velmi seka a jednofarebna tapeta
Napsal: 24 čer 2010 18:48
prosim o kontrolu PC velmi seka a ked necham ho zapnuty po case naskocia farebne pasy na obrazovke a na nic nereaguje , jedine restart a potom je to stale dookola. pouzival som pandu 2010 ktoru som odinstal a dal som trial eset. dakujem
Logfile of random's system information tool 1.07 (written by random/random)
Run by jozefko at 2010-06-24 19:41:28
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 5 GB (14%) free of 32 GB
Total RAM: 958 MB (26% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:42:01, on 24. 6. 2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\VTTimer.exe
C:\Windows\System32\S3Trayp.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\SYSTEM32\taskeng.exe
C:\Windows\system32\wuauclt.exe
D:\preberanie z internetu\RSIT.exe
C:\Program Files\trend micro\jozefko.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [VModes] VModes AttachToDesktop
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_5F1A57F0B9B89E2E.dll/cmsidewiki.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\program files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\program files\ICQ6.5\ICQ.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: lxbc_device - - C:\Windows\system32\lxbccoms.exe
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
--
End of file - 7292 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Defraggler Volume C Task.job
C:\Windows\tasks\Spybot - Search & Destroy - Scheduled Task.job
C:\Windows\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-05-31 798771]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-05-31 798771]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
"VModes"=VModes AttachToDesktop []
"VTTimer"=C:\Windows\SYSTEM32\VTTimer.exe [2006-09-21 53248]
"S3Trayp"=C:\Windows\SYSTEM32\S3trayp.exe [2006-10-09 176128]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-04-07 5369856]
"Skytel"=C:\Windows\Skytel.exe [2008-04-07 1826816]
"TrueImageMonitor.exe"=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2008-03-06 2615688]
"AcronisTimounterMonitor"=C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [2008-03-06 910744]
"Acronis Scheduler2 Service"=C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2008-03-06 140568]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-03-24 2145000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1233920]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-11-16 139264]
"OEXPRESS"= []
"WEBTRAN"= []
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-18 202240]
"Nektra OEAPI"= []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
relog_ap
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9a77349b-8b64-11de-9eb6-0019dbb421c6}]
shell\AutoRun\command - F:\SETUP.EXE
shell\configure\command - F:\SETUP.EXE
shell\install\command - F:\SETUP.EXE
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-06-24 12:57:22 ----SHD---- C:\Config.Msi
2010-06-23 20:52:19 ----D---- C:\Program Files\Microsoft Silverlight
2010-06-23 20:09:48 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-06-23 20:09:48 ----A---- C:\Windows\system32\PresentationHost.exe
2010-06-23 20:09:48 ----A---- C:\Windows\system32\netfxperf.dll
2010-06-23 20:09:48 ----A---- C:\Windows\system32\mscoree.dll
2010-06-23 20:09:47 ----A---- C:\Windows\system32\dfshim.dll
2010-06-23 20:02:17 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-06-23 20:02:16 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-06-22 06:55:12 ----D---- C:\Users\jozefko\AppData\Roaming\ESET
