VIRY.CZ

bezne programy vitacaju CPU na maximum

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:08:01, on 22. 5. 2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
Z:\Windows\DAODx.exe
Z:\Program Files (x86)\Skype\Phone\Skype.exe
Z:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
Z:\Program Files (x86)\ICQ7.1\ICQ.exe
Z:\Program Files (x86)\Adobe\Acrobat 6.0\Distillr\acrotray.exe
Z:\Program Files (x86)\Not Only TV Trio PCI Express\TV Tuner Card Utilities\HMCP6XCtl.exe
Z:\Program Files (x86)\ASUS\TweakIt\TWeakIt.exe
Z:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
Z:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Z:\Program Files (x86)\Cyberlink\TV Enhance\TVEService.exe
Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
Z:\Windows\SysWOW64\CLWatson.exe
Z:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
Z:\Program Files (x86)\Winamp\winampa.exe
Z:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
Z:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
Z:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
Z:\Program Files (x86)\Mozilla Firefox\firefox.exe
Z:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = Z:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - Z:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - Z:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - Z:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - Z:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - Z:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - Z:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - Z:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - Z:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [TweakIt Help] "Z:\Program Files (x86)\ASUS\TweakIt\TweakIt.exe" -r
O4 - HKLM\..\Run: [LifeCam] "Z:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "Z:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [TkBellExe] "Z:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "Z:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "Z:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "Z:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "Z:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [TVEService] "Z:\Program Files (x86)\CyberLink\TV Enhance\TVEService.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [WinampAgent] "Z:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] Z:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [VolPanel] "Z:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] Z:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [QuickTime Task] "Z:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [StartCCC] "Z:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Skype] "Z:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Sidebar] Z:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsApplication1] "C:\WINDOWS\wowhack "
O4 - HKCU\..\Run: [Audio HD Driver] Z:\Users\Marek\AppData\Local\Temp\djaGAMolbl1.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "Z:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ICQ] "Z:\Program Files (x86)\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] Z:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] Z:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Acrobat Assistant.lnk = Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Remote Control.lnk = Z:\Program Files (x86)\Not Only TV Trio PCI Express\TV Tuner Card Utilities\HMCP6XCtl.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://Z:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Z:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Z:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Z:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Z:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - Z:\Program Files (x86)\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - Z:\Program Files (x86)\ICQ7.1\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - Z:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: z:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: z:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Z:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Z:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - Z:\Windows\system32\AEADISRV.EXE (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - Z:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - Z:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - Z:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - Z:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - Z:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - Z:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - Z:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - Z:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - Z:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - Z:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - Z:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - Z:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - Z:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - Z:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MySQL - Unknown owner - Z:\Program.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - Z:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - Z:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - Z:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - Z:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - Z:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - Z:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - Z:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - Z:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - Z:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe
O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - Z:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVESched.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - Z:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - Z:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - Z:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - Z:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - Z:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - Z:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - Z:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14424 bytes

Dejte log z RSIT: http://www.viry.cz/forum/viewtopic.php?f=13&t=82743 . Je podrobnější, než HJT. RSIT je třeba spustit v kompatibilitě WinXP.

Tak tu je môj log ide oto ze cpu je az priliz moc vitazene od normalu no a pri spusteni uplne beznich programov ho to uplne vitazi staci ze otvorim internet zlozku ci nebodaj spustim hru a mam tam 100 percent na sidebare mam 4 jadrovi procesor AMD taktovani an 4,6 GHZ chladenie dostatocne


Logfile of random's system information tool 1.07 (written by random/random)
Run by Marek at 2010-05-22 16:03:29
Microsoft Windows 7 Ultimate Service Pack 3
System drive Z: has 28 GB (10%) free of 286 GB
Total RAM: 8190 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:03:35, on 22. 5. 2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
Z:\Windows\DAODx.exe
Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
Z:\Program Files (x86)\Skype\Phone\Skype.exe
Z:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
Z:\Program Files (x86)\ICQ7.1\ICQ.exe
Z:\Program Files (x86)\Adobe\Acrobat 6.0\Distillr\acrotray.exe
Z:\Program Files (x86)\ASUS\TweakIt\TWeakIt.exe
Z:\Program Files (x86)\Not Only TV Trio PCI Express\TV Tuner Card Utilities\HMCP6XCtl.exe
Z:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
Z:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Z:\Program Files (x86)\Cyberlink\TV Enhance\TVEService.exe
Z:\Program Files (x86)\Winamp\winampa.exe
Z:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
Z:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
Z:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
Z:\Windows\SysWOW64\CLWatson.exe
Z:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
Z:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\1_1_3_0\RGSC.exe
Z:\Program Files (x86)\Windows Media Player\wmplayer.exe
Z:\Program Files (x86)\Mozilla Firefox\firefox.exe
Z:\Users\Marek\Desktop\RSIT.exe
Z:\Program Files (x86)\trend micro\Marek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = Z:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - Z:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - Z:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - Z:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - Z:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - Z:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - Z:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - Z:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - Z:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [TweakIt Help] "Z:\Program Files (x86)\ASUS\TweakIt\TweakIt.exe" -r
O4 - HKLM\..\Run: [LifeCam] "Z:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "Z:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [TkBellExe] "Z:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "Z:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "Z:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "Z:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "Z:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [TVEService] "Z:\Program Files (x86)\CyberLink\TV Enhance\TVEService.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [WinampAgent] "Z:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] Z:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [VolPanel] "Z:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] Z:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [QuickTime Task] "Z:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [StartCCC] "Z:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Skype] "Z:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Sidebar] Z:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsApplication1] "C:\WINDOWS\wowhack "
O4 - HKCU\..\Run: [Audio HD Driver] Z:\Users\Marek\AppData\Local\Temp\djaGAMolbl1.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "Z:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ICQ] "Z:\Program Files (x86)\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] Z:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] Z:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Acrobat Assistant.lnk = Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Remote Control.lnk = Z:\Program Files (x86)\Not Only TV Trio PCI Express\TV Tuner Card Utilities\HMCP6XCtl.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://Z:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Z:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Z:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Z:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Z:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - Z:\Program Files (x86)\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - Z:\Program Files (x86)\ICQ7.1\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - Z:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: z:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: z:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Z:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Z:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - Z:\Windows\system32\AEADISRV.EXE (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - Z:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - Z:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - Z:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - Z:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - Z:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - Z:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - Z:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - Z:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - Z:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - Z:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - Z:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - Z:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - Z:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - Z:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MySQL - Unknown owner - Z:\Program.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - Z:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - Z:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - Z:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - Z:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - Z:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - Z:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - Z:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - Z:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - Z:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe
O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - Z:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVESched.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - Z:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - Z:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - Z:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - Z:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - Z:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - Z:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - Z:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14511 bytes

======Scheduled tasks folder======

Z:\Windows\tasks\Driver Fetch.job
Z:\Windows\tasks\GoogleUpdateTaskMachineCore.job
Z:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll [2003-05-15 50376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - Z:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - Z:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-02-25 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - Z:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Windows Live ID - Z:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
AcroIEToolbarHelper Class - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15 147456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - Z:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-02-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - Z:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15 147456]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - Z:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-03-28 1017592]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - Z:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TweakIt Help"=Z:\Program Files (x86)\ASUS\TweakIt\TweakIt.exe [2009-03-13 817152]
"LifeCam"=Z:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [2009-07-24 118624]
"GrooveMonitor"=Z:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"TkBellExe"=Z:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [2010-02-25 202256]
"Adobe Reader Speed Launcher"=Z:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=Z:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
"SunJavaUpdateSched"=Z:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-01-11 246504]
"AdobeCS4ServiceManager"=Z:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"TVEService"=Z:\Program Files (x86)\CyberLink\TV Enhance\TVEService.exe [2009-12-24 226536]
"LogMeIn Hamachi Ui"=Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"WinampAgent"=Z:\Program Files (x86)\Winamp\winampa.exe [2010-01-14 37888]
"SoundMAXPnP"=Z:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [2009-09-17 1310720]
"VolPanel"=Z:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [2009-07-07 241789]
"UpdReg"=Z:\Windows\UpdReg.EXE [2000-05-11 90112]
"QuickTime Task"=Z:\Program Files (x86)\QuickTime\QTTask.exe [2010-03-17 421888]
"StartCCC"=Z:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-06 102400]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=Z:\Program Files (x86)\Skype\Phone\Skype.exe [2010-05-07 26211624]
"Sidebar"=Z:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]
"WindowsApplication1"=C:\WINDOWS\wowhack []
"Audio HD Driver"=Z:\Users\Marek\AppData\Local\Temp\djaGAMolbl1.exe []
"DAEMON Tools Lite"=Z:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"ICQ"=Z:\Program Files (x86)\ICQ7.1\ICQ.exe [2010-05-07 133368]

Z:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Acrobat Assistant.lnk - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Distillr\acrotray.exe
Remote Control.lnk - Z:\Program Files (x86)\Not Only TV Trio PCI Express\TV Tuner Card Utilities\HMCP6XCtl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=Z:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=
"NoActiveDesktopChanges"=
"ForceActiveDesktopOn"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
shell\AutoRun\command - F:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{135af53f-3013-11df-8a42-e0cb4e064cbd}]
shell\AutoRun\command - H:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{70801701-3a41-11df-b629-e0cb4e064cbd}]
shell\AutoRun\command - F:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{abdf6ef1-31b0-11df-be63-0010605533d3}]
shell\AutoRun\command - F:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c16f170a-21dd-11df-ab3d-0010605533d3}]
shell\AutoRun\command - F:\LaunchU3.exe -a


