BSOD- spustila sa mi obrazovka smrti
Napsal: 27 dub 2010 15:43
Dobry den potreboval by som poradit:
pri zapnuti firefoxu alebo nejakej hry sa mi nahodne spusti obrazovka smrti a PC sa resetne a to chodi vzdy dookola.Nevedeli by ste mi prosim pomoct?
Tu je log :
Logfile of random's system information tool 1.06 (written by random/random)
Run by Robert at 2010-04-27 16:27:31
Microsoft Windows 7 Professional Service Pack 3
System drive C: has 363 GB (80%) free of 454 GB
Total RAM: 3324 MB (69% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:27:48, on 27. 4. 2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\ToolboxFX\bin\HPTLBXFX.exe
C:\Program Files\HP\hp laserjet m1522\hppfaxprintersrv.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\ICQ7.1\ICQ.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\explorer.exe
C:\Users\Robert\Downloads\RSIT(2).exe
C:\Program Files\trend micro\Robert.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ToolBoxFX] "C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [HP LaserJet M1522 MFP Series Fax] C:\Program Files\HP\hp LaserJet M1522\hppfaxprintersrv.exe "HP LaserJet M1522 MFP Series Fax"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files\HP\HP UT\bin\hppusg.exe" "C:\Program Files\HP\HP UT\"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
--
End of file - 7655 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-05 279664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-04-05 812528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-05 279664]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-06-20 442433]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-03-09 2769336]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-03-26 142120]
"ToolBoxFX"=C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe [2009-12-03 53248]
"HP LaserJet M1522 MFP Series Fax"=C:\Program Files\HP\hp LaserJet M1522\hppfaxprintersrv.exe [2009-09-22 2453504]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
""= []
"HPUsageTracking"=C:\Program Files\HP\HP UT\bin\hppusg.exe [2007-08-31 36864]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-05-18 2363392]
"ICQ"=C:\Program Files\ICQ7.1\ICQ.exe [2010-04-06 133368]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"LegalNoticeText"=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bfd7fca5-3f1d-11df-a25e-806e6f6e6963}]
shell\AutoRun\command - E:\BlueBirds.exe
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-04-27 16:24:59 ----D---- C:\rsit
2010-04-27 16:24:59 ----D---- C:\Program Files\trend micro
2010-04-27 16:02:16 ----A---- C:\Windows\ntbtlog.txt
2010-04-24 18:53:54 ----D---- C:\Program Files\TuneUpMedia
2010-04-24 18:47:13 ----D---- C:\Users\Robert\AppData\Roaming\TuneUpMedia
2010-04-24 18:47:12 ----D---- C:\ProgramData\TuneUpMedia
2010-04-24 18:45:36 ----D---- C:\Users\Robert\AppData\Roaming\OpenCandy
2010-04-24 18:45:32 ----D---- C:\Users\Robert\AppData\Roaming\AnvSoft
2010-04-24 18:45:30 ----D---- C:\Program Files\AnvSoft
2010-04-20 22:58:11 ----D---- C:\ProgramData\Blizzard Entertainment
2010-04-18 20:57:01 ----D---- C:\ProgramData\Blizzard
2010-04-18 20:52:17 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-04-15 20:30:34 ----D---- C:\Users\Robert\AppData\Roaming\WinRAR
2010-04-14 14:07:29 ----A---- C:\Windows\system32\vbscript.dll
2010-04-14 14:07:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-14 14:07:29 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-14 14:07:25 ----A---- C:\Windows\system32\wintrust.dll
2010-04-14 14:07:18 ----A---- C:\Windows\system32\cabview.dll
2010-04-09 15:41:59 ----D---- C:\Users\Robert\AppData\Roaming\IrfanView
2010-04-08 17:37:03 ----D---- C:\Users\Robert\AppData\Roaming\Hamachi
