Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

preventívna kontrola

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
MAPO
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 17 bře 2009 15:33

preventívna kontrola

#1 Příspěvek od MAPO »

Dobrý deň, chcel by som vás poprosiť o preventívnu kontrolu logu.
Po inštalácii Daemon Tools sa nastavovala automaticky domovská stránka justhit.com, problém som vyriešil odstránením zo startup, tak by som sa cchel presvedčiť, či je PC OK. Pri hraní je procesor vyťažený skoro stále na 100%, čo ale môže byť spôsobené nižším rozlíšením a nie moc vydarenou architektúrou.

Kód: Vybrat vše

Logfile of random's system information tool 1.08 (written by random/random)
Run by Doma at 2010-11-21 13:44:27
Microsoft Windows 7 Ultimate  
System drive C: has 23 GB (23%) free of 100 GB
Total RAM: 4094 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:44:43, on 21. 11. 2010
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe
C:\Program Files (x86)\IObit\IObit Security 360\is360tray.exe
C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
C:\Program Files\trend micro\Doma.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.justhit.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\SnagIt 9\SnagItBHO.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IObit Security 360] "C:\Program Files (x86)\IObit\IObit Security 360\IS360tray.exe" /autostart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [AtiTrayTools] "C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Pridať cieľ odkazu do existujúceho súboru PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Pridať do existujúceho súboru PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - Unknown owner - (no file)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: IS360service - IObit - C:\Program Files (x86)\IObit\IObit Security 360\IS360srv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - Unknown owner - (no file)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8079 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\IObit\IObit Security 360\IS360srv.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe" 
"C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe" 
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\IObit\IObit Security 360\is360tray.exe" /autostart
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe"
"D:\Inštalácie\Security\RSIT\RSITx64.exe" 
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader - C:\Program Files (x86)\TechSmith\SnagIt 9\DLLx64\SnagItBHO64.dll [2008-08-29 62280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader - C:\Program Files (x86)\TechSmith\SnagIt 9\SnagItBHO.dll [2008-08-29 66888]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~2\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-08-22 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - SnagIt - C:\Program Files (x86)\TechSmith\SnagIt 9\DLLx64\SnagItIEAddin64.dll [2008-08-29 198984]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-03-12 10134560]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-08-12 2916584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"AtiTrayTools"=C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe [2010-04-22 883200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR10]
C:\Program Files (x86)\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [2010-01-17 941320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\pdfFactory Pro Dispečer v3]
C:\Windows\system32\spool\DRIVERS\x64\3\fppdis3a.exe [2009-12-11 754688]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe [2009-09-20 270336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-07-06 98304]
""= []
"IObit Security 360"=C:\Program Files (x86)\IObit\IObit Security 360\IS360tray.exe [2010-06-11 1280344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-11-21 13:17:50 ----D---- C:\rsit
2010-11-21 13:17:50 ----D---- C:\Program Files\trend micro
2010-11-18 17:37:54 ----D---- C:\Program Files (x86)\DAEMON Tools Pro
2010-11-18 17:06:50 ----D---- C:\Users\Doma\AppData\Roaming\CTFmon
2010-11-11 15:24:11 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-11-11 15:24:11 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-11-11 15:24:11 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-11-11 15:24:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-11-11 15:24:11 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-11-11 15:24:11 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-11-11 15:24:11 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-11-11 15:24:11 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-11-11 15:24:10 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-11-11 15:24:10 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-11-11 15:24:09 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-11-11 15:24:09 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-11-11 15:24:09 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-11-11 15:24:09 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-11-11 15:24:08 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-11-11 15:24:08 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-11-11 15:24:08 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-11-11 15:24:08 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-11-11 15:24:08 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-11-11 15:24:08 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-11-11 15:24:07 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-11-11 15:24:07 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-11-11 15:24:07 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-11-11 15:24:07 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-11-06 16:48:35 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2010-11-06 16:47:50 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2010-11-06 16:47:50 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-11-06 16:47:50 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-11-06 16:47:50 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-11-06 16:47:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-11-06 16:47:49 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-11-06 16:47:48 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-11-06 16:47:48 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-11-06 16:47:47 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-11-06 16:47:47 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2010-11-06 16:47:47 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-11-06 16:47:47 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-11-06 16:47:46 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-11-06 16:47:46 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-11-06 16:47:46 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-11-06 16:47:46 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-11-06 16:47:46 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-11-06 16:47:46 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-11-06 16:47:45 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-11-06 16:47:45 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-11-06 16:47:44 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-11-06 16:47:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-11-06 16:47:44 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-11-06 16:47:44 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-11-06 16:47:43 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-11-06 16:47:43 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-11-06 16:47:43 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-11-06 16:47:43 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-11-06 16:47:42 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-11-06 16:47:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-11-06 16:47:42 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-11-06 16:47:42 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-11-06 16:47:41 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-11-06 16:47:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-11-06 16:47:41 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-11-06 16:47:41 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-11-06 16:47:41 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-11-06 16:47:41 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-11-06 16:47:40 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-11-06 16:47:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-11-06 16:47:40 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-11-06 16:47:40 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-11-06 16:47:39 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-11-06 16:47:39 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-11-06 16:47:39 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-11-06 