======File associations======

.js - edit - Z:\Windows\System32\Notepad.exe %1
.js - open - Z:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-05-22 15:55:14 ----D---- Z:\rsit
2010-05-22 08:10:02 ----D---- Z:\Users\Marek\AppData\Roaming\Malwarebytes
2010-05-22 08:09:41 ----D---- Z:\ProgramData\Malwarebytes
2010-05-22 08:09:34 ----D---- Z:\Program Files (x86)\Malwarebytes' Anti-Malware
2010-05-22 07:47:44 ----D---- Z:\Program Files (x86)\Trend Micro
2010-05-21 22:40:18 ----D---- Z:\Program Files (x86)\CCleaner
2010-05-21 21:32:54 ----D---- Z:\Windows\SysWOW64\Wat
2010-05-15 17:22:29 ----D---- Z:\ProgramData\Spybot - Search & Destroy
2010-05-15 17:22:29 ----D---- Z:\Program Files (x86)\Spybot - Search & Destroy
2010-05-15 13:19:53 ----D---- Z:\Program Files (x86)\No-IP
2010-05-15 10:30:11 ----D---- Z:\ProgramData\UDL
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\PICSDK2.dll
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\PICSDK.ini
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\PICSDK.dll
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\PICEntry.dll
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\EpPicPrt.dll
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\EPPicMgr.dll
2010-05-15 10:08:00 ----A---- Z:\Windows\CDE DX4000.ini
2010-05-12 13:21:47 ----A---- Z:\Windows\SysWOW64\inetcomm.dll
2010-05-07 16:18:10 ----D---- Z:\ProgramData\ATI
2010-05-07 16:16:27 ----D---- Z:\Program Files (x86)\Common Files\ATI Technologies
2010-05-07 16:15:42 ----D---- Z:\Program Files (x86)\ATI Technologies
2010-05-07 15:57:42 ----D---- Z:\Program Files (x86)\ICQ6Toolbar
2010-05-07 15:57:37 ----D---- Z:\ProgramData\ICQ
2010-05-07 15:57:32 ----D---- Z:\Users\Marek\AppData\Roaming\ICQ
2010-05-07 15:57:28 ----D---- Z:\Program Files (x86)\ICQ7.1
2010-05-03 18:17:20 ----D---- Z:\Program Files (x86)\Apple Software Update
2010-05-03 11:14:53 ----A---- Z:\Windows\SysWOW64\cttele32.dll
2010-05-03 11:14:52 ----N---- Z:\Windows\Updreg.EXE
2010-05-03 11:14:52 ----N---- Z:\Windows\SysWOW64\ResDefE.exe
2010-05-03 11:14:52 ----N---- Z:\Windows\FF08_Render_Spk_Hp.ini
2010-05-03 11:14:52 ----N---- Z:\Windows\FF08_Render.ini
2010-05-03 11:14:52 ----N---- Z:\Windows\FF08_Capture.ini
2010-05-03 11:14:51 ----A---- Z:\Windows\SysWOW64\CmdRtr.DLL
2010-05-03 11:14:51 ----A---- Z:\Windows\SysWOW64\APOMngr.DLL
2010-05-03 11:14:46 ----N---- Z:\Windows\SysWOW64\Sens_oal.dll
2010-05-03 11:14:46 ----A---- Z:\Windows\SysWOW64\wrap_oal.dll
2010-05-03 11:14:46 ----A---- Z:\Windows\SysWOW64\OpenAL32.dll
2010-05-03 11:13:30 ----D---- Z:\Program Files (x86)\Common Files\Creative Labs Shared
2010-05-03 11:10:07 ----D---- Z:\Program Files (x86)\Analog Devices
2010-05-03 11:09:47 ----D---- Z:\Users\Marek\AppData\Roaming\InstallShield
2010-05-02 23:26:20 ----D---- Z:\Users\Marek\AppData\Roaming\Creative
2010-04-28 18:29:02 ----D---- Z:\Program Files (x86)\MagicISO
2010-04-28 18:13:47 ----D---- Z:\Program Files (x86)\Alcohol Soft
2010-04-28 13:35:41 ----A---- Z:\Windows\SysWOW64\shell32.dll
2010-04-28 13:35:41 ----A---- Z:\Windows\SysWOW64\secur32.dll
2010-04-28 13:35:40 ----A---- Z:\Windows\SysWOW64\sspicli.dll