2010-04-08 17:36:49 ----D---- C:\Program Files\Hamachi
2010-04-08 10:09:30 ----D---- C:\Windows\Minidump
2010-04-07 16:01:13 ----D---- C:\Users\Robert\AppData\Roaming\Leadertech
2010-04-07 15:55:08 ----D---- C:\Program Files\EA Sports
2010-04-07 15:55:07 ----A---- C:\Windows\system32\xinput1_3.dll
2010-04-07 15:55:07 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-04-07 15:55:07 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-04-07 15:55:07 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-04-07 15:55:07 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-04-07 15:55:07 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-04-07 15:55:06 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-04-07 15:55:02 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-04-07 15:55:01 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-04-07 15:55:01 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-04-07 15:55:01 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-04-07 15:55:01 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-04-07 15:55:01 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-04-07 15:43:46 ----D---- C:\Users\Robert\AppData\Roaming\Corel
2010-04-07 15:39:09 ----D---- C:\Users\Robert\AppData\Roaming\ACD Systems
2010-04-06 19:07:14 ----D---- C:\Users\Robert\AppData\Roaming\Google
2010-04-06 19:07:06 ----D---- C:\Program Files\ICQ6Toolbar
2010-04-06 19:07:04 ----D---- C:\ProgramData\ICQ
2010-04-06 19:06:47 ----D---- C:\Users\Robert\AppData\Roaming\ICQ
2010-04-06 19:06:45 ----D---- C:\Program Files\ICQ7.1
2010-04-06 18:56:08 ----D---- C:\Users\Robert\AppData\Roaming\Apple Computer
2010-04-06 18:56:02 ----D---- C:\Users\Robert\AppData\Roaming\HP
2010-04-06 18:39:48 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-04-06 18:39:48 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-04-06 18:37:13 ----D---- C:\ProgramData\Adobe
2010-04-06 18:37:09 ----D---- C:\Program Files\Common Files\Adobe
2010-04-06 18:37:09 ----D---- C:\Program Files\Adobe
2010-04-06 18:19:50 ----D---- C:\ProgramData\HPSSUPPLY
2010-04-06 18:18:53 ----N---- C:\Windows\system32\hppfaxprintermonui5.dll
2010-04-06 18:18:53 ----N---- C:\Windows\system32\hppfaxprintermon5.dll
2010-04-06 18:18:53 ----A---- C:\Windows\system32\hppfaxprinter5.ini
2010-04-06 18:17:46 ----A---- C:\Windows\hpbvspst.ini
2010-04-06 18:17:28 ----D---- C:\ProgramData\Hewlett-Packard
2010-04-06 18:17:10 ----A---- C:\Windows\system32\hppcpr08.dll
2010-04-06 18:17:05 ----A---- C:\Windows\system32\hpcpn093.dll
2010-04-06 18:17:05 ----A---- C:\Windows\system32\fxcompchannel.dll
2010-04-06 18:16:54 ----HD---- C:\Config.Msi
2010-04-06 18:16:54 ----D---- C:\Program Files\HP
2010-04-06 18:16:23 ----A---- C:\Windows\system32\hpxp1522.dll
2010-04-06 18:16:23 ----A---- C:\Windows\system32\hpptsp03.dll
2010-04-06 18:16:22 ----A---- C:\Windows\system32\hppcew08.dll
2010-04-06 18:16:22 ----A---- C:\Windows\system32\hppasc08.dll
2010-04-06 18:15:52 ----D---- C:\M1522_Full_Solution_Win7_4_3_EMEA2
2010-04-06 17:49:32 ----D---- C:\ProgramData\HP
2010-04-05 20:57:27 ----DC---- C:\Windows\system32\DRVSTORE
2010-04-05 20:57:27 ----A---- C:\Windows\system32\GEARAspi.dll
2010-04-05 20:57:09 ----D---- C:\Program Files\iPod
2010-04-05 20:57:08 ----D---- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-04-05 20:57:08 ----D---- C:\Program Files\iTunes
2010-04-05 20:56:33 ----D---- C:\ProgramData\Apple Computer
2010-04-05 20:56:33 ----D---- C:\Program Files\QuickTime
2010-04-05 20:56:26 ----D---- C:\Program Files\Apple Software Update
2010-04-05 20:56:11 ----D---- C:\Program Files\Bonjour
2010-04-05 20:56:02 ----D---- C:\ProgramData\Apple
2010-04-05 20:56:02 ----D---- C:\Program Files\Common Files\Apple
2010-04-05 20:33:33 ----D---- C:\ProgramData\Google
