VIRY.CZ

prosim pomozte mi s tymto virusom Angela.e Nejde mi sprave myska a CD/DVD mechanika sa vysuva..ak je vysunuta kontrolka na HD blika ako keby pc pracoval. Vypisuje mi ze nemam vypinat PC a ze mam odstranene nejake dolezite veci z window-su....mam Windows7.som laik pomozte mi prosim.




Logfile of random's system information tool 1.08 (written by random/random)
Run by Peter Kacmarik at 2010-11-12 15:11:30
Microsoft Windows 7 Home Premium
System drive C: has 548 GB (91%) free of 600 GB
Total RAM: 3955 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:11:34, on 12. 11. 2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe
C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1399.0\mswinext.exe
C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe
C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\windows\SysWOW64\cmd.exe
C:\windows\SysWOW64\WScript.exe
C:\windows\SysWOW64\WScript.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Peter Kacmarik.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://toshiba.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20101107013518.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1399.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1399.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1399.0\npwinext.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [Bing Bar] "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1399.0\mswinext.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [TSleepSrv] %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
O4 - HKLM\..\Run: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60
O4 - HKLM\..\Run: [TRCMan] C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe
O4 - HKLM\..\Run: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun
O4 - HKCU\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2373416902-29139455-1149638818-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2373416902-29139455-1149638818-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (User 'Default user')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user')
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files (x86)\Common Files\Autodesk Shared\acstart16.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{C4CAED08-E9F6-4907-9C73-4BECABD39BC2}: NameServer = 172.32.10.254,88.212.8.8
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O23 - Service: McAfee Application Installer Cleanup (0320851289555617) (0320851289555617mcinstcleanup) - McAfee, Inc. - C:\windows\TEMP\032085~1.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
O23 - Service: McShield - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
O23 - Service: Ochrana HDD TOSHIBA (Thpsrv) - Unknown owner - C:\windows\system32\ThpSrv.exe (file missing)
O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\windows\system32\TODDSrv.exe (file missing)
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TECO\TecoService.exe
O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15209 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\system32\WLANExt.exe 25080944
\??\C:\windows\system32\conhost.exe
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc
"C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe"
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
"C:\windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\SITEAD~1\saHook.dll" saHooker_Initialize_and_Wait
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\SITEAD~1\saHook.dll" saHooker_Initialize_and_Wait
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe"
C:\windows\system32\ThpSrv.exe
C:\windows\system32\TODDSrv.exe
"C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe"
"C:\Program Files\TOSHIBA\TECO\TecoService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
WLIDSvcM.exe 2316
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Toshiba\Power Saver\TPwrMain.exe"
"C:\Program Files\Toshiba\SmoothView\SmoothView.exe"
"C:\Program Files\Toshiba\FlashCards\TCrdMain.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Windows\System32\ThpSrv.exe" /logon
"C:\Program Files\Toshiba\TECO\Teco.exe" /r
taskeng.exe {1A713109-ADA4-4983-B91F-4B3A4943D1EA}
"C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe"
"C:\Program Files\TOSHIBA\FlashCards\Hotkey\TcrdKBB.exe"
"C:\Program Files\Toshiba\ReelTime\TosReelTimeMonitor.exe"
"C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe"
"C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe"