16:47:39 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-11-06 16:47:39 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-11-06 16:47:39 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-11-06 16:47:38 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-11-06 16:47:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-11-06 16:47:38 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-11-06 16:47:38 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-11-06 16:47:37 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-11-06 16:47:37 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-11-06 16:47:36 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-11-06 16:47:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-11-06 16:47:36 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-11-06 16:47:36 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-11-06 16:47:36 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-11-06 16:47:36 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-11-06 16:47:36 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-11-06 16:47:36 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-11-06 16:47:35 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-11-06 16:47:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-11-06 16:47:35 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-11-06 16:47:35 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-11-06 16:47:34 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-11-06 16:47:34 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-11-06 16:47:34 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-11-06 16:47:34 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-11-06 16:47:33 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-11-06 16:47:33 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-11-06 16:47:33 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-11-06 16:47:33 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-11-06 16:47:32 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-11-06 16:47:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-11-06 16:47:32 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-11-06 16:47:32 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-11-06 16:47:31 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-11-06 16:47:31 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-11-06 16:47:31 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-11-06 16:47:31 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-11-06 16:47:30 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-11-06 16:47:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-11-06 16:47:30 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-11-06 16:47:30 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-11-06 16:47:29 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-11-06 16:47:29 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-11-06 16:47:28 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-11-06 16:47:28 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-11-06 16:47:27 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-11-06 16:47:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-11-06 16:47:27 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-11-06 16:47:27 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-11-06 16:47:26 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-11-06 16:47:26 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-11-06 16:47:25 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-11-06 16:47:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-11-06 16:47:25 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-11-06 16:47:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-11-06 16:47:25 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-11-06 16:47:25 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-11-06 16:47:25 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-11-06 16:47:25 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-11-06 16:47:24 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-11-06 16:47:24 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-11-06 16:47:23 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-11-06 16:47:23 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-11-06 16:47:23 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-11-06 16:47:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-11-06 16:47:23 ----A---- C:\Windows\system32\xinput1_3.dll
2010-11-06 16:47:23 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-11-06 16:47:23 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-11-06 16:47:23 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-11-06 16:47:21 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-11-06 16:47:21 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-11-06 16:47:21 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-11-06 16:47:21 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-11-06 16:47:21 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-11-06 16:47:21 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-11-06 16:47:20 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-11-06 16:47:20 ----A---- C:\Windows\system32\d3dx10.dll
2010-11-06 16:47:19 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-11-06 16:47:19 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-11-06 16:47:18 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-11-06 16:47:18 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-11-06 16:47:18 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-11-06 16:47:18 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-11-06 16:47:17 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-11-06 16:47:17 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-11-06 16:47:17 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-11-06 16:47:17 ----A---- C:\Windows\system32\xinput1_2.dll
2010-11-06 16:47:17 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-11-06 16:47:17 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-11-06 16:47:09 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-11-06 16:27:33 ----D---- C:\Program Files (x86)\Battlefield Bad Company 2
2010-11-03 14:21:56 ----D---- C:\Users\Doma\AppData\Roaming\TeamViewer
2010-11-03 14:21:08 ----A---- C:\Windows\system32\drivers\teamviewervpn.sys
2010-11-03 14:21:07 ----D---- C:\Program Files (x86)\TeamViewer
2010-11-01 15:21:13 ----A---- C:\Windows\SYSWOW64\BASSMOD.dll
2010-10-31 16:36:28 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2010-10-31 16:36:28 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2010-10-31 16:36:28 ----A---- C:\Windows\system32\xinput1_1.dll
2010-10-31 16:36:28 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-10-31 16:36:27 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2010-10-31 16:36:27 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-10-31 16:36:22 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-10-31 16:36:21 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2010-10-31 16:36:21 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2010-10-31 16:36:21 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-10-31 16:36:21 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-10-31 16:36:20 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2010-10-31 16:36:20 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2010-10-31 16:36:20 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-10-31 16:36:20 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-10-31 16:36:18 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2010-10-31 16:36:18 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-10-31 16:36:17 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2010-10-31 16:36:17 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-10-31 16:36:16 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2010-10-31 16:36:16 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-10-31 16:36:15 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2010-10-31 16:36:15 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-10-30 09:06:51 ----D---- C:\Program Files (x86)\Google
2010-10-29 08:47:45 ----SHD---- C:\Windows\ftpcache
2010-10-29 08:47:03 ----A---- C:\Windows\game.ini
2010-10-29 08:42:16 ----D---- C:\Program Files (x86)\Activision
2010-10-24 18:16:42 ----D---- C:\ProgramData\Codemasters
2010-10-24 11:19:46 ----A---- C:\Windows\SYSWOW64\rapture3d_oal.dll
2010-10-24 11:19:46 ----A---- C:\Windows\SYSWOW64\mkl_blueripple.dll
2010-10-24 11:19:45 ----D---- C:\Program Files (x86)\BRS
2010-10-24 11:17:21 ----D---- C:\Windows\SYSWOW64\xlive
2010-10-24 11:17:20 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2010-10-24 11:11:09 ----D---- C:\Program Files (x86)\Codemasters
2010-10-22 19:51:21 ----D---- C:\Program Files\DVDFab 8
2010-10-22 19:50:13 ----D---- C:\Program Files (x86)\DVDFab 8