2010-04-05 20:33:33 ----D---- C:\Program Files\Google
2010-04-05 20:33:30 ----D---- C:\Program Files\IrfanView
2010-04-05 20:18:17 ----D---- C:\Program Files\Audacity
2010-04-05 19:43:25 ----D---- C:\Program Files\Revelation Natural Art SK
2010-04-05 19:02:44 ----D---- C:\Program Files\WinSnap
2010-04-04 10:55:39 ----D---- C:\ProgramData\InstallShield
2010-04-04 10:54:29 ----D---- C:\Program Files\Common Files\Corel
2010-04-04 10:53:56 ----D---- C:\Program Files\Corel
2010-04-04 10:43:41 ----A---- C:\Windows\NeroDigital.ini
2010-04-04 10:39:08 ----D---- C:\ProgramData\LightScribe
2010-04-04 10:35:38 ----A---- C:\Windows\Irremote.ini
2010-04-04 10:28:02 ----D---- C:\Program Files\Nero
2010-04-04 10:27:43 ----D---- C:\ProgramData\Nero
2010-04-04 10:27:41 ----D---- C:\Program Files\Common Files\Nero
2010-04-04 10:27:32 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-04-04 10:26:56 ----D---- C:\Program Files\Common Files\LightScribe
2010-04-04 08:08:01 ----A---- C:\Windows\system32\msv1_0.dll
2010-04-04 08:06:37 ----A---- C:\Windows\system32\MRT.exe
2010-04-04 08:06:22 ----A---- C:\Windows\system32\browserchoice.exe
2010-04-04 07:45:59 ----A---- C:\Windows\system32\mshtml.dll
2010-04-04 07:45:58 ----A---- C:\Windows\system32\urlmon.dll
2010-04-04 07:45:58 ----A---- C:\Windows\system32\mstime.dll
2010-04-04 07:45:58 ----A---- C:\Windows\system32\ieframe.dll
2010-04-04 07:45:57 ----A---- C:\Windows\system32\wininet.dll
2010-04-04 07:45:57 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-04-04 07:45:57 ----A---- C:\Windows\system32\iedkcs32.dll
2010-04-04 07:45:54 ----A---- C:\Windows\system32\winlogon.exe
2010-04-04 07:45:54 ----A---- C:\Windows\explorer.exe
2010-04-04 07:45:44 ----A---- C:\Windows\system32\msasn1.dll
2010-04-04 07:45:42 ----A---- C:\Windows\system32\wmp.dll
2010-04-04 07:45:41 ----A---- C:\Windows\system32\winresume.exe
2010-04-04 07:45:41 ----A---- C:\Windows\system32\winload.exe
2010-04-04 07:45:41 ----A---- C:\Windows\system32\CertEnroll.dll
2010-04-04 07:45:40 ----A---- C:\Windows\system32\wmploc.DLL
2010-04-04 07:45:30 ----A---- C:\Windows\system32\jscript.dll
2010-04-04 07:45:28 ----A---- C:\Windows\system32\t2embed.dll
2010-04-04 07:45:28 ----A---- C:\Windows\system32\fontsub.dll
2010-04-04 07:45:28 ----A---- C:\Windows\system32\atmfd.dll
2010-04-04 07:45:27 ----A---- C:\Windows\system32\kernel32.dll
2010-04-04 07:45:27 ----A---- C:\Windows\system32\apphelp.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\tsbyuv.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\quartz.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\msyuv.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\msvidc32.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\msrle32.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\mciavi32.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\iyuv_32.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\avifil32.dll
2010-04-04 07:45:21 ----A---- C:\Windows\system32\psisdecd.dll
2010-04-04 07:45:21 ----A---- C:\Windows\system32\msdri.dll
2010-04-04 07:45:21 ----A---- C:\Windows\system32\CPFilters.dll
2010-04-04 07:45:16 ----A---- C:\Windows\system32\tzres.dll
2010-04-04 07:45:15 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-04-04 07:45:15 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-04-04 07:45:15 ----A---- C:\Windows\system32\secproc_isv.dll
2010-04-04 07:45:15 ----A---- C:\Windows\system32\secproc.dll
2010-04-04 07:45:15 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-04-04 07:45:15 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-04-04 07:45:15 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-04-04 07:45:15 ----A---- C:\Windows\system32\RMActivate.exe