2010-06-22 06:51:05 ----D---- C:\ProgramData\ESET
2010-06-22 06:51:05 ----D---- C:\Program Files\ESET
2010-06-10 07:23:28 ----A---- C:\Windows\system32\mshtml.dll
2010-06-10 07:23:15 ----A---- C:\Windows\system32\ieframe.dll
2010-06-10 07:23:06 ----A---- C:\Windows\system32\iertutil.dll
2010-06-10 07:23:04 ----A---- C:\Windows\system32\urlmon.dll
2010-06-10 07:23:02 ----A---- C:\Windows\system32\wininet.dll
2010-06-10 07:23:00 ----A---- C:\Windows\system32\msfeeds.dll
2010-06-10 07:22:59 ----A---- C:\Windows\system32\occache.dll
2010-06-10 07:22:59 ----A---- C:\Windows\system32\mstime.dll
2010-06-10 07:22:59 ----A---- C:\Windows\system32\iedkcs32.dll
2010-06-10 07:22:54 ----A---- C:\Windows\system32\ieui.dll
2010-06-10 07:22:53 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-06-10 07:22:53 ----A---- C:\Windows\system32\ieUnatt.exe
2010-06-10 07:22:53 ----A---- C:\Windows\system32\iepeers.dll
2010-06-10 07:22:52 ----A---- C:\Windows\system32\iesysprep.dll
2010-06-10 07:22:51 ----A---- C:\Windows\system32\msfeedssync.exe
2010-06-10 07:22:51 ----A---- C:\Windows\system32\jsproxy.dll
2010-06-10 07:22:51 ----A---- C:\Windows\system32\ie4uinit.exe
2010-06-10 07:22:50 ----A---- C:\Windows\system32\iesetup.dll
2010-06-10 07:22:50 ----A---- C:\Windows\system32\iernonce.dll
2010-06-10 07:19:15 ----A---- C:\Windows\system32\atmfd.dll
2010-06-10 07:19:11 ----A---- C:\Windows\system32\atmlib.dll
2010-06-10 07:18:45 ----A---- C:\Windows\system32\asycfilt.dll
2010-06-04 21:00:45 ----D---- C:\movies
2010-06-04 19:27:40 ----A---- C:\Windows\NeroDigital.ini
2010-06-03 21:17:04 ----A---- C:\Windows\system32\apexchanger.exe
2010-06-03 21:17:04 ----A---- C:\Windows\system32\apex3gp.exe
2010-06-03 21:17:03 ----A---- C:\Windows\system32\apexpmp.exe
2010-06-03 21:17:03 ----A---- C:\Windows\system32\apexconverter.exe
2010-06-03 21:17:02 ----A---- C:\Windows\system32\NCTImageFile.dll
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP2_QVGA_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP2_QCIF_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP_QVGA_AMR.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP_QVGA_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP_QCIF_AMR.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP_QCIF_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_Zune.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_Xbox.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_PSP.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_PPC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_PMP.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_iPod.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_iPhone.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_AppleTV.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_3GP2_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_3GP_AMR.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_3GP_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Add_mfra.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\cygz.dll
2010-06-03 21:17:02 ----A---- C:\Windows\system32\cygwin1.dll
2010-06-03 21:17:02 ----A---- C:\Windows\system32\apexxbox.exe
2010-06-03 21:17:02 ----A---- C:\Windows\system32\AddiTunes.exe
2010-06-03 21:16:59 ----A---- C:\Windows\system32\NCTQuickTimeFile.dll
2010-06-03 21:16:55 ----A---- C:\Windows\system32\NCTRMFile.dll
2010-06-03 21:16:51 ----A---- C:\Windows\system32\NCTVideoCoreM.dll
2010-06-03 21:16:47 ----A---- C:\Windows\system32\NCTAVIFile.dll
2010-06-03 21:16:43 ----A---- C:\Windows\system32\NCTVideoCompress.dll