======List of files/folders modified in the last 1 months======

2010-11-21 13:44:32 ----D---- C:\Windows\Temp
2010-11-21 13:44:09 ----D---- C:\Windows\System32
2010-11-21 13:44:08 ----D---- C:\Windows\inf
2010-11-21 13:44:08 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-21 13:40:29 ----D---- C:\Windows
2010-11-21 13:39:37 ----D---- C:\Windows\system32\drivers
2010-11-21 13:21:36 ----SHD---- C:\System Volume Information
2010-11-21 13:21:09 ----D---- C:\Windows\Prefetch
2010-11-21 13:17:50 ----RD---- C:\Program Files
2010-11-21 13:12:12 ----D---- C:\Users\Doma\AppData\Roaming\Skype
2010-11-21 13:11:34 ----D---- C:\Program Files (x86)\ABBYY FineReader 10
2010-11-21 12:05:47 ----D---- C:\Users\Doma\AppData\Roaming\skypePM
2010-11-19 14:08:36 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-11-19 12:33:27 ----D---- C:\Windows\system32\config
2010-11-18 18:14:50 ----D---- C:\Program Files (x86)\Steam
2010-11-18 18:09:54 ----SHD---- C:\Windows\Installer
2010-11-18 18:09:54 ----HD---- C:\Config.Msi
2010-11-18 18:08:56 ----RSD---- C:\Windows\assembly
2010-11-18 18:07:56 ----D---- C:\Windows\Logs
2010-11-18 17:37:57 ----D---- C:\Windows\system32\Tasks
2010-11-18 17:37:54 ----D---- C:\Program Files (x86)
2010-11-17 11:23:32 ----D---- C:\Windows\system32\drivers\etc
2010-11-17 10:46:25 ----A---- C:\Windows\SYSWOW64\everest_cpl.ini
2010-11-11 15:24:11 ----D---- C:\Windows\SysWOW64
2010-11-09 19:04:01 ----SD---- C:\Users\Doma\AppData\Roaming\Microsoft
2010-11-07 19:56:15 ----D---- C:\Program Files (x86)\CCleaner
2010-11-06 16:48:35 ----D---- C:\Windows\system32\LogFiles
2010-11-03 14:21:10 ----D---- C:\Windows\system32\DriverStore
2010-11-03 14:21:10 ----D---- C:\Windows\system32\catroot
2010-11-01 12:16:40 ----D---- C:\Windows\system32\catroot2
2010-10-31 16:36:55 ----D---- C:\Program Files (x86)\Electronic Arts
2010-10-29 08:47:30 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-10-29 08:38:30 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-10-24 18:16:42 ----HD---- C:\ProgramData
2010-10-24 11:19:43 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2010-10-24 11:19:43 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2010-10-24 11:19:43 ----A---- C:\Windows\system32\wrap_oal.dll
2010-10-24 11:19:43 ----A---- C:\Windows\system32\OpenAL32.dll
2010-10-24 11:06:29 ----SD---- C:\ProgramData\Microsoft
2010-10-22 19:50:27 ----D---- C:\Users\Doma\AppData\Roaming\Vso
2010-10-22 19:50:25 ----A---- C:\Users\Doma\AppData\Roaming\inst.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-04 16440]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-10-16 828912]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x64.sys [2009-03-27 19432]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 168544]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-07-29 171152]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-07-29 50624]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-30 6103552]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-07-07 265728]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-07-29 33632]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-03-12 2291616]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-08-22 82816]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-08-20 239616]
R3 teamviewervpn;TeamViewer VPN Adapter; C:\Windows\system32\DRIVERS\teamviewervpn.sys [2010-10-15 35112]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-04-03 34872]
R4 DRIVER_B;DRIVER_B; \??\C:\Windows\system32\Drivers\DRIVER_BIN64 []
S1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys []
S2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/08/21 10:20:13]; C:\Windows\system32\drivers\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}.sys []
S3 a0ypogit;a0ypogit; C:\Windows\system32\drivers\a0ypogit.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-30 6103552]
S3 cpuz130;cpuz130; C:\Windows\system32\drivers\cpuz130.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-14 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-29 202752]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2010-08-12 810144]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 IS360service;IS360service; C:\Program Files (x86)\IObit\IObit Security 360\IS360srv.exe [2010-06-11 312152]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-08-12 42360]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-08-24 651720]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2009-07-16 316664]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------
Ďakujem za kontrolu