2010-04-04 00:08:01 ----A---- C:\Windows\system32\msonpmon.dll
2010-04-04 00:07:10 ----D---- C:\Program Files\Microsoft Works
2010-04-04 00:06:35 ----D---- C:\Program Files\Microsoft Visual Studio
2010-04-04 00:06:35 ----D---- C:\Program Files\Common Files\DESIGNER
2010-04-04 00:06:14 ----D---- C:\Windows\PCHEALTH
2010-04-04 00:06:14 ----D---- C:\Program Files\Microsoft.NET
2010-04-04 00:04:57 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-04-04 00:04:24 ----D---- C:\ProgramData\Microsoft Help
2010-04-04 00:04:24 ----D---- C:\Program Files\Microsoft Office
2010-04-04 00:02:33 ----RHD---- C:\MSOCache
2010-04-03 23:45:43 ----D---- C:\Program Files\WinRAR
2010-04-03 23:03:47 ----D---- C:\ProgramData\ACD Systems
2010-04-03 23:03:45 ----D---- C:\Program Files\Common Files\ACD Systems
2010-04-03 23:03:45 ----D---- C:\Program Files\ACD Systems
2010-04-03 22:54:23 ----D---- C:\Program Files\Servant Salamander 2.0
2010-04-03 20:28:25 ----A---- C:\Windows\system32\aswBoot.exe
2010-04-03 20:16:26 ----D---- C:\ProgramData\Alwil Software
2010-04-03 20:16:26 ----D---- C:\Program Files\Alwil Software
2010-04-03 20:15:20 ----D---- C:\Windows\Panther
2010-04-03 20:13:43 ----D---- C:\Users\Robert\AppData\Roaming\Macromedia
2010-04-03 20:13:43 ----D---- C:\Users\Robert\AppData\Roaming\Adobe
2010-04-03 20:13:32 ----D---- C:\Windows\system32\Macromed
2010-04-03 20:07:54 ----HD---- C:\$WINDOWS.~Q
2010-04-03 20:07:41 ----HD---- C:\$INPLACE.~TR
2010-04-03 19:47:23 ----N---- C:\Windows\system32\MpSigStub.exe
2010-04-03 19:40:45 ----D---- C:\Users\Robert\AppData\Roaming\Mozilla
2010-04-03 19:40:40 ----D---- C:\Program Files\Mozilla Firefox
2010-04-03 19:34:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-04-03 19:34:05 ----SHD---- C:\Recovery
2010-04-03 19:20:18 ----SD---- C:\Users\Robert\AppData\Roaming\Microsoft
2010-04-03 19:20:18 ----D---- C:\Users\Robert\AppData\Roaming\Media Center Programs
2010-04-03 19:17:06 ----D---- C:\Windows\Prefetch
2010-04-03 18:47:30 ----D---- C:\Users\Robert\AppData\Roaming\ATI
2010-04-03 18:47:30 ----D---- C:\ProgramData\ATI
2010-04-03 18:44:01 ----D---- C:\Program Files\My Company Name
2010-04-03 18:43:13 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-04-03 18:42:20 ----D---- C:\Program Files\ATI
2010-04-03 18:41:48 ----D---- C:\Program Files\ATI Technologies
2010-04-03 18:30:43 ----D---- C:\Program Files\Common Files\PX Storage Engine
2010-04-03 18:30:39 ----D---- C:\Program Files\DivX
2010-04-03 18:23:42 ----D---- C:\Program Files\Winbond Electronics
2010-04-03 18:23:26 ----D---- C:\Program Files\Dolby
2010-04-03 18:22:23 ----A---- C:\Windows\system32\stlang.dll
2010-04-03 18:22:23 ----A---- C:\Windows\system32\stacsv.exe
2010-04-03 18:22:23 ----A---- C:\Windows\system32\idtmini1.exe
2010-04-03 18:19:50 ----D---- C:\Program Files\IDT
2010-04-03 18:19:49 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-03 18:19:47 ----D---- C:\Program Files\Common Files\InstallShield
2010-04-03 18:18:46 ----RA---- C:\Windows\system32\PROUnstl.exe
2010-04-03 18:11:52 ----D---- C:\Program Files\Intel
2010-04-03 18:11:52 ----A---- C:\Windows\system32\CSVer.dll
2010-04-03 18:11:46 ----D---- C:\Intel
2010-04-03 18:10:37 ----D---- C:\Program Files\MSXML 4.0
2010-04-03 18:10:31 ----SHD---- C:\Windows\Installer
2010-04-03 18:10:28 ----D---- C:\TempEI4
2010-04-03 15:37:09 ----RASH---- C:\BOOTSECT.BAK
2010-04-03 15:37:08 ----SHD---- C:\Boot
2010-04-03 14:40:39 ----D---- C:\Windows\SoftwareDistribution
2010-04-03 14:38:09 ----SHD---- C:\System Volume Information
2010-04-03 13:55:38 ----D---- C:\Users\Robert\AppData\Roaming\Identities
pri zapnuti firefoxu alebo nejakej hry sa mi nahodne spusti obrazovka smrti a PC sa resetne a to chodi vzdy dookola.Nevedeli by ste mi prosim pomoct?
