Win32:Malware-gen 2x
Napsal: 18 zář 2010 14:39
Dobrý den,
našlo mi to 2x tuto hrozbu, cílové soubory jsem vymazal, ale byl bych mnohem radši, kdybyste se mi prosím podívali, jestli je vše ok. Děkuji moc.
Logfile of random's system information tool 1.08 (written by random/random)
Run by wise at 2010-09-18 15:36:57
Microsoft Windows 7 Ultimate
System drive C: has 8 GB (16%) free of 50 GB
Total RAM: 3933 MB (46% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:37:02, on 18.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
D:\Software\LogMeIn Hamachi\hamachi-2-ui.exe
D:\Games\Steam\steam.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
D:\Software\Xfire\Xfire.exe
C:\Program Files (x86)\Spoon\3.21.0.22\Spoon-Sandbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Opera\opera.exe
D:\Browsers\Firefox\firefox.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\wise.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O3 - Toolbar: Zend Studio - {95188727-288F-4581-A48D-EAB3BD027314} - E:\Zend\ZENDST~1.1\bin\ZENDIE~1.DLL
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [reset] regedit /s reset.reg
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "D:\Software\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "D:\Software\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Steam] "d:\games\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Miranda IM] D:\Programs\Miranda IM KP v5.0.8.15\launcher.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Software\DAEMON\DTLite.exe" -autorun
O4 - HKCU\..\Run: [NoteFly] "D:\Software\NoteFly\NoteFly.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: Xfire.lnk = D:\Software\Xfire\Xfire.exe
O4 - Global Startup: Spoon Sandbox Manager 3.21.lnk = C:\Program Files (x86)\Spoon\3.21.0.22\Spoon-Sandbox-Native.exe
O8 - Extra context menu item: Zend Studio - Debug current page - res://E:\Zend\ZendStudio-5.5.1\bin\ZendIEToolbar.dll/DebugCurrent.html
O8 - Extra context menu item: Zend Studio - Debug next page - res://E:\Zend\ZendStudio-5.5.1\bin\ZendIEToolbar.dll/DebugNext.html
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Zend Studio Toolbar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - E:\Zend\ZENDST~1.1\bin\ZENDIE~1.DLL
O9 - Extra 'Tools' menuitem: Zend Studio - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - E:\Zend\ZENDST~1.1\bin\ZENDIE~1.DLL
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DD95A66D-A997-49F1-B11E-011C7DD4D9B0}: NameServer = 81.25.16.250
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apache2.2 - Apache Software Foundation - E:\AppServ\Apache2.2\bin\httpd.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\Software\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: mysql - Unknown owner - E:\AppServ\MySQL\bin\mysqld-nt.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10494 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"E:\AppServ\Apache2.2\bin\httpd.exe" -k runservice
"taskhost.exe"
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"D:\Software\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
E:\AppServ\Apache2.2\bin\httpd.exe -d E:/AppServ/Apache2.2
E:\AppServ\MySQL\bin\mysqld-nt --defaults-file=E:\AppServ\MySQL\my.ini mysql
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k imgsvc
"D:\Software\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe" -service
TeamViewer.exe --HostService
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"D:\Games\Steam\steam.exe" -silent
"D:\Software\NoteFly\NoteFly.exe"
"C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
"D:\Software\Xfire\Xfire.exe"
"C:\Program Files (x86)\Spoon\3.21.0.22\spoon-sandbox.exe" /XSandboxPath="@APPDATALOCAL@\Spoon\Sandboxes\Spoon Sandbox Manager\3.21.0.22\20100829133407736"
"D:\Software\Xfire\xfire64.exe" xfire64.exe /pid 3872
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" -quickstart
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" "-quickstart" "-env:OOO_CWD=2C:\\Program Files (x86)\\OpenOffice.org 3\\program"
"D:\Software\Xfire\xfire64.exe" xfire64.exe /pid 3872
