program Files\Dragon Age\bin_ship\daorigins.exe:*:Enabled:Dragon Age Prameny Hra"
"E:\Program Files\Dragon Age\DAOriginsLauncher.exe"="E:\Program Files\Dragon Age\DAOriginsLauncher.exe:*:Enabled:Dragon Age Prameny Spustit"
"E:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe"="E:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe:*:Enabled:Dragon Age Prameny Aktualizovat"
"L:\Program Files\Opera\opera.exe"="L:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"L:\Program Files\SecondLife\SLVoice.exe"="L:\Program Files\SecondLife\SLVoice.exe:*:Enabled:SLVoice"
"L:\Program Files\Skype\Phone\Skype.exe"="L:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2010-05-29 16:20:46 ----D---- L:\rsit
2010-05-29 16:14:30 ----D---- L:\Program Files\CCleaner
2010-05-28 10:36:35 ----A---- L:\WINDOWS\system32\aswBoot.exe
2010-05-28 10:36:27 ----D---- L:\Program Files\Alwil Software
2010-05-28 10:36:27 ----D---- L:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-05-26 21:37:44 ----RASHD---- L:\autorun.inf
2010-05-26 21:31:30 ----A---- L:\UsbFix.txt
2010-05-26 21:24:19 ----D---- L:\UsbFix
2010-05-26 20:05:27 ----D---- L:\Program Files\trend micro
2010-05-25 13:05:53 ----D---- L:\WINDOWS\pss
2010-05-25 12:35:58 ----D---- L:\Documents and Settings\Pita\Data aplikací\MailFrontier
2010-05-25 12:28:33 ----D---- L:\Documents and Settings\Pita\Data aplikací\Thinstall
2010-05-25 12:25:48 ----D---- L:\Documents and Settings\All Users\Data aplikací\MailFrontier
2010-05-25 12:25:33 ----A---- L:\WINDOWS\zllsputility.exe
2010-05-25 12:25:14 ----A---- L:\WINDOWS\system32\vsregexp.dll
2010-05-25 12:25:14 ----A---- L:\WINDOWS\system32\libeay32_0.9.6l.dll
2010-05-25 12:25:08 ----A---- L:\WINDOWS\system32\zlcommdb.dll
2010-05-25 12:25:08 ----A---- L:\WINDOWS\system32\zlcomm.dll
2010-05-25 12:25:06 ----A---- L:\WINDOWS\system32\vswmi.dll
2010-05-25 12:25:05 ----A---- L:\WINDOWS\system32\zpeng24.dll
2010-05-25 12:25:04 ----D---- L:\WINDOWS\system32\ZoneLabs
2010-05-25 12:25:04 ----D---- L:\Program Files\Zone Labs
2010-05-25 12:25:04 ----A---- L:\WINDOWS\system32\vsxml.dll
2010-05-25 12:25:04 ----A---- L:\WINDOWS\system32\vspubapi.dll
2010-05-25 12:25:04 ----A---- L:\WINDOWS\system32\vsmonapi.dll
2010-05-25 12:24:39 ----D---- L:\WINDOWS\Internet Logs
2010-05-25 12:24:39 ----A---- L:\WINDOWS\system32\vsutil.dll
2010-05-25 12:24:39 ----A---- L:\WINDOWS\system32\vsinit.dll
2010-05-25 12:24:39 ----A---- L:\WINDOWS\system32\vsdata.dll
2010-05-25 12:16:36 ----D---- L:\Program Files\ESET
2010-05-15 18:48:20 ----D---- L:\Program Files\OpenAL
2010-05-15 18:48:20 ----A---- L:\WINDOWS\system32\wrap_oal.dll
2010-05-15 18:48:20 ----A---- L:\WINDOWS\system32\OpenAL32.dll
2010-05-15 18:47:56 ----D---- L:\Program Files\RedLynx
2010-05-04 02:58:58 ----D---- L:\Program Files\Common Files\Java
2010-05-04 02:58:47 ----A---- L:\WINDOWS\system32\javaws.exe
2010-05-04 02:58:47 ----A---- L:\WINDOWS\system32\javaw.exe
2010-05-04 02:58:47 ----A---- L:\WINDOWS\system32\java.exe
2010-05-04 02:58:34 ----D---- L:\Program Files\Java
======List of files/folders modified in the last 1 months======
2010-05-29 16:16:14 ----D---- L:\WINDOWS\Debug
2010-05-29 16:16:14 ----D---- L:\WINDOWS
2010-05-29 16:15:21 ----D---- L:\WINDOWS\Prefetch
2010-05-29 16:14:30 ----RD---- L:\Program Files
2010-05-29 16:12:06 ----D---- L:\WINDOWS\Temp
2010-05-29 16:09:40 ----N---- L:\WINDOWS\SchedLgU.Txt
2010-05-29 15:07:41 ----D---- L:\Documents and Settings\Pita\Data aplikací\Skype
2010-05-29 14:48:59 ----D---- L:\Documents and Settings\Pita\Data aplikací\skypePM
2010-05-29 14:42:00 ----SHD---- L:\System Volume Information
2010-05-29 14:42:00 ----D---- L:\WINDOWS\system32\Restore
2010-05-29 14:40:52 ----D---- L:\WINDOWS\system32
2010-05-28 12:50:23 ----D---- L:\WINDOWS\system32\CatRoot2
2010-05-28 10:38:21 ----D---- L:\WINDOWS\system32\drivers
2010-05-28 10:36:56 ----SHD---- L:\WINDOWS\Installer
2010-05-28 10:36:55 ----D---- L:\WINDOWS\WinSxS
2010-05-26 21:37:33 ----SHD---- L:\RECYCLER
2010-05-26 21:21:15 ----D---- L:\Program Files\Messenger
2010-05-25 21:12:00 ----A---- L:\WINDOWS\system32\msvcsv60.dll
2010-05-25 20:38:33 ----A---- L:\WINDOWS\system32\ssprs.dll