"C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe"
"C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe" /WinStart
"C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1399.0\mswinext.exe"
"C:\Program Files\mcafee.com\agent\mcagent.exe" /runkey
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe"
"C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe"
"C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe"
"C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60
"C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe"
"C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun
"C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosA2dp.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosBtHid.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe"
"C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosBtHsp.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe"
"C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe"
"C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe"
"C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe"
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe"
C:\windows\system32\svchost.exe -k SDRSVC
"C:\Windows\explorer.exe"
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
cmd /c ""C:\Users\Peter Kacmarik\AppData\Local\Temp\6E7.tmp\Angela.E.bat" "
\??\C:\windows\system32\conhost.exe
"C:\windows\System32\WScript.exe" "C:\Users\Peter Kacmarik\Downloads\msgbox.vbs"
"C:\windows\System32\WScript.exe" "C:\Users\Peter Kacmarik\Downloads\opendisk.vbs"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe"
"C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\tosBtProc.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=7392.6deca60.2059384649 "C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll" 7392 plugin \\.\pipe\gecko-crash-server-pipe.7392
"C:\windows\system32\NOTEPAD.EXE" C:\rsit\info.txt
"C:\windows\system32\NOTEPAD.EXE" C:\rsit\log.txt
"c:\PROGRA~1\mcafee.com\agent\McUpdate.exe" /schedule
"c:\PROGRA~1\mcafee\msc\mcupdmgr.exe" -Embedding
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe27_ Global\UsGthrCtrlFltPipeMssGthrPipe27 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Peter Kacmarik\Downloads\RSITx64(2).exe"
C:\windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL [2010-05-03 294176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20101107013518.dll [2010-10-13 78968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2010-08-04 275112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\mskapbho.dll [2010-05-03 245272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-01-14 138624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20101107013518.dll [2010-10-13 73288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2010-08-04 228256]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar BHO - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1399.0\npwinext.dll [2010-03-04 548184]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-05-07 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3C88694-EFFA-4d78-B409-54B7B2535B14}]
TOSHIBA Media Controller Plug-in - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-03-19 529784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2010-08-04 275112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1399.0\npwinext.dll,-100 - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1399.0\npwinext.dll [2010-03-04 548184]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2010-08-04 228256]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"NvCplDaemon"=C:\windows\system32\NvCpl.dll [2010-04-15 17412200]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2009-11-05 505696]
"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2009-03-09 52600]
"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2009-08-13 570680]
"00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2010-03-25 913720]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-03-22 10134560]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-03-22 896032]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-03-10 2052392]
"ThpSrv"=C:\windows\system32\thpsrv /logon []
"Teco"=C:\Program Files\TOSHIBA\TECO\Teco.exe [2010-04-06 1489760]
"TosSENotify"=C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [2010-02-05 709976]
"TosWaitSrv"=C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [2010-02-23 705368]