2010-06-03 21:16:43 ----A---- C:\Windows\system32\NCTAudioFormatSettings3.dll
2010-06-03 21:16:43 ----A---- C:\Windows\system32\NCTAudioCompress3.dll
2010-06-03 21:16:40 ----A---- C:\Windows\system32\NCTVideoView.dll
2010-06-03 21:16:36 ----A---- C:\Windows\system32\NCTVideoFile.dll
2010-06-03 21:16:32 ----A---- C:\Windows\system32\NCTAudioCompress2.dll
2010-06-03 21:16:27 ----A---- C:\Windows\system32\NCTWMVFile.dll
2010-06-03 21:16:26 ----A---- C:\Windows\system32\lame_enc.dll
2010-06-03 21:16:23 ----D---- C:\Windows\system32\RMBin
2010-06-03 21:16:23 ----A---- C:\Windows\system32\viscomwave.dll
2010-06-03 21:16:23 ----A---- C:\Windows\system32\viscomqtenc.dll
2010-06-03 21:16:23 ----A---- C:\Windows\system32\viscomqtde.dll
2010-06-03 21:01:22 ----A---- C:\Windows\system32\gdiplus.dll
2010-06-01 08:50:11 ----D---- C:\ProgramData\Google
2010-05-30 07:44:47 ----D---- C:\Users\jozefko\AppData\Roaming\Uniblue
2010-05-30 07:09:03 ----A---- C:\mbam-error.txt
2010-05-28 12:12:01 ----D---- C:\ProgramData\Panda Software
2010-05-26 15:18:20 ----A---- C:\Windows\system32\tzres.dll
======List of files/folders modified in the last 1 months======
2010-06-24 19:41:39 ----D---- C:\Program Files\trend micro
2010-06-24 19:41:32 ----D---- C:\Windows\Temp
2010-06-24 19:38:56 ----RSD---- C:\Windows\assembly
2010-06-24 19:32:12 ----D---- C:\Windows\Microsoft.NET
2010-06-24 13:41:29 ----SHD---- C:\Windows\Installer
2010-06-24 13:37:11 ----D---- C:\Windows\System32
2010-06-24 13:37:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-06-24 13:33:07 ----D---- C:\Program Files\Microsoft.NET
2010-06-24 13:26:44 ----SHD---- C:\System Volume Information
2010-06-24 13:01:22 ----D---- C:\Windows\system32\en-US
2010-06-24 06:07:35 ----D---- C:\Windows\Prefetch
2010-06-23 20:53:03 ----SD---- C:\ProgramData\Microsoft
2010-06-23 20:52:19 ----RD---- C:\Program Files
2010-06-23 20:47:09 ----D---- C:\Windows\winsxs
2010-06-23 20:47:08 ----D---- C:\Windows\AppPatch
2010-06-23 20:30:40 ----D---- C:\Windows\Minidump
2010-06-23 20:30:40 ----D---- C:\Windows
2010-06-23 20:20:14 ----D---- C:\Windows\inf
2010-06-23 20:09:59 ----D---- C:\Windows\system32\catroot
2010-06-23 20:00:22 ----D---- C:\Windows\system32\catroot2
2010-06-22 22:10:15 ----AD---- C:\ProgramData\TEMP
2010-06-22 06:54:12 ----D---- C:\Windows\system32\drivers
2010-06-22 06:51:05 ----HD---- C:\ProgramData
2010-06-22 06:33:17 ----D---- C:\Program Files\Common Files
2010-06-21 21:58:31 ----D---- C:\Users\jozefko\AppData\Roaming\uTorrent
2010-06-20 11:29:05 ----D---- C:\Windows\Debug
2010-06-20 08:36:03 ----D---- C:\Users\jozefko\AppData\Roaming\vlc
2010-06-20 08:18:58 ----D---- C:\ProgramData\Apple Computer
2010-06-10 20:20:35 ----D---- C:\ProgramData\Microsoft Help
2010-06-10 20:18:57 ----D---- C:\Windows\system32\wbem
2010-06-10 09:24:25 ----D---- C:\Windows\system32\migration
2010-06-10 09:24:25 ----D---- C:\Program Files\Windows Mail
2010-06-10 09:24:25 ----D---- C:\Program Files\Internet Explorer
2010-06-02 08:11:52 ----D---- C:\Windows\Tasks
2010-06-02 08:11:51 ----D---- C:\Windows\system32\Tasks
2010-06-01 08:50:11 ----D---- C:\Program Files\Google
2010-06-01 08:30:20 ----RD---- C:\Program Files\Skype
2010-06-01 08:17:34 ----D---- C:\Program Files\Common Files\InstallShield
2010-06-01 08:17:14 ----HD---- C:\Program Files\InstallShield Installation Information
2010-06-01 08:15:42 ----D---- C:\Program Files\Common Files\Nikon
2010-06-01 08:15:17 ----D---- C:\Program Files\Nikon
2010-06-01 08:12:06 ----SD---- C:\Users\jozefko\AppData\Roaming\Microsoft