2010-05-25 20:38:33 ----A---- L:\WINDOWS\system32\lsprst7.dll
2010-05-25 15:34:48 ----HD---- L:\WINDOWS\inf
2010-05-25 13:07:19 ----A---- L:\WINDOWS\win.ini
2010-05-25 13:07:19 ----A---- L:\WINDOWS\system.ini
2010-05-19 00:25:23 ----D---- L:\Documents and Settings\Pita\Data aplikací\gtk-2.0
2010-05-16 16:34:19 ----D---- L:\Program Files\Native Instruments
2010-05-14 06:08:57 ----SD---- L:\WINDOWS\Tasks
2010-05-04 02:58:58 ----D---- L:\Program Files\Common Files
2010-05-04 02:58:37 ----A---- L:\WINDOWS\system32\deploytk.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; L:\WINDOWS\system32\drivers\Aavmker4.sys [2010-05-06 28880]
R1 AsIO;AsIO; L:\WINDOWS\system32\drivers\AsIO.sys [2006-10-18 12664]
R1 aswSP;aswSP; L:\WINDOWS\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; L:\WINDOWS\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 intelppm;Řadič procesoru Intel; L:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 KLIF;KLIF; L:\WINDOWS\system32\DRIVERS\klif.sys [2007-07-19 127768]
R1 vsdatant;vsdatant; L:\WINDOWS\System32\vsdatant.sys [2008-07-09 394952]
R2 aswFsBlk;aswFsBlk; L:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMon2;aswMon2; L:\WINDOWS\system32\drivers\aswMon2.sys [2010-05-06 100432]
R3 Arp1394;Protokol 1394 ARP Client; L:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
R3 aswRdr;aswRdr; L:\WINDOWS\system32\drivers\aswRdr.sys [2010-05-06 23376]
R3 ati2mtag;ati2mtag; L:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-11-02 2644480]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; L:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; L:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); L:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-08-10 4603904]
R3 MTsensor;ATK0110 ACPI UTILITY; L:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; L:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; L:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Rozbočovač umožnující USB2; L:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; L:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-04 20480]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; L:\WINDOWS\system32\DRIVERS\yk51x86.sys [2007-08-15 265856]
S3 apuln1nj;apuln1nj; L:\WINDOWS\system32\drivers\apuln1nj.sys []
S3 MA_CMIDI;%EVOL_USB.SvcDesc%; L:\WINDOWS\system32\drivers\ma_cmidi.sys [2005-06-14 21888]
S3 pgusbmme;usb-audio.de MME-Adapter; L:\WINDOWS\system32\drivers\pgusbmm3.sys [2007-09-19 32768]
S3 usbaudio;Ovladač zvukové karty USB (WDM); L:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-04 59264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; L:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; L:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 uw500usb;usb-audio.de driver for Yamaha UW500; L:\WINDOWS\System32\Drivers\uw500usb.sys [2007-09-19 340992]
S4 IntelIde;IntelIde; L:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; L:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Ati HotKey Poller;Ati HotKey Poller; L:\WINDOWS\system32\Ati2evxx.exe [2007-11-02 495616]
R2 avast! Antivirus;avast! Antivirus; L:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 JavaQuickStarterService;Java Quick Starter; L:\Program Files\Java\jre6\bin\jqs.exe [2010-05-04 153376]
R2 vsmon;TrueVector Internet Monitor; L:\WINDOWS\system32\ZoneLabs\vsmon.exe [2008-07-09 75304]
R3 avast! Mail Scanner;avast! Mail Scanner; L:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; L:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S2 ATI Smart;ATI Smart; L:\WINDOWS\system32\ati2sgag.exe [2007-11-01 593920]
S3 aspnet_state;ASP.NET State Service; L:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; L:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; E:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
Run by Pita at 2010-05-29 16:20:46
Systém Microsoft Windows XP Professional Service Pack 2
System drive L: has 77 GB (90%) free of 85 GB
Total RAM: 2047 MB (78% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:20:50, on 29.5.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
L:\WINDOWS\System32\smss.exe
L:\WINDOWS\system32\winlogon.exe
L:\WINDOWS\system32\services.exe