======List of files/folders modified in the last 1 months======

2010-05-22 16:03:33 ----D---- Z:\Windows\Temp
2010-05-22 16:01:08 ----D---- Z:\Windows\Prefetch
2010-05-22 15:23:02 ----D---- Z:\Users\Marek\AppData\Roaming\Skype
2010-05-22 14:20:41 ----D---- Z:\Windows\System32
2010-05-22 14:20:40 ----D---- Z:\Windows\inf
2010-05-22 10:34:57 ----D---- Z:\Windows
2010-05-22 08:09:46 ----D---- Z:\Windows\SysWOW64\drivers
2010-05-22 08:09:41 ----HD---- Z:\ProgramData
2010-05-22 08:09:34 ----RD---- Z:\Program Files (x86)
2010-05-22 08:00:47 ----D---- Z:\Users\Marek\AppData\Roaming\skypePM
2010-05-21 22:47:57 ----SHD---- Z:\System Volume Information
2010-05-21 22:43:58 ----D---- Z:\Windows\Minidump
2010-05-21 22:43:58 ----D---- Z:\Windows\debug
2010-05-21 21:32:58 ----D---- Z:\Windows\winsxs
2010-05-21 21:32:54 ----D---- Z:\Windows\SysWOW64
2010-05-16 08:29:17 ----D---- Z:\Users\Marek\AppData\Roaming\Adobe
2010-05-15 12:03:07 ----D---- Z:\Program Files (x86)\Google
2010-05-15 10:38:06 ----HD---- Z:\Program Files (x86)\InstallShield Installation Information
2010-05-15 10:37:01 ----D---- Z:\Windows\Downloaded Program Files
2010-05-15 10:36:58 ----D---- Z:\Program Files (x86)\Common Files\InstallShield
2010-05-15 10:36:18 ----SHD---- Z:\Windows\Installer
2010-05-15 10:32:18 ----D---- Z:\Program Files (x86)\epson
2010-05-15 10:11:26 ----RD---- Z:\Program Files
2010-05-14 16:47:58 ----D---- Z:\Users\Marek\AppData\Roaming\Download Manager
2010-05-12 15:32:52 ----D---- Z:\Program Files (x86)\Windows Mail
2010-05-12 15:18:43 ----D---- Z:\ProgramData\Microsoft Help
2010-05-10 09:23:35 ----D---- Z:\Users\Marek\AppData\Roaming\U3
2010-05-09 15:32:37 ----D---- Z:\World of Warcraft
2010-05-07 16:18:27 ----D---- Z:\Program Files (x86)\ATI
2010-05-07 16:16:27 ----D---- Z:\Program Files (x86)\Common Files
2010-05-07 16:16:23 ----RSD---- Z:\Windows\assembly
2010-05-03 23:00:04 ----D---- Z:\Program Files (x86)\Cheat Engine
2010-05-03 22:53:15 ----D---- Z:\Program Files (x86)\Steam
2010-05-03 18:18:03 ----D---- Z:\Program Files (x86)\QuickTime
2010-05-03 18:17:25 ----D---- Z:\Program Files (x86)\Common Files\Apple
2010-05-03 13:23:09 ----D---- Z:\Windows\Tasks
2010-05-03 11:22:01 ----D---- Z:\ProgramData\Creative
2010-05-03 11:14:46 ----D---- Z:\Program Files (x86)\Creative
2010-05-03 11:12:09 ----A---- Z:\Windows\Language_trs.ini
2010-05-03 11:06:50 ----D---- Z:\ProgramData\Apple Computer
2010-05-03 10:59:23 ----D---- Z:\Program Files (x86)\Opera
2010-05-03 10:58:53 ----D---- Z:\Program Files (x86)\Nokia
2010-05-03 10:57:32 ----D---- Z:\Windows\SysWOW64\inetsrv
2010-05-03 10:56:25 ----D---- Z:\Program Files (x86)\DAEMON Tools Toolbar
2010-05-03 10:54:26 ----D---- Z:\Program Files (x86)\Valve
2010-05-03 10:53:51 ----D---- Z:\Program Files (x86)\ASUS
2010-05-03 10:53:15 ----D---- Z:\Windows\ShellNew
2010-05-03 10:51:26 ----D---- Z:\Program Files (x86)\Common Files\Akamai
2010-05-03 10:17:01 ----A---- Z:\Windows\Ascd_tmp.ini
2010-05-01 10:57:15 ----D---- Z:\PacSteamT
2010-04-27 19:21:54 ----D---- Z:\Users\Marek\AppData\Roaming\BitTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AsIO;AsIO; Z:\Windows\SysWow64\drivers\AsIO.sys [2009-04-06 13368]
R1 blbdrive;blbdrive; Z:\Windows\system32\DRIVERS\blbdrive.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; Z:\Windows\system32\drivers\csc.sys []
R1 DfsC;@%systemroot%\system32\drivers\dfsc.sys,-101; Z:\Windows\System32\Drivers\dfsc.sys []
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; Z:\Windows\System32\drivers\discache.sys []
R1 ehdrv;ehdrv; Z:\Windows\system32\DRIVERS\ehdrv.sys []
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; Z:\Windows\system32\drivers\nsiproxy.sys []
R1 RDPENCDD;@%systemroot%\system32\drivers\RDPENCDD.sys,-101; Z:\Windows\system32\drivers\rdpencdd.sys []
R1 RDPREFMP;@%systemroot%\system32\drivers\RdpRefMp.sys,-101; Z:\Windows\system32\drivers\rdprefmp.sys []
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; Z:\Windows\system32\DRIVERS\tdx.sys []
R1 vwififlt;Virtual WiFi Filter Driver; Z:\Windows\system32\DRIVERS\vwififlt.sys []
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; Z:\Windows\system32\DRIVERS\wanarp.sys []
R1 WfpLwf;WFP Lightweight Filter; Z:\Windows\system32\DRIVERS\wfplwf.sys []
R2 adfs;adfs; Z:\Windows\SysWOW64\drivers\adfs.sys [2008-08-14 74720]
R2 eamon;eamon; Z:\Windows\system32\DRIVERS\eamon.sys []
R2 epfw;epfw; Z:\Windows\system32\DRIVERS\epfw.sys []
R2 epfwwfp;epfwwfp; Z:\Windows\system32\DRIVERS\epfwwfp.sys []
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver; Z:\Windows\system32\DRIVERS\lltdio.sys []
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; Z:\Windows\system32\drivers\luafv.sys []
R2 PEAUTH;PEAUTH; Z:\Windows\system32\drivers\peauth.sys []
R2 rspndr;Link-Layer Topology Discovery Responder; Z:\Windows\system32\DRIVERS\rspndr.sys []
R2 tcpipreg;TCP/IP Registry Compatibility; Z:\Windows\System32\drivers\tcpipreg.sys []
R3 1394ohci;1394 OHCI Compliant Host Controller; Z:\Windows\system32\DRIVERS\1394ohci.sys []
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; Z:\Windows\system32\drivers\ADIHdAud.sys []
R3 amdkmdag;amdkmdag; Z:\Windows\system32\DRIVERS\atikmdag.sys []
R3 amdkmdap;amdkmdap; Z:\Windows\system32\DRIVERS\atikmpag.sys []
R3 AmdPPM;AMD Processor Driver; Z:\Windows\system32\DRIVERS\amdppm.sys []
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; Z:\Windows\system32\drivers\AtiHdmi.sys []
R3 bowser;@%systemroot%\system32\browser.dll,-102; Z:\Windows\system32\DRIVERS\bowser.sys []
R3 circlass;Consumer IR Devices; Z:\Windows\system32\DRIVERS\circlass.sys []
R3 CompositeBus;Composite Bus Enumerator Driver; Z:\Windows\system32\DRIVERS\CompositeBus.sys []
R3 DXGKrnl;LDDM Graphics Subsystem; Z:\Windows\System32\drivers\dxgkrnl.sys []
R3 Epfwndis;Eset Personal Firewall; Z:\Windows\system32\DRIVERS\Epfwndis.sys []
R3 hamachi;Hamachi Network Interface; Z:\Windows\system32\DRIVERS\hamachi.sys []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; Z:\Windows\system32\DRIVERS\HDAudBus.sys []
R3 HidUsb;Microsoft HID Class Driver; Z:\Windows\system32\DRIVERS\hidusb.sys []
R3 kbdhid;Keyboard HID Driver; Z:\Windows\system32\DRIVERS\kbdhid.sys []
R3 ksthunk;Kernel Streaming Thunks; Z:\Windows\system32\drivers\ksthunk.sys []
R3 MCfilt;MCfilt; Z:\Windows\system32\drivers\MCfilt64.sys []
R3 monitor;Microsoft Monitor Class Function Driver Service; Z:\Windows\system32\DRIVERS\monitor.sys []
R3 mouhid;Mouse HID Driver; Z:\Windows\system32\DRIVERS\mouhid.sys []
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; Z:\Windows\System32\drivers\mpsdrv.sys []
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; Z:\Windows\system32\DRIVERS\mrxsmb10.sys []
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; Z:\Windows\system32\DRIVERS\mrxsmb20.sys []
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; Z:\Windows\System32\Drivers\nx6000.sys []
R3 MTsensor;ATK0110 ACPI UTILITY; Z:\Windows\system32\DRIVERS\ASACPI.sys []
R3 NativeWifiP;NativeWiFi Filter; Z:\Windows\system32\DRIVERS\nwifi.sys []
R3 NxpCap64;NXP capture service; Z:\Windows\system32\DRIVERS\NxpCap64.sys []
R3 Point64;Microsoft IntelliPoint Filter Driver; Z:\Windows\system32\DRIVERS\point64k.sys []
R3 RasAgileVpn;WAN Miniport (IKEv2); Z:\Windows\system32\DRIVERS\AgileVpn.sys []
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; Z:\Windows\system32\DRIVERS\rassstp.sys []
R3 rdpbus;Remote Desktop Device Redirector Bus Driver; Z:\Windows\system32\DRIVERS\rdpbus.sys []
R3 RTL8167;Realtek 8167 NT Driver; Z:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 RTL85n64;Realtek 8180/8185 Extensible 802.11 Wireless Device Driver; Z:\Windows\system32\DRIVERS\RTL85n64.sys []
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; Z:\Windows\System32\DRIVERS\srv2.sys []
R3 srvnet;srvnet; Z:\Windows\System32\DRIVERS\srvnet.sys []
R3 tssecsrv;@%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101; Z:\Windows\System32\DRIVERS\tssecsrv.sys []
R3 tunnel;Microsoft Tunnel Miniport Adapter Driver; Z:\Windows\system32\DRIVERS\tunnel.sys []
R3 umbus;UMBus Enumerator Driver; Z:\Windows\system32\DRIVERS\umbus.sys []
R3 usbaudio;USB Audio Driver (WDM); Z:\Windows\system32\drivers\usbaudio.sys []
R3 usbccgp;Microsoft USB Generic Parent Driver; Z:\Windows\system32\DRIVERS\usbccgp.sys []
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; Z:\Windows\system32\DRIVERS\usbehci.sys []
R3 usbhub;Microsoft USB Standard Hub Driver; Z:\Windows\system32\DRIVERS\usbhub.sys []
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; Z:\Windows\system32\DRIVERS\usbohci.sys []
R3 usbvideo;USB Video Device (WDM); Z:\Windows\System32\Drivers\usbvideo.sys []
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; Z:\Windows\system32\DRIVERS\wmiacpi.sys []
R3 WudfPf;User Mode Driver Frameworks Platform Driver; Z:\Windows\system32\drivers\WudfPf.sys []
S3 AcpiPmi;ACPI Power Meter Driver; Z:\Windows\system32\DRIVERS\acpipmi.sys []
S3 adp94xx;adp94xx; Z:\Windows\system32\DRIVERS\adp94xx.sys []
S3 adpahci;adpahci; Z:\Windows\system32\DRIVERS\adpahci.sys []
S3 adpu320;adpu320; Z:\Windows\system32\DRIVERS\adpu320.sys []
S3 agp440;Intel AGP Bus Filter; Z:\Windows\system32\DRIVERS\agp440.sys []
S3 amdide;amdide; Z:\Windows\system32\DRIVERS\amdide.sys []
S3 AmdK8;AMD K8 Processor Driver; Z:\Windows\system32\DRIVERS\amdk8.sys []
S3 amdsata;amdsata; Z:\Windows\system32\DRIVERS\amdsata.sys []
S3 amdsbs;amdsbs; Z:\Windows\system32\DRIVERS\amdsbs.sys []
S3 ao7c2es6;ao7c2es6; Z:\Windows\SysWOW64\drivers\ao7c2es6.sys []
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; Z:\Windows\system32\drivers\appid.sys []
S3 arc;arc; Z:\Windows\system32\DRIVERS\arc.sys []
S3 arcsas;arcsas; Z:\Windows\system32\DRIVERS\arcsas.sys []
S3 b06bdrv;Broadcom NetXtreme II VBD; Z:\Windows\system32\DRIVERS\bxvbda.sys []
S3 b57nd60a;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; Z:\Windows\system32\DRIVERS\b57nd60a.sys []
S3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver; Z:\Windows\system32\DRIVERS\BrFiltLo.sys []
S3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver; Z:\Windows\system32\DRIVERS\BrFiltUp.sys []
S3 Brserid;Brother MFC Serial Port Interface Driver (WDM); Z:\Windows\System32\Drivers\Brserid.sys []
S3 BrSerWdm;Brother WDM Serial driver; Z:\Windows\System32\Drivers\BrSerWdm.sys []
S3 BrUsbMdm;Brother MFC USB Fax Only Modem; Z:\Windows\System32\Drivers\BrUsbMdm.sys []
S3 BrUsbSer;Brother MFC USB Serial WDM Driver; Z:\Windows\System32\Drivers\BrUsbSer.sys []
S3 BthAvrcp;Bluetooth AVRCP Profile; Z:\Windows\system32\DRIVERS\BthAvrcp.sys []
S3 BthEnum;Bluetooth Enumerator Service; Z:\Windows\system32\DRIVERS\BthEnum.sys []
S3 BTHMODEM;Bluetooth Modem Communications Driver; Z:\Windows\system32\DRIVERS\bthmodem.sys []
S3 BthPan;Bluetooth Device (Personal Area Network); Z:\Windows\system32\DRIVERS\bthpan.sys []
S3 BTHPORT;Bluetooth Port Driver; Z:\Windows\System32\Drivers\BTHport.sys []
S3 BTHUSB;Bluetooth Radio USB Driver; Z:\Windows\System32\Drivers\BTHUSB.sys []
S3 CmBatt;Microsoft ACPI Control Method Battery Driver; Z:\Windows\system32\DRIVERS\CmBatt.sys []
S3 Compbatt;Compbatt; Z:\Windows\system32\DRIVERS\compbatt.sys []
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD; Z:\Windows\system32\DRIVERS\evbda.sys []
S3 elxstor;elxstor; Z:\Windows\system32\DRIVERS\elxstor.sys []
S3 ErrDev;Microsoft Hardware Error Device Driver; Z:\Windows\system32\DRIVERS\errdev.sys []
S3 exfat;exFAT File System Driver; Z:\Windows\SysWOW64\drivers\exfat.sys []
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; Z:\Windows\system32\drivers\filetrace.sys []
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; Z:\Windows\System32\drivers\FsDepends.sys []
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; Z:\Windows\system32\DRIVERS\gagp30kx.sys []
S3 hcw85cir;Hauppauge Consumer Infrared Receiver; Z:\Windows\system32\drivers\hcw85cir.sys []
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; Z:\Windows\system32\drivers\HdAudio.sys []
S3 HidBatt;HID UPS Battery Driver; Z:\Windows\system32\DRIVERS\HidBatt.sys []
S3 HidBth;Microsoft Bluetooth HID Miniport; Z:\Windows\system32\DRIVERS\hidbth.sys []
S3 HidIr;Microsoft Infrared HID Driver; Z:\Windows\system32\DRIVERS\hidir.sys []
S3 HpSAMD;HpSAMD; Z:\Windows\system32\DRIVERS\HpSAMD.sys []
S3 iaStorV;iaStorV; Z:\Windows\system32\DRIVERS\iaStorV.sys []
S3 iirsp;iirsp; Z:\Windows\system32\DRIVERS\iirsp.sys []
S3 intelide;intelide; Z:\Windows\system32\DRIVERS\intelide.sys []
S3 intelppm;Intel Processor Driver; Z:\Windows\system32\DRIVERS\intelppm.sys []
S3 IPMIDRV;IPMIDRV; Z:\Windows\system32\DRIVERS\IPMIDrv.sys []
S3 isapnp;isapnp; Z:\Windows\system32\DRIVERS\isapnp.sys []
S3 iScsiPrt;iScsiPort Driver; Z:\Windows\system32\DRIVERS\msiscsi.sys []
S3 LSI_FC;LSI_FC; Z:\Windows\system32\DRIVERS\lsi_fc.sys []
S3 LSI_SAS;LSI_SAS; Z:\Windows\system32\DRIVERS\lsi_sas.sys []
S3 LSI_SAS2;LSI_SAS2; Z:\Windows\system32\DRIVERS\lsi_sas2.sys []
S3 LSI_SCSI;LSI_SCSI; Z:\Windows\system32\DRIVERS\lsi_scsi.sys []
S3 megasas;megasas; Z:\Windows\system32\DRIVERS\megasas.sys []
S3 MegaSR;MegaSR; Z:\Windows\system32\DRIVERS\MegaSR.sys []
S3 mpio;mpio; Z:\Windows\system32\DRIVERS\mpio.sys []
S3 msahci;msahci; Z:\Windows\system32\DRIVERS\msahci.sys []
S3 msdsm;msdsm; Z:\Windows\system32\DRIVERS\msdsm.sys []
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; Z:\Windows\System32\drivers\mshidkmdf.sys []
S3 MsRPC;MsRPC; Z:\Windows\SysWOW64\drivers\MsRPC.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; Z:\Windows\system32\drivers\MSTEE.sys []
S3 MTConfig;Microsoft Input Configuration Driver; Z:\Windows\system32\DRIVERS\MTConfig.sys []
S3 NdisCap;NDIS Capture LightWeight Filter; Z:\Windows\system32\DRIVERS\ndiscap.sys []
S3 netr28ux;RT2870 USB Wireless LAN Card Driver for Vista; Z:\Windows\system32\DRIVERS\netr28ux.sys []
S3 nfrd960;nfrd960; Z:\Windows\system32\DRIVERS\nfrd960.sys []
S3 nv_agp;NVIDIA nForce AGP Bus Filter; Z:\Windows\system32\DRIVERS\nv_agp.sys []
S3 nvraid;nvraid; Z:\Windows\system32\DRIVERS\nvraid.sys []
S3 nvstor;nvstor; Z:\Windows\system32\DRIVERS\nvstor.sys []
S3 ohci1394;1394 OHCI Compliant Host Controller (Legacy); Z:\Windows\system32\DRIVERS\ohci1394.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; Z:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 PKWCap64;PKWCap service; Z:\Windows\system32\DRIVERS\PKWCap64.sys []
S3 ql2300;ql2300; Z:\Windows\system32\DRIVERS\ql2300.sys []
S3 ql40xx;ql40xx; Z:\Windows\system32\DRIVERS\ql40xx.sys []
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; Z:\Windows\system32\drivers\qwavedrv.sys []
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); Z:\Windows\system32\DRIVERS\rfcomm.sys []
S3 s3cap;s3cap; Z:\Windows\system32\DRIVERS\vms3cap.sys []
S3 sbp2port;sbp2port; Z:\Windows\system32\DRIVERS\sbp2port.sys []
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; Z:\Windows\System32\DRIVERS\scfilter.sys []
S3 sermouse;Serial Mouse Driver; Z:\Windows\system32\DRIVERS\sermouse.sys []
S3 sffdisk;SFF Storage Class Driver; Z:\Windows\system32\DRIVERS\sffdisk.sys []
S3 sffp_mmc;SFF Storage Protocol Driver for MMC; Z:\Windows\system32\DRIVERS\sffp_mmc.sys []
S3 sffp_sd;SFF Storage Protocol Driver for SDBus; Z:\Windows\system32\DRIVERS\sffp_sd.sys []
S3 SiSRaid2;SiSRaid2; Z:\Windows\system32\DRIVERS\SiSRaid2.sys []
S3 SiSRaid4;SiSRaid4; Z:\Windows\system32\DRIVERS\sisraid4.sys []
S3 Smb;@%SystemRoot%\system32\tcpipcfg.dll,-50005; Z:\Windows\system32\DRIVERS\smb.sys []
S3 stexstor;stexstor; Z:\Windows\system32\DRIVERS\stexstor.sys []
S3 storvsc;storvsc; Z:\Windows\system32\DRIVERS\storvsc.sys []
S3 TCPIP6;Microsoft IPv6 Protocol Driver; Z:\Windows\system32\DRIVERS\tcpip.sys []
S3 uagp35;Microsoft AGPv3.5 Filter; Z:\Windows\system32\DRIVERS\uagp35.sys []
S3 uliagpkx;Uli AGP Bus Filter; Z:\Windows\system32\DRIVERS\uliagpkx.sys []
S3 UmPass;Microsoft UMPass Driver; Z:\Windows\system32\DRIVERS\umpass.sys []
S3 usbcir;eHome Infrared Receiver (USBCIR); Z:\Windows\system32\DRIVERS\usbcir.sys []
S3 usbprint;Microsoft USB PRINTER Class; Z:\Windows\system32\DRIVERS\usbprint.sys []
S3 usbscan;USB Scanner Driver; Z:\Windows\system32\DRIVERS\usbscan.sys []
S3 USBSTOR;USB Mass Storage Driver; Z:\Windows\system32\DRIVERS\USBSTOR.SYS []
S3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; Z:\Windows\system32\DRIVERS\usbuhci.sys []
S3 vga;vga; Z:\Windows\system32\DRIVERS\vgapnp.sys []
S3 vhdmp;vhdmp; Z:\Windows\system32\DRIVERS\vhdmp.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; Z:\Windows\system32\DRIVERS\vmbus.sys []
S3 VMBusHID;VMBusHID; Z:\Windows\system32\DRIVERS\VMBusHID.sys []
S3 vsmraid;vsmraid; Z:\Windows\system32\DRIVERS\vsmraid.sys []
S3 vwifibus;Virtual WiFi Bus Driver; Z:\Windows\system32\DRIVERS\vwifibus.sys []
S3 WacomPen;Wacom Serial Pen HID Driver; Z:\Windows\system32\DRIVERS\wacompen.sys []
S3 Wd;Wd; Z:\Windows\system32\DRIVERS\wd.sys []
S3 WIMMount;WIMMount; Z:\Windows\system32\drivers\wimmount.sys [2009-07-14 19008]
S3 WUDFRd;WUDFRd; Z:\Windows\system32\DRIVERS\WUDFRd.sys []
S4 crcdisk;Crcdisk Filter Driver; Z:\Windows\system32\DRIVERS\crcdisk.sys []
S4 ws2ifsl;@%systemroot%\System32\drivers\ws2ifsl.sys,-1000; Z:\Windows\system32\drivers\ws2ifsl.sys []