"SmartFaceVWatcher"=C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [2009-10-19 238080]
"TosReelTimeMonitor"=C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [2010-03-03 35672]
"TosNC"=C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [2010-03-19 595816]
"TosVolRegulator"=C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [2009-11-11 24376]
"Toshiba TEMPRO"=C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [2010-02-11 1050072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TOSHIBA Online Product Information"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [2010-03-03 4581280]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"NBAgent"=C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe [2010-03-09 1086760]
"Bing Bar"=C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1399.0\mswinext.exe [2010-03-04 243032]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2009-11-11 288088]
"mcui_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2010-09-30 1484856]
"SVPWUTIL"=C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [2010-02-22 352256]
"HWSetup"=C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [2010-03-04 423936]
"KeNotify"=C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [2009-12-25 34160]
"ITSecMng"=C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START []
"TSleepSrv"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [2010-04-01 252728]
"ToshibaServiceStation"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [2009-10-06 1294136]
"TRCMan"=C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe [2009-07-21 701752]
"TWebCamera"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2010-02-24 2454840]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Akcelerátor spuštění AutoCADu.lnk - C:\Program Files (x86)\Common Files\Autodesk Shared\acstart16.exe
Bluetooth Manager.lnk - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-11-12 14:56:01 ----D---- C:\rsit
2010-11-12 14:56:01 ----D---- C:\Program Files\trend micro
2010-11-12 11:04:44 ----D---- C:\Program Files (x86)\DWG TrueView 2011
2010-11-12 11:02:02 ----D---- C:\Program Files (x86)\Microsoft WSE
2010-11-12 10:56:38 ----D---- C:\Program Files\Autodesk
2010-11-12 10:41:34 ----A---- C:\windows\SYSWOW64\D3DX9_41.dll
2010-11-12 10:41:34 ----A---- C:\windows\SYSWOW64\d3dx10_41.dll
2010-11-12 10:41:34 ----A---- C:\windows\SYSWOW64\D3DCompiler_41.dll
2010-11-12 10:41:34 ----A---- C:\windows\system32\D3DX9_41.dll
2010-11-12 10:41:34 ----A---- C:\windows\system32\d3dx10_41.dll
2010-11-12 10:41:34 ----A---- C:\windows\system32\D3DCompiler_41.dll
2010-11-12 10:40:02 ----SHD---- C:\Config.Msi
2010-11-12 10:19:24 ----D---- C:\Autodesk
2010-11-11 20:52:21 ----D---- C:\Program Files (x86)\AnswerWorks 4.0
2010-11-10 23:09:44 ----N---- C:\windows\system32\MpSigStub.exe
2010-11-09 21:26:52 ----HD---- C:\ProgramData\CanonBJ
2010-11-09 19:19:29 ----A---- C:\windows\system32\MRT.exe
2010-11-08 19:53:31 ----D---- C:\ProgramData\TOSHIBA Tempro
2010-11-08 19:53:31 ----D---- C:\ProgramData\IsolatedStorage
2010-11-07 22:37:37 ----D---- C:\Program Files (x86)\MSXML 4.0
2010-11-07 19:55:48 ----D---- C:\ProgramData\FLEXnet
2010-11-07 19:03:38 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-11-07 19:02:31 ----D---- C:\Users\Peter Kacmarik\AppData\Roaming\Autodesk
2010-11-07 19:02:31 ----D---- C:\ProgramData\Autodesk
2010-11-07 19:02:31 ----D---- C:\Program Files\Common Files\Autodesk Shared
2010-11-07 19:02:31 ----D---- C:\Program Files\AutoCAD 2010
2010-11-07 19:02:01 ----A---- C:\windows\SYSWOW64\d3dx10_37.dll
2010-11-07 19:02:01 ----A---- C:\windows\SYSWOW64\D3DCompiler_37.dll
2010-11-07 19:02:01 ----A---- C:\windows\system32\d3dx10_37.dll
2010-11-07 19:02:01 ----A---- C:\windows\system32\D3DCompiler_37.dll
2010-11-07 19:01:59 ----A---- C:\windows\SYSWOW64\D3DX9_37.dll
2010-11-07 19:01:59 ----A---- C:\windows\system32\D3DX9_37.dll
2010-11-07 19:01:52 ----A---- C:\windows\SYSWOW64\d3dx9_30.dll
2010-11-07 19:01:52 ----A---- C:\windows\system32\d3dx9_30.dll
2010-11-07 19:00:33 ----D---- C:\Program Files (x86)\Autodesk
2010-11-07 17:14:27 ----D---- C:\Program Files (x86)\WinRAR
2010-11-07 16:57:39 ----D---- C:\windows\SYSWOW64\Wat
2010-11-07 16:57:39 ----D---- C:\windows\system32\Wat
2010-11-07 15:11:11 ----A---- C:\windows\SYSWOW64\PresentationHostProxy.dll
2010-11-07 15:11:11 ----A---- C:\windows\SYSWOW64\PresentationHost.exe