2010-05-31 15:17:39 ----D---- C:\Users\jozefko\AppData\Roaming\LangSoft
2010-05-31 15:17:39 ----D---- C:\TRANSLAT
2010-05-31 15:17:36 ----D---- C:\ProgramData\LangSoft
2010-05-30 12:18:04 ----D---- C:\Windows\system32\config
2010-05-30 07:08:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-05-30 05:54:36 ----D---- C:\Users\jozefko\AppData\Roaming\Media Player Classic
2010-05-28 21:37:34 ----A---- C:\Windows\system32\mrt.exe
2010-05-27 06:19:32 ----D---- C:\Windows\rescache
2010-05-26 21:28:05 ----D---- C:\Windows\system32\sk-SK
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-03-24 114984]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-03-24 133512]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-03-24 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-03-24 41312]
R2 tifsfilter;Acronis True Image FS Filter; C:\Windows\system32\DRIVERS\tifsfilt.sys [2009-07-12 44384]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-03-24 32584]
R3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-04-07 2103512]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-07-15 47360]
R3 S3GIGP;S3GIGP; C:\Windows\system32\DRIVERS\S3gIGPm.sys [2006-11-10 634880]
S3 AVerHybrid;AVerMedia Hybrid Tuner (NTSC/PAL/SECAM/DVB-T/FM); C:\Windows\system32\drivers\averhbtv.sys [2006-09-08 283648]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2010-04-29 20952]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2008-03-06 427288]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-03-24 810120]
R2 lxbc_device;lxbc_device; C:\Windows\system32\lxbccoms.exe [2007-03-16 537520]
R2 TryAndDecideService;Acronis Try And Decide Service; C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [2008-03-06 495936]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-03-24 33560]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
-----------------EOF-----------------
Logfile of random's system information tool 1.07 (written by random/random)
Run by jozefko at 2010-06-24 19:41:28
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 5 GB (14%) free of 32 GB
Total RAM: 958 MB (26% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:42:01, on 24. 6. 2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\VTTimer.exe
C:\Windows\System32\S3Trayp.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\SYSTEM32\taskeng.exe
C:\Windows\system32\wuauclt.exe
D:\preberanie z internetu\RSIT.exe
C:\Program Files\trend micro\jozefko.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [VModes] VModes AttachToDesktop
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_5F1A57F0B9B89E2E.dll/cmsidewiki.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\program files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\program files\ICQ6.5\ICQ.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: lxbc_device - - C:\Windows\system32\lxbccoms.exe
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
--
End of file - 7292 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Defraggler Volume C Task.job
C:\Windows\tasks\Spybot - Search & Destroy - Scheduled Task.job
C:\Windows\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-05-31 798771]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-05-31 798771]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
"VModes"=VModes AttachToDesktop []
"VTTimer"=C:\Windows\SYSTEM32\VTTimer.exe [2006-09-21 53248]
"S3Trayp"=C:\Windows\SYSTEM32\S3trayp.exe [2006-10-09 176128]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-04-07 5369856]