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.03AAEA80.1807567243 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01DE4780.1194255208 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EA9780.268653946 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EA9480.692354236 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EA9180.447056503 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EA9D80.589116212 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EA9A80.868700168 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EB1A80.60294676 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EB1780.636693920 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.04BD4C00.2098903976 /prefetch:3
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play -Embedding
"C:\Program Files (x86)\Opera\opera.exe"
"D:\Browsers\Firefox\firefox.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.04F78000.81951092 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\6.0.472.59\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\wise\AppData\Local\Google\Chrome\User Data\Default" --channel=4580.03A6E84C.674161691 /prefetch:4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.046FD780.58798486 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.04FCD780.934960873 /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\wise\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-26 43520]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D5D47440-0750-463D-BAEF-A47D02414806}
{95188727-288F-4581-A48D-EAB3BD027314} - Zend Studio - E:\Zend\ZENDST~1.1\bin\ZENDIE~1.DLL [2007-12-02 192512]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-08-13 159232]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-08-13 380928]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-08-13 358912]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=d:\games\steam\steam.exe [2010-08-25 1242448]
"Skype"=C:\Program Files (x86)\Skype\\Phone\Skype.exe [2010-05-13 26192168]
"Miranda IM"=D:\Programs\Miranda IM KP v5.0.8.15\launcher.exe [2009-03-22 258048]
"DAEMON Tools Lite"=D:\Software\DAEMON\DTLite.exe [2010-04-01 357696]
"NoteFly"=D:\Software\NoteFly\NoteFly.exe [2010-01-02 108032]
"ICQ"=C:\Program Files (x86)\ICQ7.2\ICQ.exe [2010-08-22 133432]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"reset"=regedit /s reset.reg []
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"QuickTime Task"=D:\Software\QuickTime\QTTask.exe [2010-03-17 421888]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"LogMeIn Hamachi Ui"=D:\Software\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Spoon Sandbox Manager 3.21.lnk - C:\Program Files (x86)\Spoon\3.21.0.22\Spoon-Sandbox-Native.exe
C:\Users\wise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
Xfire.lnk - D:\Software\Xfire\Xfire.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-08-13 259584]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-09-18 15:36:58 ----D---- C:\Program Files\trend micro
2010-09-18 15:36:57 ----D---- C:\rsit
2010-09-05 04:10:21 ----D---- C:\Users\wise\AppData\Roaming\Sparx Systems
2010-09-05 04:09:56 ----D---- C:\Program Files (x86)\Sparx Systems
2010-08-31 21:17:36 ----D---- C:\Users\wise\AppData\Roaming\Subversion
2010-08-31 20:27:44 ----A---- C:\Windows\system32\libmySQL.dll
2010-08-29 17:32:17 ----A---- C:\Windows\IE4 Error Log.txt
2010-08-29 15:34:07 ----D---- C:\Windows\XSxS
2010-08-29 15:34:07 ----D---- C:\Program Files (x86)\Spoon
2010-08-29 13:26:13 ----D---- C:\Windows\SYSWOW64\IE700
2010-08-27 20:44:39 ----A---- C:\Windows\WORDPAD.INI
2010-08-25 12:39:07 ----A---- C:\Windows\ODBC.INI
2010-08-25 12:38:11 ----D---- C:\Windows\PCHEALTH
2010-08-24 22:50:33 ----D---- C:\Windows\system32\appmgmt
2010-08-24 22:47:11 ----N---- C:\Windows\Setup1.exe
2010-08-24 22:47:04 ----A---- C:\Windows\ST6UNST.EXE
2010-08-20 19:52:06 ----A---- C:\Windows\system32\mshtml.dll
2010-08-20 19:52:04 ----A---- C:\Windows\system32\ieframe.dll
2010-08-20 19:52:03 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-08-20 19:52:02 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-08-20 19:52:02 ----A---- C:\Windows\system32\urlmon.dll
2010-08-20 19:52:01 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-08-20 19:52:01 ----A---- C:\Windows\system32\wininet.dll
2010-08-20 19:52:00 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\mstime.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\msfeedssync.exe