2010-11-07 15:11:11 ----A---- C:\windows\SYSWOW64\netfxperf.dll
2010-11-07 15:11:11 ----A---- C:\windows\SYSWOW64\mscoree.dll
2010-11-07 15:11:11 ----A---- C:\windows\SYSWOW64\dfshim.dll
2010-11-07 15:11:11 ----A---- C:\windows\system32\PresentationHostProxy.dll
2010-11-07 15:11:11 ----A---- C:\windows\system32\PresentationHost.exe
2010-11-07 15:11:11 ----A---- C:\windows\system32\netfxperf.dll
2010-11-07 15:11:11 ----A---- C:\windows\system32\mscoree.dll
2010-11-07 15:11:11 ----A---- C:\windows\system32\dfshim.dll
2010-11-07 15:10:33 ----A---- C:\windows\system32\browserchoice.exe
2010-11-07 15:04:48 ----A---- C:\windows\system32\drivers\usbvideo.sys
2010-11-07 15:04:48 ----A---- C:\windows\system32\drivers\ks.sys
2010-11-07 14:55:43 ----A---- C:\windows\SYSWOW64\asycfilt.dll
2010-11-07 14:55:43 ----A---- C:\windows\system32\asycfilt.dll
2010-11-07 14:55:41 ----A---- C:\windows\SYSWOW64\vbscript.dll
2010-11-07 14:55:41 ----A---- C:\windows\SYSWOW64\ntdll.dll
2010-11-07 14:55:41 ----A---- C:\windows\system32\vbscript.dll
2010-11-07 14:55:41 ----A---- C:\windows\system32\ntdll.dll
2010-11-07 14:55:40 ----A---- C:\windows\SYSWOW64\t2embed.dll
2010-11-07 14:55:40 ----A---- C:\windows\system32\t2embed.dll
2010-11-07 14:55:39 ----A---- C:\windows\SYSWOW64\ole32.dll
2010-11-07 14:55:39 ----A---- C:\windows\system32\ole32.dll
2010-11-07 14:55:38 ----A---- C:\windows\SYSWOW64\StructuredQuery.dll
2010-11-07 14:55:38 ----A---- C:\windows\system32\StructuredQuery.dll
2010-11-07 14:55:30 ----A---- C:\windows\system32\shell32.dll
2010-11-07 14:55:29 ----A---- C:\windows\SYSWOW64\shell32.dll
2010-11-07 14:55:28 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2010-11-07 14:55:28 ----A---- C:\windows\system32\inetcomm.dll
2010-11-07 14:55:25 ----A---- C:\windows\SYSWOW64\CPFilters.dll
2010-11-07 14:55:25 ----A---- C:\windows\system32\msdri.dll
2010-11-07 14:55:25 ----A---- C:\windows\system32\CPFilters.dll
2010-11-07 14:55:24 ----A---- C:\windows\system32\drivers\tcpip.sys
2010-11-07 14:55:19 ----A---- C:\windows\system32\ntoskrnl.exe
2010-11-07 14:55:18 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2010-11-07 14:55:18 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2010-11-07 14:55:17 ----A---- C:\windows\SYSWOW64\schannel.dll
2010-11-07 14:55:17 ----A---- C:\windows\system32\schannel.dll
2010-11-07 14:55:15 ----A---- C:\windows\SYSWOW64\comctl32.dll
2010-11-07 14:55:15 ----A---- C:\windows\system32\comctl32.dll
2010-11-07 14:55:14 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2010-11-07 14:55:14 ----A---- C:\windows\system32\oleaut32.dll
2010-11-07 14:55:13 ----A---- C:\windows\SYSWOW64\rtutils.dll
2010-11-07 14:55:13 ----A---- C:\windows\system32\rtutils.dll
2010-11-07 14:55:06 ----A---- C:\windows\SYSWOW64\tzres.dll
2010-11-07 14:55:06 ----A---- C:\windows\system32\tzres.dll
2010-11-07 14:54:56 ----A---- C:\windows\SYSWOW64\iccvid.dll
2010-11-07 14:54:55 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2010-11-07 14:54:55 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2010-11-07 14:54:55 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2010-11-07 14:54:54 ----A---- C:\windows\system32\spoolsv.exe
2010-11-07 14:54:53 ----A---- C:\windows\system32\drivers\fvevol.sys
2010-11-07 14:54:53 ----A---- C:\windows\system32\cdd.dll
2010-11-07 14:54:46 ----A---- C:\windows\system32\wmpmde.dll
2010-11-07 14:54:45 ----A---- C:\windows\SYSWOW64\wmpmde.dll
2010-11-07 14:54:37 ----A---- C:\windows\system32\msxml3.dll
2010-11-07 14:54:36 ----A---- C:\windows\SYSWOW64\msxml3.dll
2010-11-07 14:54:36 ----A---- C:\windows\system32\drivers\Diskdump.sys
2010-11-07 14:54:34 ----A---- C:\windows\SYSWOW64\secur32.dll
2010-11-07 14:54:34 ----A---- C:\windows\system32\lsasrv.dll
2010-11-07 14:54:34 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2010-11-07 14:54:33 ----A---- C:\windows\SYSWOW64\sspicli.dll
2010-11-07 14:54:29 ----A---- C:\windows\SYSWOW64\mfc40u.dll
2010-11-07 14:54:29 ----A---- C:\windows\SYSWOW64\mfc40.dll
2010-11-07 14:54:27 ----A---- C:\windows\SYSWOW64\atmlib.dll
2010-11-07 14:54:27 ----A---- C:\windows\SYSWOW64\atmfd.dll
2010-11-07 14:54:27 ----A---- C:\windows\system32\atmlib.dll
2010-11-07 14:54:27 ----A---- C:\windows\system32\atmfd.dll
2010-11-07 14:54:23 ----A---- C:\windows\system32\mshtml.dll
2010-11-07 14:54:22 ----A---- C:\windows\SYSWOW64\mshtml.dll
2010-11-07 14:54:22 ----A---- C:\windows\system32\ieframe.dll