Tu je log :
Logfile of random's system information tool 1.06 (written by random/random)
Run by Robert at 2010-04-27 16:27:31
Microsoft Windows 7 Professional Service Pack 3
System drive C: has 363 GB (80%) free of 454 GB
Total RAM: 3324 MB (69% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:27:48, on 27. 4. 2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\ToolboxFX\bin\HPTLBXFX.exe
C:\Program Files\HP\hp laserjet m1522\hppfaxprintersrv.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\ICQ7.1\ICQ.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\explorer.exe
C:\Users\Robert\Downloads\RSIT(2).exe
C:\Program Files\trend micro\Robert.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ToolBoxFX] "C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [HP LaserJet M1522 MFP Series Fax] C:\Program Files\HP\hp LaserJet M1522\hppfaxprintersrv.exe "HP LaserJet M1522 MFP Series Fax"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files\HP\HP UT\bin\hppusg.exe" "C:\Program Files\HP\HP UT\"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
--
End of file - 7655 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-05 279664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-04-05 812528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-05 279664]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-06-20 442433]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-03-09 2769336]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-03-26 142120]
"ToolBoxFX"=C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe [2009-12-03 53248]
"HP LaserJet M1522 MFP Series Fax"=C:\Program Files\HP\hp LaserJet M1522\hppfaxprintersrv.exe [2009-09-22 2453504]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
""= []
"HPUsageTracking"=C:\Program Files\HP\HP UT\bin\hppusg.exe [2007-08-31 36864]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-05-18 2363392]
"ICQ"=C:\Program Files\ICQ7.1\ICQ.exe [2010-04-06 133368]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"LegalNoticeText"=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bfd7fca5-3f1d-11df-a25e-806e6f6e6963}]
shell\AutoRun\command - E:\BlueBirds.exe
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-04-27 16:24:59 ----D---- C:\rsit
2010-04-27 16:24:59 ----D---- C:\Program Files\trend micro
2010-04-27 16:02:16 ----A---- C:\Windows\ntbtlog.txt
2010-04-24 18:53:54 ----D---- C:\Program Files\TuneUpMedia
2010-04-24 18:47:13 ----D---- C:\Users\Robert\AppData\Roaming\TuneUpMedia
2010-04-24 18:47:12 ----D---- C:\ProgramData\TuneUpMedia
2010-04-24 18:45:36 ----D---- C:\Users\Robert\AppData\Roaming\OpenCandy
2010-04-24 18:45:32 ----D---- C:\Users\Robert\AppData\Roaming\AnvSoft
2010-04-24 18:45:30 ----D---- C:\Program Files\AnvSoft
2010-04-20 22:58:11 ----D---- C:\ProgramData\Blizzard Entertainment
2010-04-18 20:57:01 ----D---- C:\ProgramData\Blizzard
2010-04-18 20:52:17 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-04-15 20:30:34 ----D---- C:\Users\Robert\AppData\Roaming\WinRAR
2010-04-14 14:07:29 ----A---- C:\Windows\system32\vbscript.dll
2010-04-14 14:07:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-14 14:07:29 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-14 14:07:25 ----A---- C:\Windows\system32\wintrust.dll
2010-04-14 14:07:18 ----A---- C:\Windows\system32\cabview.dll
2010-04-09 15:41:59 ----D---- C:\Users\Robert\AppData\Roaming\IrfanView
2010-04-08 17:37:03 ----D---- C:\Users\Robert\AppData\Roaming\Hamachi
2010-04-08 17:36:49 ----D---- C:\Program Files\Hamachi
2010-04-08 10:09:30 ----D---- C:\Windows\Minidump
2010-04-07 16:01:13 ----D---- C:\Users\Robert\AppData\Roaming\Leadertech