"Skytel"=C:\Windows\Skytel.exe [2008-04-07 1826816]
"TrueImageMonitor.exe"=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2008-03-06 2615688]
"AcronisTimounterMonitor"=C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [2008-03-06 910744]
"Acronis Scheduler2 Service"=C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2008-03-06 140568]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-03-24 2145000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1233920]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-11-16 139264]
"OEXPRESS"= []
"WEBTRAN"= []
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-18 202240]
"Nektra OEAPI"= []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
relog_ap
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9a77349b-8b64-11de-9eb6-0019dbb421c6}]
shell\AutoRun\command - F:\SETUP.EXE
shell\configure\command - F:\SETUP.EXE
shell\install\command - F:\SETUP.EXE
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-06-24 12:57:22 ----SHD---- C:\Config.Msi
2010-06-23 20:52:19 ----D---- C:\Program Files\Microsoft Silverlight
2010-06-23 20:09:48 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-06-23 20:09:48 ----A---- C:\Windows\system32\PresentationHost.exe
2010-06-23 20:09:48 ----A---- C:\Windows\system32\netfxperf.dll
2010-06-23 20:09:48 ----A---- C:\Windows\system32\mscoree.dll
2010-06-23 20:09:47 ----A---- C:\Windows\system32\dfshim.dll
2010-06-23 20:02:17 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-06-23 20:02:16 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-06-22 06:55:12 ----D---- C:\Users\jozefko\AppData\Roaming\ESET
2010-06-22 06:51:05 ----D---- C:\ProgramData\ESET
2010-06-22 06:51:05 ----D---- C:\Program Files\ESET
2010-06-10 07:23:28 ----A---- C:\Windows\system32\mshtml.dll
2010-06-10 07:23:15 ----A---- C:\Windows\system32\ieframe.dll
2010-06-10 07:23:06 ----A---- C:\Windows\system32\iertutil.dll
2010-06-10 07:23:04 ----A---- C:\Windows\system32\urlmon.dll
2010-06-10 07:23:02 ----A---- C:\Windows\system32\wininet.dll
2010-06-10 07:23:00 ----A---- C:\Windows\system32\msfeeds.dll
2010-06-10 07:22:59 ----A---- C:\Windows\system32\occache.dll
2010-06-10 07:22:59 ----A---- C:\Windows\system32\mstime.dll
2010-06-10 07:22:59 ----A---- C:\Windows\system32\iedkcs32.dll
2010-06-10 07:22:54 ----A---- C:\Windows\system32\ieui.dll
2010-06-10 07:22:53 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-06-10 07:22:53 ----A---- C:\Windows\system32\ieUnatt.exe
2010-06-10 07:22:53 ----A---- C:\Windows\system32\iepeers.dll
2010-06-10 07:22:52 ----A---- C:\Windows\system32\iesysprep.dll
2010-06-10 07:22:51 ----A---- C:\Windows\system32\msfeedssync.exe
2010-06-10 07:22:51 ----A---- C:\Windows\system32\jsproxy.dll
2010-06-10 07:22:51 ----A---- C:\Windows\system32\ie4uinit.exe
2010-06-10 07:22:50 ----A---- C:\Windows\system32\iesetup.dll
2010-06-10 07:22:50 ----A---- C:\Windows\system32\iernonce.dll
2010-06-10 07:19:15 ----A---- C:\Windows\system32\atmfd.dll
2010-06-10 07:19:11 ----A---- C:\Windows\system32\atmlib.dll
2010-06-10 07:18:45 ----A---- C:\Windows\system32\asycfilt.dll
2010-06-04 21:00:45 ----D---- C:\movies
2010-06-04 19:27:40 ----A---- C:\Windows\NeroDigital.ini
2010-06-03 21:17:04 ----A---- C:\Windows\system32\apexchanger.exe
2010-06-03 21:17:04 ----A---- C:\Windows\system32\apex3gp.exe
2010-06-03 21:17:03 ----A---- C:\Windows\system32\apexpmp.exe
2010-06-03 21:17:03 ----A---- C:\Windows\system32\apexconverter.exe
2010-06-03 21:17:02 ----A---- C:\Windows\system32\NCTImageFile.dll