2010-11-07 14:54:21 ----A---- C:\windows\SYSWOW64\iertutil.dll
2010-11-07 14:54:21 ----A---- C:\windows\SYSWOW64\ieframe.dll
2010-11-07 14:54:21 ----A---- C:\windows\system32\urlmon.dll
2010-11-07 14:54:21 ----A---- C:\windows\system32\mstime.dll
2010-11-07 14:54:21 ----A---- C:\windows\system32\msfeeds.dll
2010-11-07 14:54:21 ----A---- C:\windows\system32\iertutil.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\wininet.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\urlmon.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\mstime.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\ieui.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\iepeers.dll
2010-11-07 14:54:20 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2010-11-07 14:54:20 ----A---- C:\windows\system32\wininet.dll
2010-11-07 14:54:20 ----A---- C:\windows\system32\mshtmled.dll
2010-11-07 14:54:20 ----A---- C:\windows\system32\msfeedssync.exe
2010-11-07 14:54:20 ----A---- C:\windows\system32\msfeedsbs.dll
2010-11-07 14:54:20 ----A---- C:\windows\system32\licmgr10.dll
2010-11-07 14:54:20 ----A---- C:\windows\system32\jsproxy.dll
2010-11-07 14:54:20 ----A---- C:\windows\system32\ieui.dll
2010-11-07 14:54:20 ----A---- C:\windows\system32\iepeers.dll
2010-11-07 14:54:20 ----A---- C:\windows\system32\iedkcs32.dll
2010-11-07 14:54:19 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2010-11-07 14:54:16 ----A---- C:\windows\SYSWOW64\wmp.dll
2010-11-07 14:54:16 ----A---- C:\windows\system32\wmp.dll
2010-11-07 14:54:15 ----A---- C:\windows\SYSWOW64\wmploc.DLL
2010-11-07 14:54:14 ----A---- C:\windows\system32\wmploc.DLL
2010-11-07 14:54:13 ----A---- C:\windows\SYSWOW64\sscore.dll
2010-11-07 14:54:13 ----A---- C:\windows\system32\srvsvc.dll
2010-11-07 14:54:13 ----A---- C:\windows\system32\drivers\srvnet.sys
2010-11-07 14:54:13 ----A---- C:\windows\system32\drivers\srv2.sys
2010-11-07 14:54:13 ----A---- C:\windows\system32\drivers\srv.sys
2010-11-07 14:54:12 ----A---- C:\windows\system32\win32k.sys
2010-11-07 01:59:23 ----D---- C:\Users\Peter Kacmarik\AppData\Roaming\WinRAR
2010-11-07 01:20:57 ----D---- C:\Users\Peter Kacmarik\AppData\Roaming\Mozilla
2010-11-07 01:06:13 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-11-06 20:44:34 ----D---- C:\Users\Peter Kacmarik\AppData\Roaming\Adobe
2010-11-06 19:31:00 ----A---- C:\windows\SYSWOW64\wintrust.dll
2010-11-06 19:31:00 ----A---- C:\windows\SYSWOW64\cabview.dll
2010-11-06 19:31:00 ----A---- C:\windows\system32\wintrust.dll
2010-11-06 19:31:00 ----A---- C:\windows\system32\cabview.dll
2010-11-06 18:45:39 ----D---- C:\Users\Peter Kacmarik\AppData\Roaming\Toshiba
2010-11-06 18:41:16 ----D---- C:\Users\Peter Kacmarik\AppData\Roaming\Nero
2010-11-06 18:39:50 ----D---- C:\Users\Peter Kacmarik\AppData\Roaming\WinBatch
2010-11-06 18:39:14 ----D---- C:\Users\Peter Kacmarik\AppData\Roaming\Identities
2010-11-06 18:37:41 ----D---- C:\ProgramData\ToshibaEurope
2010-11-06 18:37:28 ----SD---- C:\Users\Peter Kacmarik\AppData\Roaming\Microsoft
2010-11-06 18:37:28 ----D---- C:\Users\Peter Kacmarik\AppData\Roaming\Media Center Programs
2010-11-06 18:37:28 ----D---- C:\Users\Peter Kacmarik\AppData\Roaming\Macromedia

======List of files/folders modified in the last 1 months======

2010-11-12 15:11:35 ----D---- C:\windows\Temp
2010-11-12 14:56:01 ----RD---- C:\Program Files
2010-11-12 14:47:28 ----D---- C:\windows\Microsoft.NET
2010-11-12 14:46:55 ----RSD---- C:\windows\assembly
2010-11-12 13:44:37 ----D---- C:\windows\system32\config
2010-11-12 13:34:33 ----SHD---- C:\windows\Installer
2010-11-12 13:32:41 ----AD---- C:\windows\System32
2010-11-12 13:32:41 ----A---- C:\windows\system32\PerfStringBackup.INI
2010-11-12 13:32:40 ----D---- C:\windows\inf
2010-11-12 13:32:07 ----SHD---- C:\System Volume Information
2010-11-12 11:07:15 ----D---- C:\windows\winsxs
2010-11-12 11:06:24 ----RSD---- C:\windows\Fonts
2010-11-12 11:04:44 ----RD---- C:\Program Files (x86)
2010-11-12 11:01:39 ----D---- C:\windows\Downloaded Program Files
2010-11-12 10:41:34 ----D---- C:\windows\SysWOW64
2010-11-12 10:40:48 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-11-12 10:05:20 ----A---- C:\windows\SYSWOW64\log.txt
2010-11-12 01:25:40 ----D---- C:\windows\system32\Tasks
2010-11-12 01:12:13 ----D---- C:\Program Files (x86)\Common Files
2010-11-12 01:12:12 ----D---- C:\ProgramData\Skype
2010-11-11 20:52:29 ----D---- C:\Program Files (x86)\Microsoft Office
2010-11-11 20:52:06 ----D---- C:\windows\Help
