Preventivka - RSIT
Napsal: 17 črc 2010 04:46
Logfile of random's system information tool 1.08 (written by random/random)
Run by morbe at 2010-07-17 05:44:30
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 209 GB (34%) free of 610 GB
Total RAM: 3326 MB (45% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:44:32, on 17.7.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\Six Engine\SixEngine.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\morbe\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\conime.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Steam\Steam.exe
C:\Windows\system32\cmd.exe
C:\Program Files\Java\jre6\bin\javaw.exe
C:\PROGRA~1\THEKMP~1\KMPlayer.exe
C:\Users\morbe\Desktop\download\RSIT.exe
C:\Program Files\trend micro\morbe.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://webtv.starnet.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe
O23 - Service: Creative Centrale Media Server (CTUPnPSv) - Creative Technology Ltd - C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
--
End of file - 5326 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3115684867-1554512148-76294249-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3115684867-1554512148-76294249-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-18 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-20 6144000]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-06-01 2039240]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-05-27 98304]
"CmUsbSound"=RunDll32 cmcnfgu.cpl,CMICtrlWnd []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=c:\program files\steam\steam.exe [2010-05-07 1238352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard32.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-07-17 05:42:57 ----D---- C:\rsit
2010-07-17 05:42:57 ----D---- C:\Program Files\trend micro
2010-07-16 00:42:38 ----D---- C:\Program Files\MediaInfo
2010-07-15 16:50:14 ----A---- C:\Windows\system32\pbsvc_bc2.exe
2010-07-15 16:41:16 ----D---- C:\Program Files\Electronic Arts
2010-07-09 06:27:21 ----D---- C:\temp
2010-07-09 06:21:20 ----A---- C:\Windows\Lexstat.ini
2010-07-09 05:51:30 ----D---- C:\drivers
2010-07-09 05:42:25 ----A---- C:\Windows\unin0405.exe
2010-07-06 00:13:32 ----D---- C:\Users\morbe\AppData\Roaming\skypePM
2010-07-06 00:07:23 ----D---- C:\Users\morbe\AppData\Roaming\Skype
2010-07-06 00:07:16 ----RD---- C:\Program Files\Skype
2010-07-06 00:07:16 ----D---- C:\Program Files\Common Files\Skype
2010-07-05 23:01:22 ----D---- C:\Program Files\QS
2010-07-03 03:53:40 ----D---- C:\Users\morbe\AppData\Roaming\mIRC
2010-07-03 03:53:40 ----D---- C:\Program Files\mIRC
2010-07-03 02:47:09 ----A---- C:\Windows\system32\drivers\cmudaxu.sys
2010-07-03 02:47:09 ----A---- C:\Windows\system32\cmudau.dll
2010-07-03 02:47:09 ----A---- C:\Windows\system32\cmpropu.dll
2010-07-03 02:47:09 ----A---- C:\Windows\system32\cmdrvrmu.exe
2010-07-03 02:47:09 ----A---- C:\Windows\system32\cmdrvrmu.dll
2010-07-03 02:47:09 ----A---- C:\Windows\system32\a3dpropu.dll
2010-07-03 02:47:09 ----A---- C:\Windows\system32\a3d.dll
2010-07-03 02:47:00 ----R---- C:\Windows\CmiUSB2Uninstall.exe
2010-07-03 02:46:43 ----D---- C:\Program Files\HS-04U
2010-07-02 23:12:10 ----D---- C:\Root
2010-07-02 23:10:54 ----SHD---- C:\Windows\ftpcache
2010-07-02 05:36:03 ----D---- C:\ProgramData\ATI
2010-07-01 23:23:14 ----D---- C:\QIP Infium JadrisPack
2010-07-01 23:01:31 ----D---- C:\Program Files\ICQ6Toolbar
2010-07-01 23:01:22 ----D---- C:\Users\morbe\AppData\Roaming\ICQ
2010-07-01 23:01:16 ----D---- C:\Program Files\ICQ7.2
2010-06-30 13:12:02 ----D---- C:\Program Files\Kalypso
2010-06-24 03:00:33 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-06-24 03:00:33 ----A---- C:\Windows\system32\PresentationHost.exe
2010-06-24 03:00:33 ----A---- C:\Windows\system32\netfxperf.dll
2010-06-24 03:00:33 ----A---- C:\Windows\system32\mscoree.dll
2010-06-24 03:00:33 ----A---- C:\Windows\system32\dfshim.dll
2010-06-23 11:50:08 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-06-23 11:50:08 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-06-21 16:17:43 ----D---- C:\Users\morbe\AppData\Roaming\mp3DirectCut
2010-06-20 16:56:56 ----D---- C:\Users\morbe\AppData\Roaming\Adobe Mini Bridge CS5
======List of files/folders modified in the last 1 months======
2010-07-17 05:42:57 ----D---- C:\Program Files
2010-07-17 05:40:40 ----D---- C:\Program Files\Activision
2010-07-17 05:40:36 ----SHD---- C:\Windows\Installer