toto nieje koniec az v druhej sprave

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AEADIFilters;Andrea ADI Filters Service; Z:\Windows\system32\AEADISRV.EXE []
R2 AMD External Events Utility;AMD External Events Utility; Z:\Windows\system32\atiesrxx.exe []
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\audiosrv.dll,-204; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 CTAudSvcService;Creative Audio Service; Z:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2009-02-23 307200]
R2 DPS;@%systemroot%\system32\dps.dll,-500; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; Z:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2009-11-16 735960]
R2 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 gpsvc;@gpapi.dll,-112; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1823112]
R2 ICQ Service;ICQ Service; Z:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-03-28 246520]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MSCamSvc;MSCamSvc; Z:\Program Files\Microsoft LifeCam\MSCamS64.exe [2009-07-24 199008]
R2 MySQL;MySQL; Z:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld --defaults-file=Z:\Program Files\MySQL\MySQL Server 5.1\my.ini MySQL []
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); Z:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2009-12-24 247088]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 SBSDWSCService;SBSD Security Center Service; Z:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 TeamViewer5;TeamViewer 5; Z:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2009-12-17 185640]
R2 TVECapSvc;TVEnhance Background Capture Service (TBCS); Z:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe [2009-12-24 464224]
R2 TVESched;TVEnhance Task Scheduler (TTS)); Z:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVESched.exe [2009-12-24 189792]
R2 UxSms;@%SystemRoot%\system32\dwm.exe,-2000; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 WinDefend;@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 wlidsvc;Windows Live ID Sign-in Assistant; Z:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 2297216]
R2 WMPNetworkSvc;@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101; Z:\Program Files (x86)\Windows Media Player\wmpnetwk.exe []
R2 WSearch;@%systemroot%\system32\SearchIndexer.exe,-103; Z:\Windows\system32\SearchIndexer.exe [2009-07-14 428032]
R2 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; Z:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2009-06-10 42840]
R3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 KeyIso;@keyiso.dll,-100; Z:\Windows\system32\lsass.exe []
R3 netprofm;@%SystemRoot%\system32\netprofm.dll,-202; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 gupdate;Google Update Service (gupdate); Z:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-03-17 136176]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 clr_optimization_v2.0.50727_32;Microsoft .NET Framework NGEN v2.0.50727_X86; Z:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2009-06-10 66384]
S3 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64; Z:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-06-10 89920]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; Z:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-05-03 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; Z:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-05-03 79360]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; Z:\Windows\System32\lsass.exe []
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; Z:\Windows\ehome\ehRecvr.exe [2009-07-14 696832]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; Z:\Windows\ehome\ehsched.exe [2009-07-14 127488]
S3 EhttpSrv;ESET HTTP Server; Z:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-11-16 23296]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; Z:\Windows\system32\fxssvc.exe []
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; Z:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-03-16 1038088]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; Z:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-03-16 655624]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 idsvc;@%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193; Z:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe [2009-06-10 856384]
S3 IPBusEnum;@%systemroot%\system32\IPBusEnum.dll,-102; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 KtmRm;@comres.dll,-2946; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; Z:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 MsDepSvc;Web Deployment Agent Service; Z:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [2010-01-19 55184]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 odserv;Microsoft Office Diagnostics Service; Z:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; Z:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; Z:\Windows\SysWow64\perfhost.exe [2009-07-14 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; Z:\Windows\System32\snmptrap.exe []
S3 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; Z:\Windows\system32\sppsvc.exe []
S3 sppuinotify;@%SystemRoot%\system32\sppuinotify.dll,-103; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Steam Client Service;Steam Client Service; Z:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-03-03 332720]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TBS;@%SystemRoot%\system32\tbssvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; Z:\Windows\servicing\TrustedInstaller.exe [2009-07-14 194048]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; Z:\Windows\system32\UI0Detect.exe []
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; Z:\Windows\system32\lsass.exe []
S3 vds;@%SystemRoot%\system32\vds.exe,-100; Z:\Windows\System32\vds.exe []
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; Z:\Windows\system32\Wat\WatAdminSvc.exe []
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; Z:\Windows\system32\wbengine.exe []
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 AODService;AODService; Z:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [2009-04-22 124256]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8201; Z:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 116560]

-----------------EOF-----------------


az tu to konci nevoslo to do spravy

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Oka tu je vypis testu
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verzia databázy: 4052

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

23. 5. 2010 11:28:16
mbam-log-2010-05-23 (11-28-16).txt

Typ kontroly: Úplná kontrola (A:\|B:\|E:\|G:\|Z:\|)
Objektov kontrolovaných: 533641
Uplynulý čas: 1 hod, 38 min, 44 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 1
Infikované súbory: 6

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
Z:\Windows\System32\system32 (Trojan.Agent) -> No action taken.