2010-11-11 19:15:19 ----D---- C:\windows\system32\NDF
2010-11-11 19:11:46 ----D---- C:\windows\ModemLogs
2010-11-10 16:21:20 ----D---- C:\windows\system32\sk-SK
2010-11-10 16:16:31 ----D---- C:\windows\Logs
2010-11-10 02:30:13 ----D---- C:\windows\system32\wdi
2010-11-09 21:26:52 ----HD---- C:\ProgramData
2010-11-09 21:26:35 ----D---- C:\windows\system32\drivers
2010-11-09 19:26:12 ----D---- C:\windows\SYSWOW64\en-US
2010-11-09 19:26:11 ----D---- C:\windows\system32\en-US
2010-11-09 19:26:08 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-11-09 19:19:31 ----D---- C:\windows\debug
2010-11-08 10:42:48 ----D---- C:\windows\system32\catroot2
2010-11-08 10:42:25 ----D---- C:\windows\Prefetch
2010-11-07 22:37:57 ----D---- C:\windows\system32\catroot
2010-11-07 19:12:59 ----SD---- C:\ProgramData\Microsoft
2010-11-07 19:03:38 ----D---- C:\Program Files\Common Files
2010-11-07 18:07:03 ----D---- C:\ProgramData\Toshiba
2010-11-07 17:00:18 ----D---- C:\windows\system32\drivers\UMDF
2010-11-07 16:57:51 ----D---- C:\Program Files\Windows Mail
2010-11-07 16:57:51 ----D---- C:\Program Files (x86)\Windows Mail
2010-11-07 16:57:50 ----D---- C:\windows\ehome
2010-11-07 16:57:42 ----D---- C:\windows\SYSWOW64\sk-SK
2010-11-07 16:57:38 ----D---- C:\windows\AppPatch
2010-11-07 16:57:33 ----D---- C:\Program Files\Internet Explorer
2010-11-07 16:57:33 ----D---- C:\Program Files (x86)\Internet Explorer
2010-11-07 16:57:31 ----D---- C:\windows\SYSWOW64\migration
2010-11-07 16:57:30 ----D---- C:\windows\system32\migration
2010-11-07 16:57:28 ----D---- C:\Program Files\Windows Media Player
2010-11-07 16:57:28 ----D---- C:\Program Files (x86)\Windows Media Player
2010-11-07 16:57:23 ----D---- C:\windows\system32\DriverStore
2010-11-07 15:17:06 ----AD---- C:\Windows
2010-11-07 15:00:56 ----D---- C:\windows\system32\LogFiles
2010-11-07 02:03:32 ----D---- C:\windows\SYSWOW64\drivers
2010-11-07 01:33:22 ----D---- C:\Program Files (x86)\McAfee
2010-11-06 19:31:32 ----D---- C:\windows\SoftwareDistribution
2010-11-06 19:30:51 ----D---- C:\ProgramData\McAfee
2010-11-06 18:39:10 ----SHD---- C:\$Recycle.Bin
2010-11-06 18:38:53 ----D---- C:\windows\SYSWOW64\sysprep
2010-11-06 18:38:53 ----D---- C:\windows\Panther
2010-11-06 18:38:53 ----AD---- C:\windows\system32\sysprep
2010-11-06 18:38:53 ----AD---- C:\Toshiba
2010-11-06 18:38:40 ----D---- C:\windows\system32\restore
2010-11-06 18:37:28 ----RD---- C:\Users
2010-11-06 17:29:43 ----D---- C:\windows\rescache

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2010-01-15 538136]
R0 LPCFilter;LPC Lower Filter Driver; C:\windows\system32\DRIVERS\LPCFilter.sys [2009-07-30 44912]
R0 mfehidk;McAfee Inc. mfehidk; C:\windows\system32\drivers\mfehidk.sys [2010-10-13 529128]
R0 mfewfpk;McAfee Inc. mfewfpk; C:\windows\system32\drivers\mfewfpk.sys [2010-10-13 283360]
R0 pciide;pciide; C:\windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 Thpdrv;TOSHIBA HDD Protection Driver; C:\windows\system32\DRIVERS\thpdrv.sys [2009-06-29 34880]
R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver; C:\windows\system32\DRIVERS\Thpevm.SYS [2009-06-29 14784]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\windows\system32\DRIVERS\TVALZ_O.SYS [2009-07-14 26840]
R1 mfenlfk;McAfee NDIS Light Filter; C:\windows\system32\DRIVERS\mfenlfk.sys [2010-10-13 75032]
R1 Tosrfcom;Bluetooth RFCOMM; C:\windows\System32\Drivers\tosrfcom.sys [2009-07-28 81768]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver; C:\windows\system32\DRIVERS\TVALZFL.sys [2009-06-19 14472]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-05-26 3058168]
R3 cfwids;McAfee Inc. cfwids; C:\windows\system32\drivers\cfwids.sys [2010-10-13 62800]
R3 enecir;ENE CIR Receiver; C:\windows\system32\DRIVERS\enecir.sys [2009-06-29 70656]
R3 enecirhid;ENE CIR HID Receiver; C:\windows\system32\DRIVERS\enecirhid.sys [2009-05-19 14848]
R3 enecirhidma;ENE CIR HIDmini Filter; C:\windows\system32\DRIVERS\enecirhidma.sys [2008-04-24 6656]
R3 HECIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-03-22 2298400]
R3 mfeapfk;McAfee Inc. mfeapfk; C:\windows\system32\drivers\mfeapfk.sys [2010-10-13 121248]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\windows\system32\drivers\mfeavfk.sys [2010-10-13 190136]
R3 mfefirek;McAfee Inc. mfefirek; C:\windows\system32\drivers\mfefirek.sys [2010-10-13 441328]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2010-01-28 86120]