2010-07-17 05:39:46 ----SHD---- C:\System Volume Information
2010-07-17 05:37:55 ----D---- C:\Windows\Prefetch
2010-07-17 03:59:09 ----D---- C:\Program Files\Steam
2010-07-17 03:46:27 ----D---- C:\Windows\Temp
2010-07-17 03:46:18 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-07-17 00:59:17 ----D---- C:\Program Files\JDownloader
2010-07-16 22:49:07 ----D---- C:\Users\morbe\AppData\Roaming\vlc
2010-07-16 11:50:06 ----D---- C:\Program Files\Mozilla Firefox
2010-07-16 04:03:01 ----D---- C:\Program Files\utorrent-portable
2010-07-16 01:48:54 ----D---- C:\Windows\Debug
2010-07-16 01:48:54 ----D---- C:\Windows
2010-07-15 16:50:14 ----D---- C:\Windows\System32
2010-07-15 16:50:14 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-07-15 16:40:49 ----RSD---- C:\Windows\assembly
2010-07-14 19:49:33 ----D---- C:\Windows\inf
2010-07-14 19:49:33 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-07-14 04:36:02 ----D---- C:\Windows\winsxs
2010-07-14 04:19:38 ----D---- C:\Windows\system32\catroot2
2010-07-14 04:19:38 ----D---- C:\Windows\system32\catroot
2010-07-14 04:19:34 ----D---- C:\Program Files\Windows Mail
2010-07-14 03:39:14 ----RSD---- C:\Windows\Fonts
2010-07-12 19:12:41 ----D---- C:\Program Files\WMCap
2010-07-11 01:36:32 ----D---- C:\Program Files\The KMPlayer
2010-07-10 20:10:52 ----D---- C:\Windows\system32\drivers
2010-07-09 10:05:51 ----D---- C:\Windows\system32\Tasks
2010-07-09 05:52:44 ----D---- C:\Windows\twain_32
2010-07-06 00:07:16 ----D---- C:\Program Files\Common Files
2010-07-06 00:07:15 ----D---- C:\ProgramData\Skype
2010-07-04 16:57:57 ----D---- C:\ProgramData\Adobe
2010-07-03 02:48:07 ----D---- C:\Windows\system
2010-07-02 23:53:04 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-02 21:39:05 ----A---- C:\Windows\system32\mrt.exe
2010-07-02 05:36:03 ----HD---- C:\ProgramData
2010-07-02 05:35:52 ----D---- C:\Program Files\ATI Technologies
2010-06-30 13:08:41 ----D---- C:\Program Files\CCleaner
2010-06-24 11:24:04 ----D---- C:\Windows\Microsoft.NET
2010-06-24 11:17:26 ----D---- C:\Windows\AppPatch
2010-06-22 20:08:54 ----D---- C:\Program Files\Webzen
2010-06-21 23:59:55 ----D---- C:\Program Files\TeamSpeak 3 Client
2010-06-20 21:13:22 ----D---- C:\Program Files\IDoser v4
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 mv61xx;mv61xx; C:\Windows\system32\DRIVERS\mv61xx.sys [2008-06-24 150568]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-15 691696]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2007-12-17 12400]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2010-06-01 16744]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2010-06-11 224240]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2010-06-01 30112]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2010-06-01 75944]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-05-27 5586432]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-05-27 209920]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 105488]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-20 2143136]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x86.sys [2008-06-30 47616]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-10-18 7680]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2010-02-25 10064]
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S3 aee6dixf;aee6dixf; C:\Windows\system32\drivers\aee6dixf.sys []
S3 cmudau32;C-Media USB UDA Sound Interface; C:\Windows\system32\drivers\cmudaxu.sys [2006-08-09 1419840]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-05-27 176128]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-06-01 1778480]
R2 CTDevice_Srv;CT Device Query service; C:\Program Files\Creative\Shared Files\CTDevSrv.exe [2007-04-02 61440]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-08-20 73728]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-07-15 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-05-21 173352]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-05-07 1051976]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 CTUPnPSv;Creative Centrale Media Server; C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe [2008-05-21 64000]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2010-03-31 3518392]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-04-13 332720]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TuneUp.Defrag;@C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-06-13 435016]
-----------------EOF-----------------