Infikované súbory:
A:\Programy Install\Adobe-Photoshop-CS4-HP\Photoshop CS4\Keygen-CORE\keygen.exe (Trojan.Downloader) -> No action taken.
A:\Programy Install\Adobe_Master_Suite_CS4__Keygen___Instructions_\Adobe Master Suite CS4 (Keygen + Instructions)\Adobe Master CS4 Keygen.exe (Trojan.Downloader) -> No action taken.
A:\Programy Install\Photoshop_CS4_Ext_CZ\Photoshop CS4 Ext CZ\!___!\klic_gen\APCS4EX_KGN.exe (Trojan.Downloader) -> No action taken.
Z:\Program Files (x86)\Cheat Engine\Systemcallretriever.exe (Trojan.Downloader) -> No action taken.
Z:\Windows\System32\system32\PhilipsAnalog_TXT.ax (Trojan.Agent) -> No action taken.
Z:\Windows\System32\system32\PhilipsDVB_TXT.ax (Trojan.Agent) -> No action taken.




A tu je este raz LOG

Logfile of random's system information tool 1.07 (written by random/random)
Run by Marek at 2010-05-23 11:30:16
Microsoft Windows 7 Ultimate Service Pack 3
System drive Z: has 28 GB (10%) free of 286 GB
Total RAM: 8190 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:30:22, on 23. 5. 2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
Z:\Windows\DAODx.exe
Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
Z:\Program Files (x86)\Skype\Phone\Skype.exe
Z:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
Z:\Program Files (x86)\ICQ7.1\ICQ.exe
Z:\Program Files (x86)\Adobe\Acrobat 6.0\Distillr\acrotray.exe
Z:\Program Files (x86)\Not Only TV Trio PCI Express\TV Tuner Card Utilities\HMCP6XCtl.exe
Z:\Program Files (x86)\ASUS\TweakIt\TWeakIt.exe
Z:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
Z:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Z:\Program Files (x86)\Cyberlink\TV Enhance\TVEService.exe
Z:\Program Files (x86)\Winamp\winampa.exe
Z:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
Z:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
Z:\Windows\SysWOW64\CLWatson.exe
Z:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
Z:\Program Files (x86)\Mozilla Firefox\firefox.exe
Z:\Users\Marek\Desktop\RSIT.exe
Z:\Program Files (x86)\Trend Micro\Marek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = Z:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - Z:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - Z:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - Z:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - Z:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - Z:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - Z:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - Z:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - Z:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - Z:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [TweakIt Help] "Z:\Program Files (x86)\ASUS\TweakIt\TweakIt.exe" -r
O4 - HKLM\..\Run: [LifeCam] "Z:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "Z:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [TkBellExe] "Z:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "Z:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "Z:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "Z:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "Z:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [TVEService] "Z:\Program Files (x86)\CyberLink\TV Enhance\TVEService.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [WinampAgent] "Z:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] Z:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [VolPanel] "Z:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] Z:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [QuickTime Task] "Z:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [StartCCC] "Z:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] Z:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Skype] "Z:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Sidebar] Z:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsApplication1] "C:\WINDOWS\wowhack "
O4 - HKCU\..\Run: [Audio HD Driver] Z:\Users\Marek\AppData\Local\Temp\djaGAMolbl1.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "Z:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ICQ] "Z:\Program Files (x86)\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] Z:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] Z:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Acrobat Assistant.lnk = Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Remote Control.lnk = Z:\Program Files (x86)\Not Only TV Trio PCI Express\TV Tuner Card Utilities\HMCP6XCtl.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://Z:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Z:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Z:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Z:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Z:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - Z:\Program Files (x86)\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - Z:\Program Files (x86)\ICQ7.1\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - Z:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: z:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: z:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Z:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Z:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - Z:\Windows\system32\AEADISRV.EXE (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - Z:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - Z:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - Z:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - Z:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - Z:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - Z:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - Z:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - Z:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - Z:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - Z:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - Z:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - Z:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - Z:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - Z:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MySQL - Unknown owner - Z:\Program.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - Z:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - Z:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - Z:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - Z:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - Z:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - Z:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - Z:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - Z:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - Z:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe
O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - Z:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVESched.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - Z:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - Z:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - Z:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - Z:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - Z:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - Z:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - Z:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - Z:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14454 bytes

======Scheduled tasks folder======

Z:\Windows\tasks\Driver Fetch.job
Z:\Windows\tasks\GoogleUpdateTaskMachineCore.job
Z:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - Z:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2010-04-04 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - Z:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - Z:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-02-25 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - Z:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Windows Live ID - Z:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
AcroIEToolbarHelper Class - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15 147456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - Z:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - Z:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-02-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - Z:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15 147456]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - Z:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-03-28 1017592]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - Z:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TweakIt Help"=Z:\Program Files (x86)\ASUS\TweakIt\TweakIt.exe [2009-03-13 817152]
"LifeCam"=Z:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [2009-07-24 118624]
"GrooveMonitor"=Z:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"TkBellExe"=Z:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [2010-02-25 202256]
"Adobe Reader Speed Launcher"=Z:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=Z:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
"SunJavaUpdateSched"=Z:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-01-11 246504]
"AdobeCS4ServiceManager"=Z:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"TVEService"=Z:\Program Files (x86)\CyberLink\TV Enhance\TVEService.exe [2009-12-24 226536]
"LogMeIn Hamachi Ui"=Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"WinampAgent"=Z:\Program Files (x86)\Winamp\winampa.exe [2010-01-14 37888]
"SoundMAXPnP"=Z:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [2009-09-17 1310720]
"VolPanel"=Z:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [2009-07-07 241789]
"UpdReg"=Z:\Windows\UpdReg.EXE [2000-05-11 90112]
"QuickTime Task"=Z:\Program Files (x86)\QuickTime\QTTask.exe [2010-03-17 421888]
"StartCCC"=Z:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-06 102400]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=Z:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=Z:\Program Files (x86)\Skype\Phone\Skype.exe [2010-05-07 26211624]
"Sidebar"=Z:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]
"WindowsApplication1"=C:\WINDOWS\wowhack []
"Audio HD Driver"=Z:\Users\Marek\AppData\Local\Temp\djaGAMolbl1.exe []
"DAEMON Tools Lite"=Z:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"ICQ"=Z:\Program Files (x86)\ICQ7.1\ICQ.exe [2010-05-07 133368]

Z:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Acrobat Assistant.lnk - Z:\Program Files (x86)\Adobe\Acrobat 6.0\Distillr\acrotray.exe
Remote Control.lnk - Z:\Program Files (x86)\Not Only TV Trio PCI Express\TV Tuner Card Utilities\HMCP6XCtl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=Z:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=
"NoActiveDesktopChanges"=
"ForceActiveDesktopOn"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
shell\AutoRun\command - F:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{135af53f-3013-11df-8a42-e0cb4e064cbd}]
shell\AutoRun\command - H:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{70801701-3a41-11df-b629-e0cb4e064cbd}]
shell\AutoRun\command - F:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{abdf6ef1-31b0-11df-be63-0010605533d3}]
shell\AutoRun\command - F:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c16f170a-21dd-11df-ab3d-0010605533d3}]
shell\AutoRun\command - F:\LaunchU3.exe -a


======File associations======

.js - edit - Z:\Windows\System32\Notepad.exe %1
.js - open - Z:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-05-22 15:55:14 ----D---- Z:\rsit
2010-05-22 08:10:02 ----D---- Z:\Users\Marek\AppData\Roaming\Malwarebytes
2010-05-22 08:09:41 ----D---- Z:\ProgramData\Malwarebytes
2010-05-22 08:09:34 ----D---- Z:\Program Files (x86)\Malwarebytes' Anti-Malware
2010-05-22 07:47:44 ----D---- Z:\Program Files (x86)\Trend Micro
2010-05-21 22:40:18 ----D---- Z:\Program Files (x86)\CCleaner
2010-05-21 21:32:54 ----D---- Z:\Windows\SysWOW64\Wat
2010-05-15 17:22:29 ----D---- Z:\ProgramData\Spybot - Search & Destroy
2010-05-15 17:22:29 ----D---- Z:\Program Files (x86)\Spybot - Search & Destroy
2010-05-15 13:19:53 ----D---- Z:\Program Files (x86)\No-IP
2010-05-15 10:30:11 ----D---- Z:\ProgramData\UDL
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\PICSDK2.dll
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\PICSDK.ini
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\PICSDK.dll
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\PICEntry.dll
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\EpPicPrt.dll
2010-05-15 10:16:04 ----A---- Z:\Windows\SysWOW64\EPPicMgr.dll
2010-05-15 10:08:00 ----A---- Z:\Windows\CDE DX4000.ini
2010-05-12 13:21:47 ----A---- Z:\Windows\SysWOW64\inetcomm.dll
2010-05-07 16:18:10 ----D---- Z:\ProgramData\ATI
2010-05-07 16:16:27 ----D---- Z:\Program Files (x86)\Common Files\ATI Technologies
2010-05-07 16:15:42 ----D---- Z:\Program Files (x86)\ATI Technologies
2010-05-07 15:57:42 ----D---- Z:\Program Files (x86)\ICQ6Toolbar
2010-05-07 15:57:37 ----D---- Z:\ProgramData\ICQ
2010-05-07 15:57:32 ----D---- Z:\Users\Marek\AppData\Roaming\ICQ
2010-05-07 15:57:28 ----D---- Z:\Program Files (x86)\ICQ7.1
2010-05-03 18:17:20 ----D---- Z:\Program Files (x86)\Apple Software Update
2010-05-03 11:14:53 ----A---- Z:\Windows\SysWOW64\cttele32.dll
2010-05-03 11:14:52 ----N---- Z:\Windows\Updreg.EXE
2010-05-03 11:14:52 ----N---- Z:\Windows\SysWOW64\ResDefE.exe
2010-05-03 11:14:52 ----N---- Z:\Windows\FF08_Render_Spk_Hp.ini
2010-05-03 11:14:52 ----N---- Z:\Windows\FF08_Render.ini
2010-05-03 11:14:52 ----N---- Z:\Windows\FF08_Capture.ini
2010-05-03 11:14:51 ----A---- Z:\Windows\SysWOW64\CmdRtr.DLL
2010-05-03 11:14:51 ----A---- Z:\Windows\SysWOW64\APOMngr.DLL
2010-05-03 11:14:46 ----N---- Z:\Windows\SysWOW64\Sens_oal.dll
2010-05-03 11:14:46 ----A---- Z:\Windows\SysWOW64\wrap_oal.dll
2010-05-03 11:14:46 ----A---- Z:\Windows\SysWOW64\OpenAL32.dll
2010-05-03 11:13:30 ----D---- Z:\Program Files (x86)\Common Files\Creative Labs Shared
2010-05-03 11:10:07 ----D---- Z:\Program Files (x86)\Analog Devices
2010-05-03 11:09:47 ----D---- Z:\Users\Marek\AppData\Roaming\InstallShield
2010-05-02 23:26:20 ----D---- Z:\Users\Marek\AppData\Roaming\Creative
2010-04-28 18:29:02 ----D---- Z:\Program Files (x86)\MagicISO
2010-04-28 18:13:47 ----D---- Z:\Program Files (x86)\Alcohol Soft
2010-04-28 13:35:41 ----A---- Z:\Windows\SysWOW64\shell32.dll
2010-04-28 13:35:41 ----A---- Z:\Windows\SysWOW64\secur32.dll
2010-04-28 13:35:40 ----A---- Z:\Windows\SysWOW64\sspicli.dll