2010-08-20 19:51:59 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\ieui.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\iepeers.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-20 19:51:57 ----A---- C:\Windows\system32\schannel.dll
2010-08-20 19:51:56 ----A---- C:\Windows\SYSWOW64\schannel.dll
2010-08-20 19:51:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-20 19:51:51 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2010-08-20 19:51:49 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2010-08-20 19:51:45 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-08-20 19:51:45 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-20 19:51:45 ----A---- C:\Windows\system32\drivers\srv.sys
2010-08-20 19:51:36 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2010-08-20 19:51:36 ----A---- C:\Windows\system32\rtutils.dll
2010-08-20 19:51:34 ----A---- C:\Windows\system32\shell32.dll
2010-08-20 19:51:33 ----A---- C:\Windows\SYSWOW64\shell32.dll
2010-08-20 19:51:31 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-20 19:51:30 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2010-08-20 19:51:29 ----A---- C:\Windows\system32\win32k.sys
2010-08-20 19:49:46 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2010-08-20 19:49:46 ----A---- C:\Windows\system32\msxml3.dll
2010-08-20 19:47:30 ----A---- C:\Windows\SYSWOW64\javaws.exe
2010-08-20 19:47:30 ----A---- C:\Windows\SYSWOW64\javaw.exe
2010-08-20 19:47:30 ----A---- C:\Windows\SYSWOW64\java.exe
2010-08-20 19:44:50 ----D---- C:\Program Files\Common Files\Logitech
======List of files/folders modified in the last 1 months======
2010-09-18 15:37:02 ----D---- C:\Windows\Prefetch
2010-09-18 15:37:00 ----D---- C:\Windows\Temp
2010-09-18 15:36:58 ----RD---- C:\Program Files
2010-09-18 13:06:20 ----D---- C:\Windows\system32\config
2010-09-17 23:34:45 ----A---- C:\Windows\php.ini
2010-09-17 23:00:24 ----SHD---- C:\System Volume Information
2010-09-17 19:08:53 ----D---- C:\Windows\System32
2010-09-17 19:08:53 ----D---- C:\Windows\inf
2010-09-17 19:08:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-17 19:08:13 ----D---- C:\ProgramData\Xfire
2010-09-16 22:06:38 ----D---- C:\Users\wise\AppData\Roaming\.NoteFly
2010-09-16 16:59:58 ----SHD---- C:\Windows\Installer
2010-09-16 16:59:55 ----D---- C:\Program Files (x86)\Opera
2010-09-16 15:35:18 ----RD---- C:\Program Files (x86)
2010-09-16 15:35:18 ----HD---- C:\ProgramData
2010-09-16 15:35:09 ----D---- C:\Windows\Downloaded Program Files
2010-09-16 15:29:11 ----D---- C:\Users\wise\AppData\Roaming\Skype
2010-09-16 10:49:35 ----D---- C:\Users\wise\AppData\Roaming\skypePM
2010-09-15 19:38:41 ----D---- C:\Windows\Logs
2010-09-15 13:09:22 ----D---- C:\Users\wise\AppData\Roaming\ICQ
2010-09-14 13:29:30 ----D---- C:\Windows\system32\wdi
2010-09-10 21:08:57 ----D---- C:\Users\wise\AppData\Roaming\FileZilla
2010-09-09 10:00:26 ----D---- C:\Windows\SysWOW64
2010-09-09 10:00:26 ----D---- C:\Windows
2010-09-08 09:35:30 ----D---- C:\Users\wise\AppData\Roaming\vlc
2010-09-08 04:25:27 ----D---- C:\Users\wise\AppData\Roaming\dvdcss
2010-09-07 17:11:54 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2010-09-06 12:45:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-09-06 02:55:44 ----D---- C:\Windows\system32\Tasks
2010-09-01 10:54:25 ----D---- C:\Program Files\Internet Explorer
2010-08-31 19:57:53 ----D---- C:\Program Files (x86)\Common Files
2010-08-25 22:33:06 ----D---- C:\Users\wise\AppData\Roaming\Adobe
2010-08-25 12:55:37 ----SD---- C:\Users\wise\AppData\Roaming\Microsoft
2010-08-25 12:38:57 ----RSD---- C:\Windows\assembly
2010-08-25 12:38:33 ----RSD---- C:\Windows\Fonts
2010-08-25 12:38:11 ----SD---- C:\ProgramData\Microsoft
2010-08-25 12:38:11 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-08-25 12:36:18 ----D---- C:\Windows\system
2010-08-25 12:01:13 ----D---- C:\Program Files (x86)\ICQ7.2
2010-08-24 23:00:34 ----D---- C:\Windows\winsxs
2010-08-20 22:35:30 ----D---- C:\Windows\Microsoft.NET
2010-08-20 22:15:06 ----D---- C:\Windows\system32\drivers
2010-08-20 22:15:04 ----D---- C:\Windows\SYSWOW64\migration
2010-08-20 22:15:04 ----D---- C:\Windows\system32\migration
2010-08-20 22:15:04 ----D---- C:\Program Files (x86)\Internet Explorer
2010-08-20 19:51:20 ----D---- C:\Windows\system32\catroot2