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP2_QVGA_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP2_QCIF_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP_QVGA_AMR.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP_QVGA_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP_QCIF_AMR.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_QT_3GPP_QCIF_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_Zune.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_Xbox.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_PSP.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_PPC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_PMP.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_iPod.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_iPhone.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_AppleTV.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_3GP2_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_3GP_AMR.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Pro_3GP_AAC.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\INI_Add_mfra.ini
2010-06-03 21:17:02 ----A---- C:\Windows\system32\cygz.dll
2010-06-03 21:17:02 ----A---- C:\Windows\system32\cygwin1.dll
2010-06-03 21:17:02 ----A---- C:\Windows\system32\apexxbox.exe
2010-06-03 21:17:02 ----A---- C:\Windows\system32\AddiTunes.exe
2010-06-03 21:16:59 ----A---- C:\Windows\system32\NCTQuickTimeFile.dll
2010-06-03 21:16:55 ----A---- C:\Windows\system32\NCTRMFile.dll
2010-06-03 21:16:51 ----A---- C:\Windows\system32\NCTVideoCoreM.dll
2010-06-03 21:16:47 ----A---- C:\Windows\system32\NCTAVIFile.dll
2010-06-03 21:16:43 ----A---- C:\Windows\system32\NCTVideoCompress.dll
2010-06-03 21:16:43 ----A---- C:\Windows\system32\NCTAudioFormatSettings3.dll
2010-06-03 21:16:43 ----A---- C:\Windows\system32\NCTAudioCompress3.dll
2010-06-03 21:16:40 ----A---- C:\Windows\system32\NCTVideoView.dll
2010-06-03 21:16:36 ----A---- C:\Windows\system32\NCTVideoFile.dll
2010-06-03 21:16:32 ----A---- C:\Windows\system32\NCTAudioCompress2.dll
2010-06-03 21:16:27 ----A---- C:\Windows\system32\NCTWMVFile.dll
2010-06-03 21:16:26 ----A---- C:\Windows\system32\lame_enc.dll
2010-06-03 21:16:23 ----D---- C:\Windows\system32\RMBin
2010-06-03 21:16:23 ----A---- C:\Windows\system32\viscomwave.dll
2010-06-03 21:16:23 ----A---- C:\Windows\system32\viscomqtenc.dll
2010-06-03 21:16:23 ----A---- C:\Windows\system32\viscomqtde.dll
2010-06-03 21:01:22 ----A---- C:\Windows\system32\gdiplus.dll
2010-06-01 08:50:11 ----D---- C:\ProgramData\Google
2010-05-30 07:44:47 ----D---- C:\Users\jozefko\AppData\Roaming\Uniblue
2010-05-30 07:09:03 ----A---- C:\mbam-error.txt
2010-05-28 12:12:01 ----D---- C:\ProgramData\Panda Software
2010-05-26 15:18:20 ----A---- C:\Windows\system32\tzres.dll
======List of files/folders modified in the last 1 months======
2010-06-24 19:41:39 ----D---- C:\Program Files\trend micro
2010-06-24 19:41:32 ----D---- C:\Windows\Temp
2010-06-24 19:38:56 ----RSD---- C:\Windows\assembly
2010-06-24 19:32:12 ----D---- C:\Windows\Microsoft.NET
2010-06-24 13:41:29 ----SHD---- C:\Windows\Installer
2010-06-24 13:37:11 ----D---- C:\Windows\System32
2010-06-24 13:37:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-06-24 13:33:07 ----D---- C:\Program Files\Microsoft.NET
2010-06-24 13:26:44 ----SHD---- C:\System Volume Information
2010-06-24 13:01:22 ----D---- C:\Windows\system32\en-US
2010-06-24 06:07:35 ----D---- C:\Windows\Prefetch
2010-06-23 20:53:03 ----SD---- C:\ProgramData\Microsoft
2010-06-23 20:52:19 ----RD---- C:\Program Files