R3 PGEffect;Pangu effect driver; C:\windows\system32\DRIVERS\pgeffect.sys [2009-06-22 35008]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\windows\System32\Drivers\RootMdm.sys [2009-07-14 11264]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2010-04-09 330856]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-03-10 316464]
R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\windows\system32\DRIVERS\tdcmdpst.sys [2009-07-30 27784]
R3 tosporte;Bluetooth COM Port; C:\windows\system32\DRIVERS\tosporte.sys [2009-06-17 54664]
R3 tosrfbd;Bluetooth RFBUS; C:\windows\system32\DRIVERS\tosrfbd.sys [2009-09-24 212072]
R3 tosrfec;Bluetooth ACPI; C:\windows\system32\DRIVERS\tosrfec.sys [2009-07-13 19824]
R3 Tosrfhid;Bluetooth RFHID; C:\windows\system32\DRIVERS\Tosrfhid.sys [2009-06-19 94336]
R3 Tosrfusb;Bluetooth USB Controller; C:\windows\system32\DRIVERS\tosrfusb.sys [2010-02-03 60408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 acpials;ALS Sensor Filter; C:\windows\system32\DRIVERS\acpials.sys [2009-07-14 9728]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688]
S3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2009-09-23 144496]
S3 mfeavfk01;McAfee Inc.; C:\windows\system32\drivers\mfeavfk01.sys []
S3 mferkdet;McAfee Inc. mferkdet; C:\windows\system32\drivers\mferkdet.sys [2010-10-13 94864]
S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2009-10-10 109056]
S3 usbscan;USB Scanner Driver; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 cfWiMAXService;ConfigFree WiMAX Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2010-01-28 249200]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 ConfigFree Service;ConfigFree Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-03 268824]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 mcmscsvc;McAfee Services; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 McNASvc;McAfee Network Agent; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 McShield;McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [2010-10-13 200056]
R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2010-10-13 245352]
R2 mfevtp;McAfee Validation Trust Protection Service; C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe [2010-10-13 149032]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2010-01-15 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2010-04-15 393320]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2010-04-15 1800808]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-01-14 242048]
R2 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO); C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [2010-02-11 124368]
R2 Thpsrv;Ochrana HDD TOSHIBA; C:\windows\system32\ThpSrv.exe [2009-10-21 531520]
R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\windows\system32\TODDSrv.exe [2009-07-28 140632]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe [2009-11-05 489312]
R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [2010-04-06 258928]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-03 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 TMachInfo;TMachInfo; C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2009-10-06 51512]
R3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2010-02-25 196464]
R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-02-05 137560]
R3 TPCHSrv;TPCH Service; C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2010-02-23 835952]
S2 0320851289555617mcinstcleanup;McAfee Application Installer Cleanup (0320851289555617); C:\windows\TEMP\032085~1.EXE [2010-04-28 820488]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-11-11 77944]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-11-12 1436424]
S3 McODS;McAfee Scanner; C:\Program Files\mcafee\VirusScan\mcods.exe [2010-10-07 509416]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-11-07 1255736]
S4 McOobeSv;McAfee OOBE Service; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440]

-----------------EOF-----------------




"C:\windows\System32\WScript.exe" "C:\Users\Peter Kacmarik\Downloads\msgbox.vbs"
"C:\windows\System32\WScript.exe" "C:\Users\Peter Kacmarik\Downloads\opendisk.vbs"

vypol som tento WScript.exe a uz mi nevysuva mechaniku ani nepise nic....
zaujimalo by ma ako teraz zistim ci je to ok alebo tam ten virus este mam kedze so len vypol...

DAKUJEM ZA POMOC

Udělejte sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 . Dejte log.