2010-04-07 15:55:08 ----D---- C:\Program Files\EA Sports
2010-04-07 15:55:07 ----A---- C:\Windows\system32\xinput1_3.dll
2010-04-07 15:55:07 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-04-07 15:55:07 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-04-07 15:55:07 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-04-07 15:55:07 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-04-07 15:55:07 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-04-07 15:55:06 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-04-07 15:55:02 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-04-07 15:55:01 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-04-07 15:55:01 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-04-07 15:55:01 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-04-07 15:55:01 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-04-07 15:55:01 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-04-07 15:43:46 ----D---- C:\Users\Robert\AppData\Roaming\Corel
2010-04-07 15:39:09 ----D---- C:\Users\Robert\AppData\Roaming\ACD Systems
2010-04-06 19:07:14 ----D---- C:\Users\Robert\AppData\Roaming\Google
2010-04-06 19:07:06 ----D---- C:\Program Files\ICQ6Toolbar
2010-04-06 19:07:04 ----D---- C:\ProgramData\ICQ
2010-04-06 19:06:47 ----D---- C:\Users\Robert\AppData\Roaming\ICQ
2010-04-06 19:06:45 ----D---- C:\Program Files\ICQ7.1
2010-04-06 18:56:08 ----D---- C:\Users\Robert\AppData\Roaming\Apple Computer
2010-04-06 18:56:02 ----D---- C:\Users\Robert\AppData\Roaming\HP
2010-04-06 18:39:48 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-04-06 18:39:48 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-04-06 18:37:13 ----D---- C:\ProgramData\Adobe
2010-04-06 18:37:09 ----D---- C:\Program Files\Common Files\Adobe
2010-04-06 18:37:09 ----D---- C:\Program Files\Adobe
2010-04-06 18:19:50 ----D---- C:\ProgramData\HPSSUPPLY
2010-04-06 18:18:53 ----N---- C:\Windows\system32\hppfaxprintermonui5.dll
2010-04-06 18:18:53 ----N---- C:\Windows\system32\hppfaxprintermon5.dll
2010-04-06 18:18:53 ----A---- C:\Windows\system32\hppfaxprinter5.ini
2010-04-06 18:17:46 ----A---- C:\Windows\hpbvspst.ini
2010-04-06 18:17:28 ----D---- C:\ProgramData\Hewlett-Packard
2010-04-06 18:17:10 ----A---- C:\Windows\system32\hppcpr08.dll
2010-04-06 18:17:05 ----A---- C:\Windows\system32\hpcpn093.dll
2010-04-06 18:17:05 ----A---- C:\Windows\system32\fxcompchannel.dll
2010-04-06 18:16:54 ----HD---- C:\Config.Msi
2010-04-06 18:16:54 ----D---- C:\Program Files\HP
2010-04-06 18:16:23 ----A---- C:\Windows\system32\hpxp1522.dll
2010-04-06 18:16:23 ----A---- C:\Windows\system32\hpptsp03.dll
2010-04-06 18:16:22 ----A---- C:\Windows\system32\hppcew08.dll
2010-04-06 18:16:22 ----A---- C:\Windows\system32\hppasc08.dll
2010-04-06 18:15:52 ----D---- C:\M1522_Full_Solution_Win7_4_3_EMEA2
2010-04-06 17:49:32 ----D---- C:\ProgramData\HP
2010-04-05 20:57:27 ----DC---- C:\Windows\system32\DRVSTORE
2010-04-05 20:57:27 ----A---- C:\Windows\system32\GEARAspi.dll
2010-04-05 20:57:09 ----D---- C:\Program Files\iPod
2010-04-05 20:57:08 ----D---- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-04-05 20:57:08 ----D---- C:\Program Files\iTunes
2010-04-05 20:56:33 ----D---- C:\ProgramData\Apple Computer
2010-04-05 20:56:33 ----D---- C:\Program Files\QuickTime
2010-04-05 20:56:26 ----D---- C:\Program Files\Apple Software Update
2010-04-05 20:56:11 ----D---- C:\Program Files\Bonjour
2010-04-05 20:56:02 ----D---- C:\ProgramData\Apple
2010-04-05 20:56:02 ----D---- C:\Program Files\Common Files\Apple
2010-04-05 20:33:33 ----D---- C:\ProgramData\Google
2010-04-05 20:33:33 ----D---- C:\Program Files\Google