======List of files/folders modified in the last 1 months======

2010-05-23 11:30:20 ----D---- Z:\Windows\Temp
2010-05-23 11:30:01 ----D---- Z:\Users\Marek\AppData\Roaming\Skype
2010-05-23 11:20:42 ----D---- Z:\Windows\Prefetch
2010-05-23 10:14:51 ----SHD---- Z:\Windows\Installer
2010-05-23 10:14:07 ----D---- Z:\Windows\SysWOW64
2010-05-23 09:48:03 ----D---- Z:\Windows\SysWOW64\drivers
2010-05-23 09:29:40 ----D---- Z:\Windows\System32
2010-05-23 09:29:39 ----D---- Z:\Windows\inf
2010-05-23 09:23:25 ----D---- Z:\Users\Marek\AppData\Roaming\skypePM
2010-05-22 10:34:57 ----D---- Z:\Windows
2010-05-22 08:09:41 ----HD---- Z:\ProgramData
2010-05-22 08:09:34 ----RD---- Z:\Program Files (x86)
2010-05-21 22:47:57 ----SHD---- Z:\System Volume Information
2010-05-21 22:43:58 ----D---- Z:\Windows\Minidump
2010-05-21 22:43:58 ----D---- Z:\Windows\debug
2010-05-21 21:32:58 ----D---- Z:\Windows\winsxs
2010-05-16 08:29:17 ----D---- Z:\Users\Marek\AppData\Roaming\Adobe
2010-05-15 12:03:07 ----D---- Z:\Program Files (x86)\Google
2010-05-15 10:38:06 ----HD---- Z:\Program Files (x86)\InstallShield Installation Information
2010-05-15 10:37:01 ----D---- Z:\Windows\Downloaded Program Files
2010-05-15 10:36:58 ----D---- Z:\Program Files (x86)\Common Files\InstallShield
2010-05-15 10:32:18 ----D---- Z:\Program Files (x86)\epson
2010-05-15 10:11:26 ----RD---- Z:\Program Files
2010-05-14 16:47:58 ----D---- Z:\Users\Marek\AppData\Roaming\Download Manager
2010-05-12 15:32:52 ----D---- Z:\Program Files (x86)\Windows Mail
2010-05-12 15:18:43 ----D---- Z:\ProgramData\Microsoft Help
2010-05-10 09:23:35 ----D---- Z:\Users\Marek\AppData\Roaming\U3
2010-05-09 15:32:37 ----D---- Z:\World of Warcraft
2010-05-07 16:18:27 ----D---- Z:\Program Files (x86)\ATI
2010-05-07 16:16:27 ----D---- Z:\Program Files (x86)\Common Files
2010-05-07 16:16:23 ----RSD---- Z:\Windows\assembly
2010-05-03 23:00:04 ----D---- Z:\Program Files (x86)\Cheat Engine
2010-05-03 22:53:15 ----D---- Z:\Program Files (x86)\Steam
2010-05-03 18:18:03 ----D---- Z:\Program Files (x86)\QuickTime
2010-05-03 18:17:25 ----D---- Z:\Program Files (x86)\Common Files\Apple
2010-05-03 13:23:09 ----D---- Z:\Windows\Tasks
2010-05-03 11:22:01 ----D---- Z:\ProgramData\Creative
2010-05-03 11:14:46 ----D---- Z:\Program Files (x86)\Creative
2010-05-03 11:12:09 ----A---- Z:\Windows\Language_trs.ini
2010-05-03 11:06:50 ----D---- Z:\ProgramData\Apple Computer
2010-05-03 10:59:23 ----D---- Z:\Program Files (x86)\Opera
2010-05-03 10:58:53 ----D---- Z:\Program Files (x86)\Nokia
2010-05-03 10:57:32 ----D---- Z:\Windows\SysWOW64\inetsrv
2010-05-03 10:56:25 ----D---- Z:\Program Files (x86)\DAEMON Tools Toolbar
2010-05-03 10:54:26 ----D---- Z:\Program Files (x86)\Valve
2010-05-03 10:53:51 ----D---- Z:\Program Files (x86)\ASUS
2010-05-03 10:53:15 ----D---- Z:\Windows\ShellNew
2010-05-03 10:51:26 ----D---- Z:\Program Files (x86)\Common Files\Akamai
2010-05-03 10:17:01 ----A---- Z:\Windows\Ascd_tmp.ini
2010-05-01 10:57:15 ----D---- Z:\PacSteamT
2010-04-27 19:21:54 ----D---- Z:\Users\Marek\AppData\Roaming\BitTorrent