L:\WINDOWS\system32\lsass.exe
L:\WINDOWS\system32\Ati2evxx.exe
L:\WINDOWS\system32\svchost.exe
L:\WINDOWS\System32\svchost.exe
L:\WINDOWS\system32\ZoneLabs\vsmon.exe
L:\WINDOWS\system32\Ati2evxx.exe
L:\WINDOWS\Explorer.EXE
L:\Program Files\Alwil Software\Avast5\AvastSvc.exe
L:\WINDOWS\system32\spoolsv.exe
L:\Program Files\Java\jre6\bin\jqs.exe
L:\WINDOWS\system32\wbem\wmiapsrv.exe
L:\WINDOWS\system32\wscntfy.exe
L:\WINDOWS\RTHDCPL.EXE
L:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
L:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe
L:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe
L:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
L:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
L:\WINDOWS\system32\ctfmon.exe
L:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
L:\Program Files\DAEMON Tools\daemon.exe
L:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
L:\Program Files\Opera\opera.exe
L:\totalcmd\TOTALCMD.EXE
E:\net- foto bordel\RSIT.exe
L:\Program Files\trend micro\Pita.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - L:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - L:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [StartCCC] "L:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Ai Nap] "L:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [CPU Power Monitor] "L:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe"
O4 - HKLM\..\Run: [Cpu Level Up help] L:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "L:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast5] L:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] L:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "L:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] L:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] L:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] L:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] L:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O16 - DPF: {861FDA2A-2B57-4BDA-8B8B-305C9D5D8604} (_Multimedia Player) - http://stream.pussyharem.com/stream/mmp3.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - L:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - L:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - L:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - L:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - L:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - L:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - L:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - L:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Dragon Age: Prameny - aktualizace obsahu (DAUpdaterSvc) - BioWare - E:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - L:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - L:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 4403 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - L:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-04 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - L:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-05-04 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=L:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"RTHDCPL"=L:\WINDOWS\RTHDCPL.EXE [2007-08-10 16384000]
"Alcmtr"=L:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"Ai Nap"=L:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe [2007-09-06 1426432]
"CPU Power Monitor"=L:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe [2007-09-06 626688]
"Cpu Level Up help"=L:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe [2007-09-11 880640]
"ZoneAlarm Client"=L:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2008-07-09 919016]
"avast5"=L:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=L:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"DAEMON Tools"=L:\Program Files\DAEMON Tools\daemon.exe [2007-04-04 165784]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
E:\Program Files\QuickTime\QTTask.exe [2010-02-15 417792]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
L:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
L:\WINDOWS\system32\Ati2evxx.dll [2007-11-02 122880]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoDriveAutoRun"=255