2010-04-05 20:33:30 ----D---- C:\Program Files\IrfanView
2010-04-05 20:18:17 ----D---- C:\Program Files\Audacity
2010-04-05 19:43:25 ----D---- C:\Program Files\Revelation Natural Art SK
2010-04-05 19:02:44 ----D---- C:\Program Files\WinSnap
2010-04-04 10:55:39 ----D---- C:\ProgramData\InstallShield
2010-04-04 10:54:29 ----D---- C:\Program Files\Common Files\Corel
2010-04-04 10:53:56 ----D---- C:\Program Files\Corel
2010-04-04 10:43:41 ----A---- C:\Windows\NeroDigital.ini
2010-04-04 10:39:08 ----D---- C:\ProgramData\LightScribe
2010-04-04 10:35:38 ----A---- C:\Windows\Irremote.ini
2010-04-04 10:28:02 ----D---- C:\Program Files\Nero
2010-04-04 10:27:43 ----D---- C:\ProgramData\Nero
2010-04-04 10:27:41 ----D---- C:\Program Files\Common Files\Nero
2010-04-04 10:27:32 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-04-04 10:26:56 ----D---- C:\Program Files\Common Files\LightScribe
2010-04-04 08:08:01 ----A---- C:\Windows\system32\msv1_0.dll
2010-04-04 08:06:37 ----A---- C:\Windows\system32\MRT.exe
2010-04-04 08:06:22 ----A---- C:\Windows\system32\browserchoice.exe
2010-04-04 07:45:59 ----A---- C:\Windows\system32\mshtml.dll
2010-04-04 07:45:58 ----A---- C:\Windows\system32\urlmon.dll
2010-04-04 07:45:58 ----A---- C:\Windows\system32\mstime.dll
2010-04-04 07:45:58 ----A---- C:\Windows\system32\ieframe.dll
2010-04-04 07:45:57 ----A---- C:\Windows\system32\wininet.dll
2010-04-04 07:45:57 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-04-04 07:45:57 ----A---- C:\Windows\system32\iedkcs32.dll
2010-04-04 07:45:54 ----A---- C:\Windows\system32\winlogon.exe
2010-04-04 07:45:54 ----A---- C:\Windows\explorer.exe
2010-04-04 07:45:44 ----A---- C:\Windows\system32\msasn1.dll
2010-04-04 07:45:42 ----A---- C:\Windows\system32\wmp.dll
2010-04-04 07:45:41 ----A---- C:\Windows\system32\winresume.exe
2010-04-04 07:45:41 ----A---- C:\Windows\system32\winload.exe
2010-04-04 07:45:41 ----A---- C:\Windows\system32\CertEnroll.dll
2010-04-04 07:45:40 ----A---- C:\Windows\system32\wmploc.DLL
2010-04-04 07:45:30 ----A---- C:\Windows\system32\jscript.dll
2010-04-04 07:45:28 ----A---- C:\Windows\system32\t2embed.dll
2010-04-04 07:45:28 ----A---- C:\Windows\system32\fontsub.dll
2010-04-04 07:45:28 ----A---- C:\Windows\system32\atmfd.dll
2010-04-04 07:45:27 ----A---- C:\Windows\system32\kernel32.dll
2010-04-04 07:45:27 ----A---- C:\Windows\system32\apphelp.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\tsbyuv.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\quartz.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\msyuv.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\msvidc32.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\msrle32.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\mciavi32.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\iyuv_32.dll
2010-04-04 07:45:25 ----A---- C:\Windows\system32\avifil32.dll
2010-04-04 07:45:21 ----A---- C:\Windows\system32\psisdecd.dll
2010-04-04 07:45:21 ----A---- C:\Windows\system32\msdri.dll
2010-04-04 07:45:21 ----A---- C:\Windows\system32\CPFilters.dll
2010-04-04 07:45:16 ----A---- C:\Windows\system32\tzres.dll
2010-04-04 07:45:15 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-04-04 07:45:15 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-04-04 07:45:15 ----A---- C:\Windows\system32\secproc_isv.dll
2010-04-04 07:45:15 ----A---- C:\Windows\system32\secproc.dll
2010-04-04 07:45:15 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-04-04 07:45:15 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-04-04 07:45:15 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-04-04 07:45:15 ----A---- C:\Windows\system32\RMActivate.exe