2010-08-20 19:51:20 ----D---- C:\Windows\system32\catroot
2010-08-20 19:47:16 ----D---- C:\Program Files (x86)\Java
2010-08-20 19:45:25 ----D---- C:\Windows\system32\DriverStore
2010-08-20 19:44:50 ----D---- C:\Program Files\Common Files
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-05-31 834544]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2007-11-09 26968]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-09-07 28752]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-09-07 121936]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-09-07 51280]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-09-07 20048]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-09-07 61008]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 33856]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-08-13 7370176]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8187B.sys [2010-03-31 450048]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2008-01-25 22024]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2008-01-25 57352]
S3 ajltc7va;ajltc7va; C:\Windows\system32\drivers\ajltc7va.sys []
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2008-01-25 15752]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apache2.2;Apache2.2; E:\AppServ\Apache2.2\bin\httpd.exe [2007-01-09 20539]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; D:\Software\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1823112]
R2 mysql;mysql; E:\AppServ\MySQL\bin\mysqld-nt --defaults-file=E:\AppServ\MySQL\my.ini mysql []
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2010-06-23 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2010-06-23 107832]
R2 TeamViewer5;TeamViewer 5; C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2010-07-06 173352]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-05-12 133104]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-03 654848]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-05-06 390952]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-18 1255736]
-----------------EOF-----------------
našlo mi to 2x tuto hrozbu, cílové soubory jsem vymazal, ale byl bych mnohem radši, kdybyste se mi prosím podívali, jestli je vše ok. Děkuji moc.
Logfile of random's system information tool 1.08 (written by random/random)
Run by wise at 2010-09-18 15:36:57
Microsoft Windows 7 Ultimate
System drive C: has 8 GB (16%) free of 50 GB
Total RAM: 3933 MB (46% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:37:02, on 18.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
D:\Software\LogMeIn Hamachi\hamachi-2-ui.exe
D:\Games\Steam\steam.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
D:\Software\Xfire\Xfire.exe
C:\Program Files (x86)\Spoon\3.21.0.22\Spoon-Sandbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Opera\opera.exe
D:\Browsers\Firefox\firefox.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\wise.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O3 - Toolbar: Zend Studio - {95188727-288F-4581-A48D-EAB3BD027314} - E:\Zend\ZENDST~1.1\bin\ZENDIE~1.DLL
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [reset] regedit /s reset.reg
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "D:\Software\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "D:\Software\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Steam] "d:\games\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Miranda IM] D:\Programs\Miranda IM KP v5.0.8.15\launcher.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Software\DAEMON\DTLite.exe" -autorun
O4 - HKCU\..\Run: [NoteFly] "D:\Software\NoteFly\NoteFly.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: Xfire.lnk = D:\Software\Xfire\Xfire.exe
O4 - Global Startup: Spoon Sandbox Manager 3.21.lnk = C:\Program Files (x86)\Spoon\3.21.0.22\Spoon-Sandbox-Native.exe
O8 - Extra context menu item: Zend Studio - Debug current page - res://E:\Zend\ZendStudio-5.5.1\bin\ZendIEToolbar.dll/DebugCurrent.html
O8 - Extra context menu item: Zend Studio - Debug next page - res://E:\Zend\ZendStudio-5.5.1\bin\ZendIEToolbar.dll/DebugNext.html
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Zend Studio Toolbar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - E:\Zend\ZENDST~1.1\bin\ZENDIE~1.DLL