"HonorAutoRunSetting"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"E:\DRAGON RISING\OFDR.exe"="E:\DRAGON RISING\OFDR.exe:*:Enabled:OF Dragon Rising"
"E:\Resolume 2.4\resolume.exe"="E:\Resolume 2.4\resolume.exe:*:Enabled:Resolume 2.4 beta"
"E:\Program Files\Dragon Age\bin_ship\daorigins.exe"="E:\Program Files\Dragon Age\bin_ship\daorigins.exe:*:Enabled:Dragon Age Prameny Hra"
"E:\Program Files\Dragon Age\DAOriginsLauncher.exe"="E:\Program Files\Dragon Age\DAOriginsLauncher.exe:*:Enabled:Dragon Age Prameny Spustit"
"E:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe"="E:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe:*:Enabled:Dragon Age Prameny Aktualizovat"
"L:\Program Files\Opera\opera.exe"="L:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"L:\Program Files\SecondLife\SLVoice.exe"="L:\Program Files\SecondLife\SLVoice.exe:*:Enabled:SLVoice"
"L:\Program Files\Skype\Phone\Skype.exe"="L:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2010-05-29 16:20:46 ----D---- L:\rsit
2010-05-29 16:14:30 ----D---- L:\Program Files\CCleaner
2010-05-28 10:36:35 ----A---- L:\WINDOWS\system32\aswBoot.exe
2010-05-28 10:36:27 ----D---- L:\Program Files\Alwil Software
2010-05-28 10:36:27 ----D---- L:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-05-26 21:37:44 ----RASHD---- L:\autorun.inf
2010-05-26 21:31:30 ----A---- L:\UsbFix.txt
2010-05-26 21:24:19 ----D---- L:\UsbFix
2010-05-26 20:05:27 ----D---- L:\Program Files\trend micro
2010-05-25 13:05:53 ----D---- L:\WINDOWS\pss
2010-05-25 12:35:58 ----D---- L:\Documents and Settings\Pita\Data aplikací\MailFrontier
2010-05-25 12:28:33 ----D---- L:\Documents and Settings\Pita\Data aplikací\Thinstall
2010-05-25 12:25:48 ----D---- L:\Documents and Settings\All Users\Data aplikací\MailFrontier
2010-05-25 12:25:33 ----A---- L:\WINDOWS\zllsputility.exe
2010-05-25 12:25:14 ----A---- L:\WINDOWS\system32\vsregexp.dll
2010-05-25 12:25:14 ----A---- L:\WINDOWS\system32\libeay32_0.9.6l.dll
2010-05-25 12:25:08 ----A---- L:\WINDOWS\system32\zlcommdb.dll
2010-05-25 12:25:08 ----A---- L:\WINDOWS\system32\zlcomm.dll
2010-05-25 12:25:06 ----A---- L:\WINDOWS\system32\vswmi.dll
2010-05-25 12:25:05 ----A---- L:\WINDOWS\system32\zpeng24.dll
2010-05-25 12:25:04 ----D---- L:\WINDOWS\system32\ZoneLabs
2010-05-25 12:25:04 ----D---- L:\Program Files\Zone Labs
2010-05-25 12:25:04 ----A---- L:\WINDOWS\system32\vsxml.dll
2010-05-25 12:25:04 ----A---- L:\WINDOWS\system32\vspubapi.dll
2010-05-25 12:25:04 ----A---- L:\WINDOWS\system32\vsmonapi.dll
2010-05-25 12:24:39 ----D---- L:\WINDOWS\Internet Logs
2010-05-25 12:24:39 ----A---- L:\WINDOWS\system32\vsutil.dll
2010-05-25 12:24:39 ----A---- L:\WINDOWS\system32\vsinit.dll
2010-05-25 12:24:39 ----A---- L:\WINDOWS\system32\vsdata.dll
2010-05-25 12:16:36 ----D---- L:\Program Files\ESET
2010-05-15 18:48:20 ----D---- L:\Program Files\OpenAL
2010-05-15 18:48:20 ----A---- L:\WINDOWS\system32\wrap_oal.dll
2010-05-15 18:48:20 ----A---- L:\WINDOWS\system32\OpenAL32.dll
2010-05-15 18:47:56 ----D---- L:\Program Files\RedLynx
2010-05-04 02:58:58 ----D---- L:\Program Files\Common Files\Java
2010-05-04 02:58:47 ----A---- L:\WINDOWS\system32\javaws.exe
2010-05-04 02:58:47 ----A---- L:\WINDOWS\system32\javaw.exe
2010-05-04 02:58:47 ----A---- L:\WINDOWS\system32\java.exe
2010-05-04 02:58:34 ----D---- L:\Program Files\Java
======List of files/folders modified in the last 1 months======
2010-05-29 16:16:14 ----D---- L:\WINDOWS\Debug
2010-05-29 16:16:14 ----D---- L:\WINDOWS
2010-05-29 16:15:21 ----D---- L:\WINDOWS\Prefetch
2010-05-29 16:14:30 ----RD---- L:\Program Files
2010-05-29 16:12:06 ----D---- L:\WINDOWS\Temp
2010-05-29 16:09:40 ----N---- L:\WINDOWS\SchedLgU.Txt
2010-05-29 15:07:41 ----D---- L:\Documents and Settings\Pita\Data aplikací\Skype
2010-05-29 14:48:59 ----D---- L:\Documents and Settings\Pita\Data aplikací\skypePM
2010-05-29 14:42:00 ----SHD---- L:\System Volume Information
2010-05-29 14:42:00 ----D---- L:\WINDOWS\system32\Restore
2010-05-29 14:40:52 ----D---- L:\WINDOWS\system32
2010-05-28 12:50:23 ----D---- L:\WINDOWS\system32\CatRoot2
2010-05-28 10:38:21 ----D---- L:\WINDOWS\system32\drivers