dneska mě comodo FW vyhodil, že proces explorer.exe izoloval od zbytku systemu... tak jen jestli tam něco nejni
Run by morbe at 2010-07-17 05:44:30
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 209 GB (34%) free of 610 GB
Total RAM: 3326 MB (45% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:44:32, on 17.7.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\Six Engine\SixEngine.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\morbe\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\conime.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Steam\Steam.exe
C:\Windows\system32\cmd.exe
C:\Program Files\Java\jre6\bin\javaw.exe
C:\PROGRA~1\THEKMP~1\KMPlayer.exe
C:\Users\morbe\Desktop\download\RSIT.exe
C:\Program Files\trend micro\morbe.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://webtv.starnet.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe
O23 - Service: Creative Centrale Media Server (CTUPnPSv) - Creative Technology Ltd - C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
--
End of file - 5326 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3115684867-1554512148-76294249-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3115684867-1554512148-76294249-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-18 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-20 6144000]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-06-01 2039240]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-05-27 98304]
"CmUsbSound"=RunDll32 cmcnfgu.cpl,CMICtrlWnd []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=c:\program files\steam\steam.exe [2010-05-07 1238352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard32.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-07-17 05:42:57 ----D---- C:\rsit
2010-07-17 05:42:57 ----D---- C:\Program Files\trend micro
2010-07-16 00:42:38 ----D---- C:\Program Files\MediaInfo
2010-07-15 16:50:14 ----A---- C:\Windows\system32\pbsvc_bc2.exe
2010-07-15 16:41:16 ----D---- C:\Program Files\Electronic Arts
2010-07-09 06:27:21 ----D---- C:\temp
2010-07-09 06:21:20 ----A---- C:\Windows\Lexstat.ini
2010-07-09 05:51:30 ----D---- C:\drivers
2010-07-09 05:42:25 ----A---- C:\Windows\unin0405.exe
2010-07-06 00:13:32 ----D---- C:\Users\morbe\AppData\Roaming\skypePM
2010-07-06 00:07:23 ----D---- C:\Users\morbe\AppData\Roaming\Skype
2010-07-06 00:07:16 ----RD---- C:\Program Files\Skype
2010-07-06 00:07:16 ----D---- C:\Program Files\Common Files\Skype
2010-07-05 23:01:22 ----D---- C:\Program Files\QS
2010-07-03 03:53:40 ----D---- C:\Users\morbe\AppData\Roaming\mIRC
2010-07-03 03:53:40 ----D---- C:\Program Files\mIRC
2010-07-03 02:47:09 ----A---- C:\Windows\system32\drivers\cmudaxu.sys
2010-07-03 02:47:09 ----A---- C:\Windows\system32\cmudau.dll
2010-07-03 02:47:09 ----A---- C:\Windows\system32\cmpropu.dll
2010-07-03 02:47:09 ----A---- C:\Windows\system32\cmdrvrmu.exe
2010-07-03 02:47:09 ----A---- C:\Windows\system32\cmdrvrmu.dll
2010-07-03 02:47:09 ----A---- C:\Windows\system32\a3dpropu.dll
2010-07-03 02:47:09 ----A---- C:\Windows\system32\a3d.dll
2010-07-03 02:47:00 ----R---- C:\Windows\CmiUSB2Uninstall.exe
2010-07-03 02:46:43 ----D---- C:\Program Files\HS-04U
2010-07-02 23:12:10 ----D---- C:\Root
2010-07-02 23:10:54 ----SHD---- C:\Windows\ftpcache
2010-07-02 05:36:03 ----D---- C:\ProgramData\ATI
2010-07-01 23:23:14 ----D---- C:\QIP Infium JadrisPack
2010-07-01 23:01:31 ----D---- C:\Program Files\ICQ6Toolbar
2010-07-01 23:01:22 ----D---- C:\Users\morbe\AppData\Roaming\ICQ
2010-07-01 23:01:16 ----D---- C:\Program Files\ICQ7.2
2010-06-30 13:12:02 ----D---- C:\Program Files\Kalypso
2010-06-24 03:00:33 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-06-24 03:00:33 ----A---- C:\Windows\system32\PresentationHost.exe
2010-06-24 03:00:33 ----A---- C:\Windows\system32\netfxperf.dll
2010-06-24 03:00:33 ----A---- C:\Windows\system32\mscoree.dll
2010-06-24 03:00:33 ----A---- C:\Windows\system32\dfshim.dll
2010-06-23 11:50:08 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-06-23 11:50:08 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-06-21 16:17:43 ----D---- C:\Users\morbe\AppData\Roaming\mp3DirectCut
2010-06-20 16:56:56 ----D---- C:\Users\morbe\AppData\Roaming\Adobe Mini Bridge CS5
======List of files/folders modified in the last 1 months======
2010-07-17 05:42:57 ----D---- C:\Program Files
2010-07-17 05:40:40 ----D---- C:\Program Files\Activision
2010-07-17 05:40:36 ----SHD---- C:\Windows\Installer
2010-07-17 05:39:46 ----SHD---- C:\System Volume Information
2010-07-17 05:37:55 ----D---- C:\Windows\Prefetch