O9 - Extra 'Tools' menuitem: Zend Studio - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - E:\Zend\ZENDST~1.1\bin\ZENDIE~1.DLL
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DD95A66D-A997-49F1-B11E-011C7DD4D9B0}: NameServer = 81.25.16.250
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apache2.2 - Apache Software Foundation - E:\AppServ\Apache2.2\bin\httpd.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\Software\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: mysql - Unknown owner - E:\AppServ\MySQL\bin\mysqld-nt.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10494 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"E:\AppServ\Apache2.2\bin\httpd.exe" -k runservice
"taskhost.exe"
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"D:\Software\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
E:\AppServ\Apache2.2\bin\httpd.exe -d E:/AppServ/Apache2.2
E:\AppServ\MySQL\bin\mysqld-nt --defaults-file=E:\AppServ\MySQL\my.ini mysql
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k imgsvc
"D:\Software\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe" -service
TeamViewer.exe --HostService
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"D:\Games\Steam\steam.exe" -silent
"D:\Software\NoteFly\NoteFly.exe"
"C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
"D:\Software\Xfire\Xfire.exe"
"C:\Program Files (x86)\Spoon\3.21.0.22\spoon-sandbox.exe" /XSandboxPath="@APPDATALOCAL@\Spoon\Sandboxes\Spoon Sandbox Manager\3.21.0.22\20100829133407736"
"D:\Software\Xfire\xfire64.exe" xfire64.exe /pid 3872
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" -quickstart
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" "-quickstart" "-env:OOO_CWD=2C:\\Program Files (x86)\\OpenOffice.org 3\\program"
"D:\Software\Xfire\xfire64.exe" xfire64.exe /pid 3872
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.03AAEA80.1807567243 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01DE4780.1194255208 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EA9780.268653946 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EA9480.692354236 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EA9180.447056503 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EA9D80.589116212 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EA9A80.868700168 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EB1A80.60294676 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.01EB1780.636693920 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.04BD4C00.2098903976 /prefetch:3
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play -Embedding
"C:\Program Files (x86)\Opera\opera.exe"
"D:\Browsers\Firefox\firefox.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.04F78000.81951092 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\6.0.472.59\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\wise\AppData\Local\Google\Chrome\User Data\Default" --channel=4580.03A6E84C.674161691 /prefetch:4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.046FD780.58798486 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_60/SpdyImpact/_npn_with_spdy/ --channel=4580.04FCD780.934960873 /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\wise\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-26 43520]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D5D47440-0750-463D-BAEF-A47D02414806}
{95188727-288F-4581-A48D-EAB3BD027314} - Zend Studio - E:\Zend\ZENDST~1.1\bin\ZENDIE~1.DLL [2007-12-02 192512]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-08-13 159232]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-08-13 380928]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-08-13 358912]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=d:\games\steam\steam.exe [2010-08-25 1242448]
"Skype"=C:\Program Files (x86)\Skype\\Phone\Skype.exe [2010-05-13 26192168]
"Miranda IM"=D:\Programs\Miranda IM KP v5.0.8.15\launcher.exe [2009-03-22 258048]
"DAEMON Tools Lite"=D:\Software\DAEMON\DTLite.exe [2010-04-01 357696]
"NoteFly"=D:\Software\NoteFly\NoteFly.exe [2010-01-02 108032]
"ICQ"=C:\Program Files (x86)\ICQ7.2\ICQ.exe [2010-08-22 133432]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"reset"=regedit /s reset.reg []