2010-05-28 10:36:56 ----SHD---- L:\WINDOWS\Installer
2010-05-28 10:36:55 ----D---- L:\WINDOWS\WinSxS
2010-05-26 21:37:33 ----SHD---- L:\RECYCLER
2010-05-26 21:21:15 ----D---- L:\Program Files\Messenger
2010-05-25 21:12:00 ----A---- L:\WINDOWS\system32\msvcsv60.dll
2010-05-25 20:38:33 ----A---- L:\WINDOWS\system32\ssprs.dll
2010-05-25 20:38:33 ----A---- L:\WINDOWS\system32\lsprst7.dll
2010-05-25 15:34:48 ----HD---- L:\WINDOWS\inf
2010-05-25 13:07:19 ----A---- L:\WINDOWS\win.ini
2010-05-25 13:07:19 ----A---- L:\WINDOWS\system.ini
2010-05-19 00:25:23 ----D---- L:\Documents and Settings\Pita\Data aplikací\gtk-2.0
2010-05-16 16:34:19 ----D---- L:\Program Files\Native Instruments
2010-05-14 06:08:57 ----SD---- L:\WINDOWS\Tasks
2010-05-04 02:58:58 ----D---- L:\Program Files\Common Files
2010-05-04 02:58:37 ----A---- L:\WINDOWS\system32\deploytk.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; L:\WINDOWS\system32\drivers\Aavmker4.sys [2010-05-06 28880]
R1 AsIO;AsIO; L:\WINDOWS\system32\drivers\AsIO.sys [2006-10-18 12664]
R1 aswSP;aswSP; L:\WINDOWS\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; L:\WINDOWS\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 intelppm;Řadič procesoru Intel; L:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 KLIF;KLIF; L:\WINDOWS\system32\DRIVERS\klif.sys [2007-07-19 127768]
R1 vsdatant;vsdatant; L:\WINDOWS\System32\vsdatant.sys [2008-07-09 394952]
R2 aswFsBlk;aswFsBlk; L:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMon2;aswMon2; L:\WINDOWS\system32\drivers\aswMon2.sys [2010-05-06 100432]
R3 Arp1394;Protokol 1394 ARP Client; L:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
R3 aswRdr;aswRdr; L:\WINDOWS\system32\drivers\aswRdr.sys [2010-05-06 23376]
R3 ati2mtag;ati2mtag; L:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-11-02 2644480]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; L:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; L:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); L:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-08-10 4603904]
R3 MTsensor;ATK0110 ACPI UTILITY; L:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; L:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; L:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Rozbočovač umožnující USB2; L:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; L:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-04 20480]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; L:\WINDOWS\system32\DRIVERS\yk51x86.sys [2007-08-15 265856]
S3 apuln1nj;apuln1nj; L:\WINDOWS\system32\drivers\apuln1nj.sys []
S3 MA_CMIDI;%EVOL_USB.SvcDesc%; L:\WINDOWS\system32\drivers\ma_cmidi.sys [2005-06-14 21888]
S3 pgusbmme;usb-audio.de MME-Adapter; L:\WINDOWS\system32\drivers\pgusbmm3.sys [2007-09-19 32768]
S3 usbaudio;Ovladač zvukové karty USB (WDM); L:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-04 59264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; L:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; L:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 uw500usb;usb-audio.de driver for Yamaha UW500; L:\WINDOWS\System32\Drivers\uw500usb.sys [2007-09-19 340992]
S4 IntelIde;IntelIde; L:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; L:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Ati HotKey Poller;Ati HotKey Poller; L:\WINDOWS\system32\Ati2evxx.exe [2007-11-02 495616]
R2 avast! Antivirus;avast! Antivirus; L:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 JavaQuickStarterService;Java Quick Starter; L:\Program Files\Java\jre6\bin\jqs.exe [2010-05-04 153376]
R2 vsmon;TrueVector Internet Monitor; L:\WINDOWS\system32\ZoneLabs\vsmon.exe [2008-07-09 75304]
R3 avast! Mail Scanner;avast! Mail Scanner; L:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; L:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S2 ATI Smart;ATI Smart; L:\WINDOWS\system32\ati2sgag.exe [2007-11-01 593920]
S3 aspnet_state;ASP.NET State Service; L:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; L:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; E:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
Doinstalujte SP3 
ať se daří