2010-04-04 00:08:01 ----A---- C:\Windows\system32\msonpmon.dll
2010-04-04 00:07:10 ----D---- C:\Program Files\Microsoft Works
2010-04-04 00:06:35 ----D---- C:\Program Files\Microsoft Visual Studio
2010-04-04 00:06:35 ----D---- C:\Program Files\Common Files\DESIGNER
2010-04-04 00:06:14 ----D---- C:\Windows\PCHEALTH
2010-04-04 00:06:14 ----D---- C:\Program Files\Microsoft.NET
2010-04-04 00:04:57 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-04-04 00:04:24 ----D---- C:\ProgramData\Microsoft Help
2010-04-04 00:04:24 ----D---- C:\Program Files\Microsoft Office
2010-04-04 00:02:33 ----RHD---- C:\MSOCache
2010-04-03 23:45:43 ----D---- C:\Program Files\WinRAR
2010-04-03 23:03:47 ----D---- C:\ProgramData\ACD Systems
2010-04-03 23:03:45 ----D---- C:\Program Files\Common Files\ACD Systems
2010-04-03 23:03:45 ----D---- C:\Program Files\ACD Systems
2010-04-03 22:54:23 ----D---- C:\Program Files\Servant Salamander 2.0
2010-04-03 20:28:25 ----A---- C:\Windows\system32\aswBoot.exe
2010-04-03 20:16:26 ----D---- C:\ProgramData\Alwil Software
2010-04-03 20:16:26 ----D---- C:\Program Files\Alwil Software
2010-04-03 20:15:20 ----D---- C:\Windows\Panther
2010-04-03 20:13:43 ----D---- C:\Users\Robert\AppData\Roaming\Macromedia
2010-04-03 20:13:43 ----D---- C:\Users\Robert\AppData\Roaming\Adobe
2010-04-03 20:13:32 ----D---- C:\Windows\system32\Macromed
2010-04-03 20:07:54 ----HD---- C:\$WINDOWS.~Q
2010-04-03 20:07:41 ----HD---- C:\$INPLACE.~TR
2010-04-03 19:47:23 ----N---- C:\Windows\system32\MpSigStub.exe
2010-04-03 19:40:45 ----D---- C:\Users\Robert\AppData\Roaming\Mozilla
2010-04-03 19:40:40 ----D---- C:\Program Files\Mozilla Firefox
2010-04-03 19:34:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-04-03 19:34:05 ----SHD---- C:\Recovery
2010-04-03 19:20:18 ----SD---- C:\Users\Robert\AppData\Roaming\Microsoft
2010-04-03 19:20:18 ----D---- C:\Users\Robert\AppData\Roaming\Media Center Programs
2010-04-03 19:17:06 ----D---- C:\Windows\Prefetch
2010-04-03 18:47:30 ----D---- C:\Users\Robert\AppData\Roaming\ATI
2010-04-03 18:47:30 ----D---- C:\ProgramData\ATI
2010-04-03 18:44:01 ----D---- C:\Program Files\My Company Name
2010-04-03 18:43:13 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-04-03 18:42:20 ----D---- C:\Program Files\ATI
2010-04-03 18:41:48 ----D---- C:\Program Files\ATI Technologies
2010-04-03 18:30:43 ----D---- C:\Program Files\Common Files\PX Storage Engine
2010-04-03 18:30:39 ----D---- C:\Program Files\DivX
2010-04-03 18:23:42 ----D---- C:\Program Files\Winbond Electronics
2010-04-03 18:23:26 ----D---- C:\Program Files\Dolby
2010-04-03 18:22:23 ----A---- C:\Windows\system32\stlang.dll
2010-04-03 18:22:23 ----A---- C:\Windows\system32\stacsv.exe
2010-04-03 18:22:23 ----A---- C:\Windows\system32\idtmini1.exe
2010-04-03 18:19:50 ----D---- C:\Program Files\IDT
2010-04-03 18:19:49 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-03 18:19:47 ----D---- C:\Program Files\Common Files\InstallShield
2010-04-03 18:18:46 ----RA---- C:\Windows\system32\PROUnstl.exe
2010-04-03 18:11:52 ----D---- C:\Program Files\Intel
2010-04-03 18:11:52 ----A---- C:\Windows\system32\CSVer.dll
2010-04-03 18:11:46 ----D---- C:\Intel
2010-04-03 18:10:37 ----D---- C:\Program Files\MSXML 4.0
2010-04-03 18:10:31 ----SHD---- C:\Windows\Installer
2010-04-03 18:10:28 ----D---- C:\TempEI4
2010-04-03 15:37:09 ----RASH---- C:\BOOTSECT.BAK
2010-04-03 15:37:08 ----SHD---- C:\Boot
2010-04-03 14:40:39 ----D---- C:\Windows\SoftwareDistribution
2010-04-03 14:38:09 ----SHD---- C:\System Volume Information
2010-04-03 13:55:38 ----D---- C:\Users\Robert\AppData\Roaming\Identities