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"QuickTime Task"=D:\Software\QuickTime\QTTask.exe [2010-03-17 421888]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"LogMeIn Hamachi Ui"=D:\Software\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Spoon Sandbox Manager 3.21.lnk - C:\Program Files (x86)\Spoon\3.21.0.22\Spoon-Sandbox-Native.exe
C:\Users\wise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
Xfire.lnk - D:\Software\Xfire\Xfire.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-08-13 259584]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-09-18 15:36:58 ----D---- C:\Program Files\trend micro
2010-09-18 15:36:57 ----D---- C:\rsit
2010-09-05 04:10:21 ----D---- C:\Users\wise\AppData\Roaming\Sparx Systems
2010-09-05 04:09:56 ----D---- C:\Program Files (x86)\Sparx Systems
2010-08-31 21:17:36 ----D---- C:\Users\wise\AppData\Roaming\Subversion
2010-08-31 20:27:44 ----A---- C:\Windows\system32\libmySQL.dll
2010-08-29 17:32:17 ----A---- C:\Windows\IE4 Error Log.txt
2010-08-29 15:34:07 ----D---- C:\Windows\XSxS
2010-08-29 15:34:07 ----D---- C:\Program Files (x86)\Spoon
2010-08-29 13:26:13 ----D---- C:\Windows\SYSWOW64\IE700
2010-08-27 20:44:39 ----A---- C:\Windows\WORDPAD.INI
2010-08-25 12:39:07 ----A---- C:\Windows\ODBC.INI
2010-08-25 12:38:11 ----D---- C:\Windows\PCHEALTH
2010-08-24 22:50:33 ----D---- C:\Windows\system32\appmgmt
2010-08-24 22:47:11 ----N---- C:\Windows\Setup1.exe
2010-08-24 22:47:04 ----A---- C:\Windows\ST6UNST.EXE
2010-08-20 19:52:06 ----A---- C:\Windows\system32\mshtml.dll
2010-08-20 19:52:04 ----A---- C:\Windows\system32\ieframe.dll
2010-08-20 19:52:03 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-08-20 19:52:02 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-08-20 19:52:02 ----A---- C:\Windows\system32\urlmon.dll
2010-08-20 19:52:01 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-08-20 19:52:01 ----A---- C:\Windows\system32\wininet.dll
2010-08-20 19:52:00 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-08-20 19:51:59 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\mstime.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\msfeedssync.exe
2010-08-20 19:51:59 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\ieui.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\iepeers.dll
2010-08-20 19:51:59 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-20 19:51:57 ----A---- C:\Windows\system32\schannel.dll
2010-08-20 19:51:56 ----A---- C:\Windows\SYSWOW64\schannel.dll
2010-08-20 19:51:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-20 19:51:51 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2010-08-20 19:51:49 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2010-08-20 19:51:45 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-08-20 19:51:45 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-20 19:51:45 ----A---- C:\Windows\system32\drivers\srv.sys
2010-08-20 19:51:36 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2010-08-20 19:51:36 ----A---- C:\Windows\system32\rtutils.dll
2010-08-20 19:51:34 ----A---- C:\Windows\system32\shell32.dll
2010-08-20 19:51:33 ----A---- C:\Windows\SYSWOW64\shell32.dll
2010-08-20 19:51:31 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-20 19:51:30 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2010-08-20 19:51:29 ----A---- C:\Windows\system32\win32k.sys
2010-08-20 19:49:46 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2010-08-20 19:49:46 ----A---- C:\Windows\system32\msxml3.dll
2010-08-20 19:47:30 ----A---- C:\Windows\SYSWOW64\javaws.exe
2010-08-20 19:47:30 ----A---- C:\Windows\SYSWOW64\javaw.exe
2010-08-20 19:47:30 ----A---- C:\Windows\SYSWOW64\java.exe
2010-08-20 19:44:50 ----D---- C:\Program Files\Common Files\Logitech
======List of files/folders modified in the last 1 months======
2010-09-18 15:37:02 ----D---- C:\Windows\Prefetch
2010-09-18 15:37:00 ----D---- C:\Windows\Temp
2010-09-18 15:36:58 ----RD---- C:\Program Files
2010-09-18 13:06:20 ----D---- C:\Windows\system32\config
2010-09-17 23:34:45 ----A---- C:\Windows\php.ini
2010-09-17 23:00:24 ----SHD---- C:\System Volume Information
2010-09-17 19:08:53 ----D---- C:\Windows\System32
2010-09-17 19:08:53 ----D---- C:\Windows\inf
2010-09-17 19:08:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-17 19:08:13 ----D---- C:\ProgramData\Xfire