Pokracovanie LOGU

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AsIO;AsIO; Z:\Windows\SysWow64\drivers\AsIO.sys [2009-04-06 13368]
R1 blbdrive;blbdrive; Z:\Windows\system32\DRIVERS\blbdrive.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; Z:\Windows\system32\drivers\csc.sys []
R1 DfsC;@%systemroot%\system32\drivers\dfsc.sys,-101; Z:\Windows\System32\Drivers\dfsc.sys []
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; Z:\Windows\System32\drivers\discache.sys []
R1 ehdrv;ehdrv; Z:\Windows\system32\DRIVERS\ehdrv.sys []
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; Z:\Windows\system32\drivers\nsiproxy.sys []
R1 RDPENCDD;@%systemroot%\system32\drivers\RDPENCDD.sys,-101; Z:\Windows\system32\drivers\rdpencdd.sys []
R1 RDPREFMP;@%systemroot%\system32\drivers\RdpRefMp.sys,-101; Z:\Windows\system32\drivers\rdprefmp.sys []
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; Z:\Windows\system32\DRIVERS\tdx.sys []
R1 vwififlt;Virtual WiFi Filter Driver; Z:\Windows\system32\DRIVERS\vwififlt.sys []
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; Z:\Windows\system32\DRIVERS\wanarp.sys []
R1 WfpLwf;WFP Lightweight Filter; Z:\Windows\system32\DRIVERS\wfplwf.sys []
R2 adfs;adfs; Z:\Windows\SysWOW64\drivers\adfs.sys [2008-08-14 74720]
R2 eamon;eamon; Z:\Windows\system32\DRIVERS\eamon.sys []
R2 epfw;epfw; Z:\Windows\system32\DRIVERS\epfw.sys []
R2 epfwwfp;epfwwfp; Z:\Windows\system32\DRIVERS\epfwwfp.sys []
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver; Z:\Windows\system32\DRIVERS\lltdio.sys []
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; Z:\Windows\system32\drivers\luafv.sys []
R2 PEAUTH;PEAUTH; Z:\Windows\system32\drivers\peauth.sys []
R2 rspndr;Link-Layer Topology Discovery Responder; Z:\Windows\system32\DRIVERS\rspndr.sys []
R2 tcpipreg;TCP/IP Registry Compatibility; Z:\Windows\System32\drivers\tcpipreg.sys []
R3 1394ohci;1394 OHCI Compliant Host Controller; Z:\Windows\system32\DRIVERS\1394ohci.sys []
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; Z:\Windows\system32\drivers\ADIHdAud.sys []
R3 amdkmdag;amdkmdag; Z:\Windows\system32\DRIVERS\atikmdag.sys []
R3 amdkmdap;amdkmdap; Z:\Windows\system32\DRIVERS\atikmpag.sys []
R3 AmdPPM;AMD Processor Driver; Z:\Windows\system32\DRIVERS\amdppm.sys []
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; Z:\Windows\system32\drivers\AtiHdmi.sys []
R3 bowser;@%systemroot%\system32\browser.dll,-102; Z:\Windows\system32\DRIVERS\bowser.sys []
R3 circlass;Consumer IR Devices; Z:\Windows\system32\DRIVERS\circlass.sys []
R3 CompositeBus;Composite Bus Enumerator Driver; Z:\Windows\system32\DRIVERS\CompositeBus.sys []
R3 DXGKrnl;LDDM Graphics Subsystem; Z:\Windows\System32\drivers\dxgkrnl.sys []
R3 Epfwndis;Eset Personal Firewall; Z:\Windows\system32\DRIVERS\Epfwndis.sys []
R3 hamachi;Hamachi Network Interface; Z:\Windows\system32\DRIVERS\hamachi.sys []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; Z:\Windows\system32\DRIVERS\HDAudBus.sys []
R3 HidUsb;Microsoft HID Class Driver; Z:\Windows\system32\DRIVERS\hidusb.sys []
R3 kbdhid;Keyboard HID Driver; Z:\Windows\system32\DRIVERS\kbdhid.sys []
R3 ksthunk;Kernel Streaming Thunks; Z:\Windows\system32\drivers\ksthunk.sys []
R3 MCfilt;MCfilt; Z:\Windows\system32\drivers\MCfilt64.sys []
R3 monitor;Microsoft Monitor Class Function Driver Service; Z:\Windows\system32\DRIVERS\monitor.sys []
R3 mouhid;Mouse HID Driver; Z:\Windows\system32\DRIVERS\mouhid.sys []
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; Z:\Windows\System32\drivers\mpsdrv.sys []
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; Z:\Windows\system32\DRIVERS\mrxsmb10.sys []
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; Z:\Windows\system32\DRIVERS\mrxsmb20.sys []
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; Z:\Windows\System32\Drivers\nx6000.sys []
R3 MTsensor;ATK0110 ACPI UTILITY; Z:\Windows\system32\DRIVERS\ASACPI.sys []
R3 NativeWifiP;NativeWiFi Filter; Z:\Windows\system32\DRIVERS\nwifi.sys []
R3 NxpCap64;NXP capture service; Z:\Windows\system32\DRIVERS\NxpCap64.sys []
R3 Point64;Microsoft IntelliPoint Filter Driver; Z:\Windows\system32\DRIVERS\point64k.sys []
R3 RasAgileVpn;WAN Miniport (IKEv2); Z:\Windows\system32\DRIVERS\AgileVpn.sys []
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; Z:\Windows\system32\DRIVERS\rassstp.sys []
R3 rdpbus;Remote Desktop Device Redirector Bus Driver; Z:\Windows\system32\DRIVERS\rdpbus.sys []
R3 RTL8167;Realtek 8167 NT Driver; Z:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 RTL85n64;Realtek 8180/8185 Extensible 802.11 Wireless Device Driver; Z:\Windows\system32\DRIVERS\RTL85n64.sys []
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; Z:\Windows\System32\DRIVERS\srv2.sys []
R3 srvnet;srvnet; Z:\Windows\System32\DRIVERS\srvnet.sys []
R3 tssecsrv;@%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101; Z:\Windows\System32\DRIVERS\tssecsrv.sys []
R3 tunnel;Microsoft Tunnel Miniport Adapter Driver; Z:\Windows\system32\DRIVERS\tunnel.sys []
R3 umbus;UMBus Enumerator Driver; Z:\Windows\system32\DRIVERS\umbus.sys []
R3 usbaudio;USB Audio Driver (WDM); Z:\Windows\system32\drivers\usbaudio.sys []
R3 usbccgp;Microsoft USB Generic Parent Driver; Z:\Windows\system32\DRIVERS\usbccgp.sys []
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; Z:\Windows\system32\DRIVERS\usbehci.sys []
R3 usbhub;Microsoft USB Standard Hub Driver; Z:\Windows\system32\DRIVERS\usbhub.sys []
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; Z:\Windows\system32\DRIVERS\usbohci.sys []
R3 usbvideo;USB Video Device (WDM); Z:\Windows\System32\Drivers\usbvideo.sys []
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; Z:\Windows\system32\DRIVERS\wmiacpi.sys []
R3 WudfPf;User Mode Driver Frameworks Platform Driver; Z:\Windows\system32\drivers\WudfPf.sys []
S3 AcpiPmi;ACPI Power Meter Driver; Z:\Windows\system32\DRIVERS\acpipmi.sys []
S3 adp94xx;adp94xx; Z:\Windows\system32\DRIVERS\adp94xx.sys []
S3 adpahci;adpahci; Z:\Windows\system32\DRIVERS\adpahci.sys []
S3 adpu320;adpu320; Z:\Windows\system32\DRIVERS\adpu320.sys []
S3 agp440;Intel AGP Bus Filter; Z:\Windows\system32\DRIVERS\agp440.sys []
S3 amdide;amdide; Z:\Windows\system32\DRIVERS\amdide.sys []
S3 AmdK8;AMD K8 Processor Driver; Z:\Windows\system32\DRIVERS\amdk8.sys []
S3 amdsata;amdsata; Z:\Windows\system32\DRIVERS\amdsata.sys []
S3 amdsbs;amdsbs; Z:\Windows\system32\DRIVERS\amdsbs.sys []
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; Z:\Windows\system32\drivers\appid.sys []
S3 arc;arc; Z:\Windows\system32\DRIVERS\arc.sys []
S3 arcsas;arcsas; Z:\Windows\system32\DRIVERS\arcsas.sys []
S3 asphboga;asphboga; Z:\Windows\SysWOW64\drivers\asphboga.sys []
S3 b06bdrv;Broadcom NetXtreme II VBD; Z:\Windows\system32\DRIVERS\bxvbda.sys []
S3 b57nd60a;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; Z:\Windows\system32\DRIVERS\b57nd60a.sys []
S3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver; Z:\Windows\system32\DRIVERS\BrFiltLo.sys []
S3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver; Z:\Windows\system32\DRIVERS\BrFiltUp.sys []
S3 Brserid;Brother MFC Serial Port Interface Driver (WDM); Z:\Windows\System32\Drivers\Brserid.sys []
S3 BrSerWdm;Brother WDM Serial driver; Z:\Windows\System32\Drivers\BrSerWdm.sys []
S3 BrUsbMdm;Brother MFC USB Fax Only Modem; Z:\Windows\System32\Drivers\BrUsbMdm.sys []
S3 BrUsbSer;Brother MFC USB Serial WDM Driver; Z:\Windows\System32\Drivers\BrUsbSer.sys []
S3 BthAvrcp;Bluetooth AVRCP Profile; Z:\Windows\system32\DRIVERS\BthAvrcp.sys []
S3 BthEnum;Bluetooth Enumerator Service; Z:\Windows\system32\DRIVERS\BthEnum.sys []
S3 BTHMODEM;Bluetooth Modem Communications Driver; Z:\Windows\system32\DRIVERS\bthmodem.sys []
S3 BthPan;Bluetooth Device (Personal Area Network); Z:\Windows\system32\DRIVERS\bthpan.sys []
S3 BTHPORT;Bluetooth Port Driver; Z:\Windows\System32\Drivers\BTHport.sys []
S3 BTHUSB;Bluetooth Radio USB Driver; Z:\Windows\System32\Drivers\BTHUSB.sys []
S3 CmBatt;Microsoft ACPI Control Method Battery Driver; Z:\Windows\system32\DRIVERS\CmBatt.sys []
S3 Compbatt;Compbatt; Z:\Windows\system32\DRIVERS\compbatt.sys []
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD; Z:\Windows\system32\DRIVERS\evbda.sys []
S3 elxstor;elxstor; Z:\Windows\system32\DRIVERS\elxstor.sys []
S3 ErrDev;Microsoft Hardware Error Device Driver; Z:\Windows\system32\DRIVERS\errdev.sys []
S3 exfat;exFAT File System Driver; Z:\Windows\SysWOW64\drivers\exfat.sys []
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; Z:\Windows\system32\drivers\filetrace.sys []
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; Z:\Windows\System32\drivers\FsDepends.sys []
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; Z:\Windows\system32\DRIVERS\gagp30kx.sys []
S3 hcw85cir;Hauppauge Consumer Infrared Receiver; Z:\Windows\system32\drivers\hcw85cir.sys []
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; Z:\Windows\system32\drivers\HdAudio.sys []
S3 HidBatt;HID UPS Battery Driver; Z:\Windows\system32\DRIVERS\HidBatt.sys []
S3 HidBth;Microsoft Bluetooth HID Miniport; Z:\Windows\system32\DRIVERS\hidbth.sys []
S3 HidIr;Microsoft Infrared HID Driver; Z:\Windows\system32\DRIVERS\hidir.sys []
S3 HpSAMD;HpSAMD; Z:\Windows\system32\DRIVERS\HpSAMD.sys []
S3 iaStorV;iaStorV; Z:\Windows\system32\DRIVERS\iaStorV.sys []
S3 iirsp;iirsp; Z:\Windows\system32\DRIVERS\iirsp.sys []
S3 intelide;intelide; Z:\Windows\system32\DRIVERS\intelide.sys []
S3 intelppm;Intel Processor Driver; Z:\Windows\system32\DRIVERS\intelppm.sys []
S3 IPMIDRV;IPMIDRV; Z:\Windows\system32\DRIVERS\IPMIDrv.sys []
S3 isapnp;isapnp; Z:\Windows\system32\DRIVERS\isapnp.sys []
S3 iScsiPrt;iScsiPort Driver; Z:\Windows\system32\DRIVERS\msiscsi.sys []
S3 LSI_FC;LSI_FC; Z:\Windows\system32\DRIVERS\lsi_fc.sys []
S3 LSI_SAS;LSI_SAS; Z:\Windows\system32\DRIVERS\lsi_sas.sys []
S3 LSI_SAS2;LSI_SAS2; Z:\Windows\system32\DRIVERS\lsi_sas2.sys []
S3 LSI_SCSI;LSI_SCSI; Z:\Windows\system32\DRIVERS\lsi_scsi.sys []
S3 megasas;megasas; Z:\Windows\system32\DRIVERS\megasas.sys []
S3 MegaSR;MegaSR; Z:\Windows\system32\DRIVERS\MegaSR.sys []
S3 mpio;mpio; Z:\Windows\system32\DRIVERS\mpio.sys []
S3 msahci;msahci; Z:\Windows\system32\DRIVERS\msahci.sys []
S3 msdsm;msdsm; Z:\Windows\system32\DRIVERS\msdsm.sys []
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; Z:\Windows\System32\drivers\mshidkmdf.sys []
S3 MsRPC;MsRPC; Z:\Windows\SysWOW64\drivers\MsRPC.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; Z:\Windows\system32\drivers\MSTEE.sys []
S3 MTConfig;Microsoft Input Configuration Driver; Z:\Windows\system32\DRIVERS\MTConfig.sys []
S3 NdisCap;NDIS Capture LightWeight Filter; Z:\Windows\system32\DRIVERS\ndiscap.sys []
S3 netr28ux;RT2870 USB Wireless LAN Card Driver for Vista; Z:\Windows\system32\DRIVERS\netr28ux.sys []
S3 nfrd960;nfrd960; Z:\Windows\system32\DRIVERS\nfrd960.sys []
S3 nv_agp;NVIDIA nForce AGP Bus Filter; Z:\Windows\system32\DRIVERS\nv_agp.sys []
S3 nvraid;nvraid; Z:\Windows\system32\DRIVERS\nvraid.sys []
S3 nvstor;nvstor; Z:\Windows\system32\DRIVERS\nvstor.sys []
S3 ohci1394;1394 OHCI Compliant Host Controller (Legacy); Z:\Windows\system32\DRIVERS\ohci1394.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; Z:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 PKWCap64;PKWCap service; Z:\Windows\system32\DRIVERS\PKWCap64.sys []
S3 ql2300;ql2300; Z:\Windows\system32\DRIVERS\ql2300.sys []
S3 ql40xx;ql40xx; Z:\Windows\system32\DRIVERS\ql40xx.sys []
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; Z:\Windows\system32\drivers\qwavedrv.sys []
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); Z:\Windows\system32\DRIVERS\rfcomm.sys []
S3 s3cap;s3cap; Z:\Windows\system32\DRIVERS\vms3cap.sys []
S3 sbp2port;sbp2port; Z:\Windows\system32\DRIVERS\sbp2port.sys []
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; Z:\Windows\System32\DRIVERS\scfilter.sys []
S3 sermouse;Serial Mouse Driver; Z:\Windows\system32\DRIVERS\sermouse.sys []
S3 sffdisk;SFF Storage Class Driver; Z:\Windows\system32\DRIVERS\sffdisk.sys []
S3 sffp_mmc;SFF Storage Protocol Driver for MMC; Z:\Windows\system32\DRIVERS\sffp_mmc.sys []
S3 sffp_sd;SFF Storage Protocol Driver for SDBus; Z:\Windows\system32\DRIVERS\sffp_sd.sys []
S3 SiSRaid2;SiSRaid2; Z:\Windows\system32\DRIVERS\SiSRaid2.sys []
S3 SiSRaid4;SiSRaid4; Z:\Windows\system32\DRIVERS\sisraid4.sys []
S3 Smb;@%SystemRoot%\system32\tcpipcfg.dll,-50005; Z:\Windows\system32\DRIVERS\smb.sys []
S3 stexstor;stexstor; Z:\Windows\system32\DRIVERS\stexstor.sys []
S3 storvsc;storvsc; Z:\Windows\system32\DRIVERS\storvsc.sys []
S3 TCPIP6;Microsoft IPv6 Protocol Driver; Z:\Windows\system32\DRIVERS\tcpip.sys []
S3 uagp35;Microsoft AGPv3.5 Filter; Z:\Windows\system32\DRIVERS\uagp35.sys []
S3 uliagpkx;Uli AGP Bus Filter; Z:\Windows\system32\DRIVERS\uliagpkx.sys []
S3 UmPass;Microsoft UMPass Driver; Z:\Windows\system32\DRIVERS\umpass.sys []
S3 usbcir;eHome Infrared Receiver (USBCIR); Z:\Windows\system32\DRIVERS\usbcir.sys []
S3 usbprint;Microsoft USB PRINTER Class; Z:\Windows\system32\DRIVERS\usbprint.sys []
S3 usbscan;USB Scanner Driver; Z:\Windows\system32\DRIVERS\usbscan.sys []
S3 USBSTOR;USB Mass Storage Driver; Z:\Windows\system32\DRIVERS\USBSTOR.SYS []
S3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; Z:\Windows\system32\DRIVERS\usbuhci.sys []
S3 vga;vga; Z:\Windows\system32\DRIVERS\vgapnp.sys []
S3 vhdmp;vhdmp; Z:\Windows\system32\DRIVERS\vhdmp.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; Z:\Windows\system32\DRIVERS\vmbus.sys []
S3 VMBusHID;VMBusHID; Z:\Windows\system32\DRIVERS\VMBusHID.sys []
S3 vsmraid;vsmraid; Z:\Windows\system32\DRIVERS\vsmraid.sys []
S3 vwifibus;Virtual WiFi Bus Driver; Z:\Windows\system32\DRIVERS\vwifibus.sys []
S3 WacomPen;Wacom Serial Pen HID Driver; Z:\Windows\system32\DRIVERS\wacompen.sys []
S3 Wd;Wd; Z:\Windows\system32\DRIVERS\wd.sys []
S3 WIMMount;WIMMount; Z:\Windows\system32\drivers\wimmount.sys [2009-07-14 19008]
S3 WUDFRd;WUDFRd; Z:\Windows\system32\DRIVERS\WUDFRd.sys []
S4 crcdisk;Crcdisk Filter Driver; Z:\Windows\system32\DRIVERS\crcdisk.sys []
S4 ws2ifsl;@%systemroot%\System32\drivers\ws2ifsl.sys,-1000; Z:\Windows\system32\drivers\ws2ifsl.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AEADIFilters;Andrea ADI Filters Service; Z:\Windows\system32\AEADISRV.EXE []
R2 AMD External Events Utility;AMD External Events Utility; Z:\Windows\system32\atiesrxx.exe []
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\audiosrv.dll,-204; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 CTAudSvcService;Creative Audio Service; Z:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2009-02-23 307200]
R2 DPS;@%systemroot%\system32\dps.dll,-500; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; Z:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2009-11-16 735960]
R2 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 gpsvc;@gpapi.dll,-112; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; Z:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1823112]
R2 ICQ Service;ICQ Service; Z:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-03-28 246520]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MSCamSvc;MSCamSvc; Z:\Program Files\Microsoft LifeCam\MSCamS64.exe [2009-07-24 199008]
R2 MySQL;MySQL; Z:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld --defaults-file=Z:\Program Files\MySQL\MySQL Server 5.1\my.ini MySQL []
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); Z:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2009-12-24 247088]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 SBSDWSCService;SBSD Security Center Service; Z:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 TeamViewer5;TeamViewer 5; Z:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2009-12-17 185640]
R2 TVECapSvc;TVEnhance Background Capture Service (TBCS); Z:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe [2009-12-24 464224]
R2 TVESched;TVEnhance Task Scheduler (TTS)); Z:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVESched.exe [2009-12-24 189792]
R2 UxSms;@%SystemRoot%\system32\dwm.exe,-2000; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 WinDefend;@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 wlidsvc;Windows Live ID Sign-in Assistant; Z:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 2297216]
R2 WMPNetworkSvc;@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101; Z:\Program Files (x86)\Windows Media Player\wmpnetwk.exe []
R2 WSearch;@%systemroot%\system32\SearchIndexer.exe,-103; Z:\Windows\system32\SearchIndexer.exe [2009-07-14 428032]
R2 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 KeyIso;@keyiso.dll,-100; Z:\Windows\system32\lsass.exe []
R3 netprofm;@%SystemRoot%\system32\netprofm.dll,-202; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 gupdate;Google Update Service (gupdate); Z:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-03-17 136176]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 clr_optimization_v2.0.50727_32;Microsoft .NET Framework NGEN v2.0.50727_X86; Z:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2009-06-10 66384]
S3 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64; Z:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-06-10 89920]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; Z:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-05-03 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; Z:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-05-03 79360]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; Z:\Windows\System32\lsass.exe []
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; Z:\Windows\ehome\ehRecvr.exe [2009-07-14 696832]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; Z:\Windows\ehome\ehsched.exe [2009-07-14 127488]
S3 EhttpSrv;ESET HTTP Server; Z:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-11-16 23296]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; Z:\Windows\system32\fxssvc.exe []
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; Z:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-03-16 1038088]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; Z:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-03-16 655624]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; Z:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2009-06-10 42840]
S3 idsvc;@%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193; Z:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe [2009-06-10 856384]
S3 IPBusEnum;@%systemroot%\system32\IPBusEnum.dll,-102; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 KtmRm;@comres.dll,-2946; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; Z:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 MsDepSvc;Web Deployment Agent Service; Z:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [2010-01-19 55184]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 odserv;Microsoft Office Diagnostics Service; Z:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; Z:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; Z:\Windows\SysWow64\perfhost.exe [2009-07-14 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; Z:\Windows\System32\snmptrap.exe []
S3 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; Z:\Windows\system32\sppsvc.exe []
S3 sppuinotify;@%SystemRoot%\system32\sppuinotify.dll,-103; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Steam Client Service;Steam Client Service; Z:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-03-03 332720]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TBS;@%SystemRoot%\system32\tbssvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; Z:\Windows\servicing\TrustedInstaller.exe [2009-07-14 194048]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; Z:\Windows\system32\UI0Detect.exe []
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; Z:\Windows\system32\lsass.exe []
S3 vds;@%SystemRoot%\system32\vds.exe,-100; Z:\Windows\System32\vds.exe []
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; Z:\Windows\system32\Wat\WatAdminSvc.exe []
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; Z:\Windows\system32\wbengine.exe []
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; Z:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 AODService;AODService; Z:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [2009-04-22 124256]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; Z:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8201; Z:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 116560]