2010-07-17 03:59:09 ----D---- C:\Program Files\Steam
2010-07-17 03:46:27 ----D---- C:\Windows\Temp
2010-07-17 03:46:18 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-07-17 00:59:17 ----D---- C:\Program Files\JDownloader
2010-07-16 22:49:07 ----D---- C:\Users\morbe\AppData\Roaming\vlc
2010-07-16 11:50:06 ----D---- C:\Program Files\Mozilla Firefox
2010-07-16 04:03:01 ----D---- C:\Program Files\utorrent-portable
2010-07-16 01:48:54 ----D---- C:\Windows\Debug
2010-07-16 01:48:54 ----D---- C:\Windows
2010-07-15 16:50:14 ----D---- C:\Windows\System32
2010-07-15 16:50:14 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-07-15 16:40:49 ----RSD---- C:\Windows\assembly
2010-07-14 19:49:33 ----D---- C:\Windows\inf
2010-07-14 19:49:33 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-07-14 04:36:02 ----D---- C:\Windows\winsxs
2010-07-14 04:19:38 ----D---- C:\Windows\system32\catroot2
2010-07-14 04:19:38 ----D---- C:\Windows\system32\catroot
2010-07-14 04:19:34 ----D---- C:\Program Files\Windows Mail
2010-07-14 03:39:14 ----RSD---- C:\Windows\Fonts
2010-07-12 19:12:41 ----D---- C:\Program Files\WMCap
2010-07-11 01:36:32 ----D---- C:\Program Files\The KMPlayer
2010-07-10 20:10:52 ----D---- C:\Windows\system32\drivers
2010-07-09 10:05:51 ----D---- C:\Windows\system32\Tasks
2010-07-09 05:52:44 ----D---- C:\Windows\twain_32
2010-07-06 00:07:16 ----D---- C:\Program Files\Common Files
2010-07-06 00:07:15 ----D---- C:\ProgramData\Skype
2010-07-04 16:57:57 ----D---- C:\ProgramData\Adobe
2010-07-03 02:48:07 ----D---- C:\Windows\system
2010-07-02 23:53:04 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-02 21:39:05 ----A---- C:\Windows\system32\mrt.exe
2010-07-02 05:36:03 ----HD---- C:\ProgramData
2010-07-02 05:35:52 ----D---- C:\Program Files\ATI Technologies
2010-06-30 13:08:41 ----D---- C:\Program Files\CCleaner
2010-06-24 11:24:04 ----D---- C:\Windows\Microsoft.NET
2010-06-24 11:17:26 ----D---- C:\Windows\AppPatch
2010-06-22 20:08:54 ----D---- C:\Program Files\Webzen
2010-06-21 23:59:55 ----D---- C:\Program Files\TeamSpeak 3 Client
2010-06-20 21:13:22 ----D---- C:\Program Files\IDoser v4
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 mv61xx;mv61xx; C:\Windows\system32\DRIVERS\mv61xx.sys [2008-06-24 150568]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-15 691696]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2007-12-17 12400]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2010-06-01 16744]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2010-06-11 224240]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2010-06-01 30112]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2010-06-01 75944]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-05-27 5586432]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-05-27 209920]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 105488]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-20 2143136]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x86.sys [2008-06-30 47616]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-10-18 7680]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2010-02-25 10064]
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S3 aee6dixf;aee6dixf; C:\Windows\system32\drivers\aee6dixf.sys []
S3 cmudau32;C-Media USB UDA Sound Interface; C:\Windows\system32\drivers\cmudaxu.sys [2006-08-09 1419840]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-05-27 176128]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-06-01 1778480]
R2 CTDevice_Srv;CT Device Query service; C:\Program Files\Creative\Shared Files\CTDevSrv.exe [2007-04-02 61440]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-08-20 73728]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-07-15 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-05-21 173352]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-05-07 1051976]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 CTUPnPSv;Creative Centrale Media Server; C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe [2008-05-21 64000]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2010-03-31 3518392]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-04-13 332720]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TuneUp.Defrag;@C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-06-13 435016]
-----------------EOF-----------------
dneska mě comodo FW vyhodil, že proces explorer.exe izoloval od zbytku systemu... tak jen jestli tam něco nejni