13. 11. 2010 10:16:27 Úloha byla spuštěna
13. 11. 2010 10:25:14 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1028.exe/PE_Patch/NetFX2.0-KB936385-v6000-x64_RTM_zh-CHT.msu Chyba čtení
13. 11. 2010 10:25:15 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1034.exe/PE_Patch/NetFX2.0-KB936388-v6000-x64_RTM_es.msu Chyba čtení
13. 11. 2010 10:26:54 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1036.exe/PE_Patch/NetFX2.0-KB936384-v6000-x64_RTM_fr.msu Chyba čtení
13. 11. 2010 10:26:54 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1036.exe/PE_Patch Chyba čtení
13. 11. 2010 10:26:54 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1040.exe/PE_Patch/NetFX2.0-KB936389-v6000-x64_RTM_it.msu Chyba čtení
13. 11. 2010 10:26:54 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1040.exe/PE_Patch Chyba čtení
13. 11. 2010 10:26:55 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1041.exe/PE_Patch/NetFX3.0-KB936428-v6000-x64_RTM_ja.msu Chyba čtení
13. 11. 2010 10:28:34 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1042.exe/PE_Patch/NetFX2.0-KB936387-v6000-x64_RTM_ko.msu Chyba čtení
13. 11. 2010 10:28:34 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1042.exe/PE_Patch Chyba čtení
13. 11. 2010 10:28:34 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1046.exe/PE_Patch/NetFX2.0-KB936391-v6000-x64_RTM_pt-BR.msu Chyba čtení
13. 11. 2010 10:28:34 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1046.exe/PE_Patch Chyba čtení
13. 11. 2010 10:28:35 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_2052.exe/PE_Patch/NetFX2.0-KB936386-v6000-x64_RTM_zh-CHS.msu Chyba čtení
13. 11. 2010 10:28:35 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_2052.exe/PE_Patch Chyba čtení
13. 11. 2010 10:36:12 Chyba zpracování C:\Documents and Settings\Peter Kacmarik\Downloads\AutoCAD_Mechanical_2011_Czech_Win_64bit.exe/x64/support/dotnetfx/wcu/dotNetFramework/dotNetFX35/x64/dotnetfx35langpack_x64_1028.exe/PE_Patch Chyba čtení
13. 11. 2010 10:47:13 Zjištěno: http://www.viruslist.com/cz/advisories/41340 C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
13. 11. 2010 10:50:53 Zjištěno: http://www.viruslist.com/cz/advisories/41791 C:\Program Files (x86)\Java\jre6\bin\java.exe
13. 11. 2010 11:00:50 Chyba zpracování C:\Users\Peter Kacmarik\Downloads\AutoCAD_Mechanical_2011_Czech_Win_64bit.exe/x64/support/dotnetfx/wcu/dotNetFramework/dotNetFX35/x64/dotnetfx35langpack_x64_1028.exe/PE_Patch Chyba čtení
13. 11. 2010 11:28:20 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1034.exe/PE_Patch/NetFX2.0-KB949246-v6001-x64.msu Chyba čtení
13. 11. 2010 11:28:20 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1034.exe/PE_Patch Chyba čtení
13. 11. 2010 11:28:20 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1028.exe/PE_Patch Chyba čtení
13. 11. 2010 11:28:20 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1031.exe/PE_Patch Chyba čtení
13. 11. 2010 11:30:00 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1036.exe/PE_Patch Chyba čtení
13. 11. 2010 11:30:00 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1041.exe/PE_Patch Chyba čtení
13. 11. 2010 11:31:40 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1042.exe/PE_Patch Chyba čtení
13. 11. 2010 11:31:40 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_1046.exe/PE_Patch Chyba čtení
13. 11. 2010 11:31:40 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_2052.exe/PE_Patch/NetFX2.0-KB936386-v6000-x64_RTM_zh-CHS.msu Chyba čtení
13. 11. 2010 11:31:40 Chyba zpracování C:\Autodesk\AutoCAD_Mechanical_2011_CZECH_MLD_Win_64bit\x64\support\dotnetfx\wcu\dotNetFramework\dotNetFX35\x64\dotnetfx35langpack_x64_2052.exe/PE_Patch Chyba čtení
13. 11. 2010 11:34:34 Chyba zpracování C:\Documents and Settings\Peter Kacmarik\Downloads\AutoCAD_Mechanical_2011_Czech_Win_64bit.exe/x64/support/dotnetfx/wcu/dotNetFramework/dotNetFX35/x64/dotnetfx35langpack_x64_1028.exe/PE_Patch Chyba čtení
13. 11. 2010 11:57:53 Chyba zpracování C:\Users\Peter Kacmarik\Downloads\AutoCAD_Mechanical_2011_Czech_Win_64bit.exe/x64/support/dotnetfx/wcu/dotNetFramework/dotNetFX35/x64/dotnetfx35langpack_x64_1028.exe/PE_Patch Chyba čtení
13. 11. 2010 12:52:38 Úloha byla dokončena

Toto je OK. Pokud stále systém nepracuje správně, proveďte obnovu systému k datu, kdy korektně fungoval.

Dakujem za pomoc. PC pracuje teraz v poriadku ale moze sa stat ze po case prestane????? lebo je to uz odstranen a nemusim sa bat??? DAkujem velmi pekne

Pokud pracuje správně, nechte to být, neboť s tím nic stejně nenaděláme. Činnost PC sledujte a v případě potřeby napište. Tento virus totiž někdy přepisuje soubory jádra systému. Nemáte zač!