2010-06-23 20:47:09 ----D---- C:\Windows\winsxs
2010-06-23 20:47:08 ----D---- C:\Windows\AppPatch
2010-06-23 20:30:40 ----D---- C:\Windows\Minidump
2010-06-23 20:30:40 ----D---- C:\Windows
2010-06-23 20:20:14 ----D---- C:\Windows\inf
2010-06-23 20:09:59 ----D---- C:\Windows\system32\catroot
2010-06-23 20:00:22 ----D---- C:\Windows\system32\catroot2
2010-06-22 22:10:15 ----AD---- C:\ProgramData\TEMP
2010-06-22 06:54:12 ----D---- C:\Windows\system32\drivers
2010-06-22 06:51:05 ----HD---- C:\ProgramData
2010-06-22 06:33:17 ----D---- C:\Program Files\Common Files
2010-06-21 21:58:31 ----D---- C:\Users\jozefko\AppData\Roaming\uTorrent
2010-06-20 11:29:05 ----D---- C:\Windows\Debug
2010-06-20 08:36:03 ----D---- C:\Users\jozefko\AppData\Roaming\vlc
2010-06-20 08:18:58 ----D---- C:\ProgramData\Apple Computer
2010-06-10 20:20:35 ----D---- C:\ProgramData\Microsoft Help
2010-06-10 20:18:57 ----D---- C:\Windows\system32\wbem
2010-06-10 09:24:25 ----D---- C:\Windows\system32\migration
2010-06-10 09:24:25 ----D---- C:\Program Files\Windows Mail
2010-06-10 09:24:25 ----D---- C:\Program Files\Internet Explorer
2010-06-02 08:11:52 ----D---- C:\Windows\Tasks
2010-06-02 08:11:51 ----D---- C:\Windows\system32\Tasks
2010-06-01 08:50:11 ----D---- C:\Program Files\Google
2010-06-01 08:30:20 ----RD---- C:\Program Files\Skype
2010-06-01 08:17:34 ----D---- C:\Program Files\Common Files\InstallShield
2010-06-01 08:17:14 ----HD---- C:\Program Files\InstallShield Installation Information
2010-06-01 08:15:42 ----D---- C:\Program Files\Common Files\Nikon
2010-06-01 08:15:17 ----D---- C:\Program Files\Nikon
2010-06-01 08:12:06 ----SD---- C:\Users\jozefko\AppData\Roaming\Microsoft
2010-05-31 15:17:39 ----D---- C:\Users\jozefko\AppData\Roaming\LangSoft
2010-05-31 15:17:39 ----D---- C:\TRANSLAT
2010-05-31 15:17:36 ----D---- C:\ProgramData\LangSoft
2010-05-30 12:18:04 ----D---- C:\Windows\system32\config
2010-05-30 07:08:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-05-30 05:54:36 ----D---- C:\Users\jozefko\AppData\Roaming\Media Player Classic
2010-05-28 21:37:34 ----A---- C:\Windows\system32\mrt.exe
2010-05-27 06:19:32 ----D---- C:\Windows\rescache
2010-05-26 21:28:05 ----D---- C:\Windows\system32\sk-SK
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-03-24 114984]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-03-24 133512]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-03-24 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-03-24 41312]
R2 tifsfilter;Acronis True Image FS Filter; C:\Windows\system32\DRIVERS\tifsfilt.sys [2009-07-12 44384]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-03-24 32584]
R3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-04-07 2103512]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-07-15 47360]
R3 S3GIGP;S3GIGP; C:\Windows\system32\DRIVERS\S3gIGPm.sys [2006-11-10 634880]
S3 AVerHybrid;AVerMedia Hybrid Tuner (NTSC/PAL/SECAM/DVB-T/FM); C:\Windows\system32\drivers\averhbtv.sys [2006-09-08 283648]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2010-04-29 20952]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2008-03-06 427288]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-03-24 810120]
R2 lxbc_device;lxbc_device; C:\Windows\system32\lxbccoms.exe [2007-03-16 537520]
R2 TryAndDecideService;Acronis Try And Decide Service; C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [2008-03-06 495936]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-03-24 33560]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
-----------------EOF-----------------