-----------------EOF-----------------

Vše, co našel MBAM, s vyjímkou posledních 2 souborů, smažte.

Rudy píše:Vše, co našel MBAM, s vyjímkou posledních 2 souborů, smažte.

Problemy stale pretrvavaju aj po zmazani vami odporucenich veci

Udělejte sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 .

Idem na to teraz som si zacal vsimat ze mi zacinaju postupne crashovat programy najprv zvukovka mi vipinala a teraz Fraps ziada o reinstall no ak mi tu nepomôzete tak reinstalujem Windows nerobi mi to problem len setky programi doznovu idem teda skusit urobit ten scan

Problém nemusí být způsoben virem. V taskmanageru lze zjistit, který proces vytěžřuje CPU nejvíce.

Kebize to je len jeden ono sa to strieda a najhorsie natom je ze si to beru uplne bezne aplikacia ako su skype firefox eset a podobne

Zkuste obnovu systému k datu, kdy korektně fungoval.

Noo uz sa to hodne zlepsilo ale ctelo by to take male doladeni lebo este trosku sa mi zda ze to taha z CPU viac nez by malo a stou obnovov dat to by bol problem heh lebo to uz mam takto dost dlho aj saom si povedal ze kaslem nato nemam nervy sa stim hrat ze ked bude cas tak reinstalnem Windows a az potom ma napadlo ze ak by som si mal setky programi opdznovu davat tak to racej skusim toto s hudbov videami a obrazkami dokumentami nieje problem mam v PC 3 Disky no a tie su este rozdelene na viac diskov