2010-09-16 22:06:38 ----D---- C:\Users\wise\AppData\Roaming\.NoteFly
2010-09-16 16:59:58 ----SHD---- C:\Windows\Installer
2010-09-16 16:59:55 ----D---- C:\Program Files (x86)\Opera
2010-09-16 15:35:18 ----RD---- C:\Program Files (x86)
2010-09-16 15:35:18 ----HD---- C:\ProgramData
2010-09-16 15:35:09 ----D---- C:\Windows\Downloaded Program Files
2010-09-16 15:29:11 ----D---- C:\Users\wise\AppData\Roaming\Skype
2010-09-16 10:49:35 ----D---- C:\Users\wise\AppData\Roaming\skypePM
2010-09-15 19:38:41 ----D---- C:\Windows\Logs
2010-09-15 13:09:22 ----D---- C:\Users\wise\AppData\Roaming\ICQ
2010-09-14 13:29:30 ----D---- C:\Windows\system32\wdi
2010-09-10 21:08:57 ----D---- C:\Users\wise\AppData\Roaming\FileZilla
2010-09-09 10:00:26 ----D---- C:\Windows\SysWOW64
2010-09-09 10:00:26 ----D---- C:\Windows
2010-09-08 09:35:30 ----D---- C:\Users\wise\AppData\Roaming\vlc
2010-09-08 04:25:27 ----D---- C:\Users\wise\AppData\Roaming\dvdcss
2010-09-07 17:11:54 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2010-09-06 12:45:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-09-06 02:55:44 ----D---- C:\Windows\system32\Tasks
2010-09-01 10:54:25 ----D---- C:\Program Files\Internet Explorer
2010-08-31 19:57:53 ----D---- C:\Program Files (x86)\Common Files
2010-08-25 22:33:06 ----D---- C:\Users\wise\AppData\Roaming\Adobe
2010-08-25 12:55:37 ----SD---- C:\Users\wise\AppData\Roaming\Microsoft
2010-08-25 12:38:57 ----RSD---- C:\Windows\assembly
2010-08-25 12:38:33 ----RSD---- C:\Windows\Fonts
2010-08-25 12:38:11 ----SD---- C:\ProgramData\Microsoft
2010-08-25 12:38:11 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-08-25 12:36:18 ----D---- C:\Windows\system
2010-08-25 12:01:13 ----D---- C:\Program Files (x86)\ICQ7.2
2010-08-24 23:00:34 ----D---- C:\Windows\winsxs
2010-08-20 22:35:30 ----D---- C:\Windows\Microsoft.NET
2010-08-20 22:15:06 ----D---- C:\Windows\system32\drivers
2010-08-20 22:15:04 ----D---- C:\Windows\SYSWOW64\migration
2010-08-20 22:15:04 ----D---- C:\Windows\system32\migration
2010-08-20 22:15:04 ----D---- C:\Program Files (x86)\Internet Explorer
2010-08-20 19:51:20 ----D---- C:\Windows\system32\catroot2
2010-08-20 19:51:20 ----D---- C:\Windows\system32\catroot
2010-08-20 19:47:16 ----D---- C:\Program Files (x86)\Java
2010-08-20 19:45:25 ----D---- C:\Windows\system32\DriverStore
2010-08-20 19:44:50 ----D---- C:\Program Files\Common Files
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-05-31 834544]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2007-11-09 26968]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-09-07 28752]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-09-07 121936]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-09-07 51280]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-09-07 20048]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-09-07 61008]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 33856]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-08-13 7370176]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8187B.sys [2010-03-31 450048]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2008-01-25 22024]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2008-01-25 57352]
S3 ajltc7va;ajltc7va; C:\Windows\system32\drivers\ajltc7va.sys []
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2008-01-25 15752]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apache2.2;Apache2.2; E:\AppServ\Apache2.2\bin\httpd.exe [2007-01-09 20539]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; D:\Software\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1823112]
R2 mysql;mysql; E:\AppServ\MySQL\bin\mysqld-nt --defaults-file=E:\AppServ\MySQL\my.ini mysql []
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2010-06-23 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2010-06-23 107832]
R2 TeamViewer5;TeamViewer 5; C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2010-07-06 173352]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-05-12 133104]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-03 654848]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-05-06 390952]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-18 1255736]
-----------------EOF-----------------