Uživatelský avatar
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 lis 2006 13:37
Bydliště: ČR

Re: preventívna kontrola

#2 Příspěvek od Roli »

Zdravím, nejdříve odstraň log z CODE blbě se to čte, dík.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

MAPO
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 17 bře 2009 15:33

Re: preventívna kontrola

#3 Příspěvek od MAPO »

nedalo sa mi to upraviť, tak musím postnúť ešte raz:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Doma at 2010-11-21 13:44:27
Microsoft Windows 7 Ultimate
System drive C: has 23 GB (23%) free of 100 GB
Total RAM: 4094 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:44:43, on 21. 11. 2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe
C:\Program Files (x86)\IObit\IObit Security 360\is360tray.exe
C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
C:\Program Files\trend micro\Doma.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.justhit.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\SnagIt 9\SnagItBHO.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IObit Security 360] "C:\Program Files (x86)\IObit\IObit Security 360\IS360tray.exe" /autostart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [AtiTrayTools] "C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Pridať cieľ odkazu do existujúceho súboru PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Pridať do existujúceho súboru PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - Unknown owner - (no file)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: IS360service - IObit - C:\Program Files (x86)\IObit\IObit Security 360\IS360srv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - Unknown owner - (no file)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8079 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\IObit\IObit Security 360\IS360srv.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe"
"C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\IObit\IObit Security 360\is360tray.exe" /autostart
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe"
"D:\Inštalácie\Security\RSIT\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader - C:\Program Files (x86)\TechSmith\SnagIt 9\DLLx64\SnagItBHO64.dll [2008-08-29 62280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader - C:\Program Files (x86)\TechSmith\SnagIt 9\SnagItBHO.dll [2008-08-29 66888]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~2\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-08-22 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - SnagIt - C:\Program Files (x86)\TechSmith\SnagIt 9\DLLx64\SnagItIEAddin64.dll [2008-08-29 198984]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-03-12 10134560]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-08-12 2916584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"AtiTrayTools"=C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe [2010-04-22 883200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR10]
C:\Program Files (x86)\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [2010-01-17 941320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\pdfFactory Pro Dispečer v3]
C:\Windows\system32\spool\DRIVERS\x64\3\fppdis3a.exe [2009-12-11 754688]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe [2009-09-20 270336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-07-06 98304]
""= []
"IObit Security 360"=C:\Program Files (x86)\IObit\IObit Security 360\IS360tray.exe [2010-06-11 1280344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-11-21 13:17:50 ----D---- C:\rsit
2010-11-21 13:17:50 ----D---- C:\Program Files\trend micro
2010-11-18 17:37:54 ----D---- C:\Program Files (x86)\DAEMON Tools Pro
2010-11-18 17:06:50 ----D---- C:\Users\Doma\AppData\Roaming\CTFmon
2010-11-11 15:24:11 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-11-11 15:24:11 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-11-11 15:24:11 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-11-11 15:24:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-11-11 15:24:11 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-11-11 15:24:11 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-11-11 15:24:11 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-11-11 15:24:11 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-11-11 15:24:10 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-11-11 15:24:10 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-11-11 15:24:09 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-11-11 15:24:09 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-11-11 15:24:09 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-11-11 15:24:09 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-11-11 15:24:08 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-11-11 15:24:08 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-11-11 15:24:08 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-11-11 15:24:08 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-11-11 15:24:08 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-11-11 15:24:08 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-11-11 15:24:07 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-11-11 15:24:07 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-11-11 15:24:07 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-11-11 15:24:07 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-11-06 16:48:35 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2010-11-06 16:47:50 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2010-11-06 16:47:50 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-11-06 16:47:50 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-11-06 16:47:50 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-11-06 16:47:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-11-06 16:47:49 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-11-06 16:47:48 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-11-06 16:47:48 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-11-06 16:47:47 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-11-06 16:47:47 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2010-11-06 16:47:47 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-11-06 16:47:47 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-11-06 16:47:46 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-11-06 16:47:46 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-11-06 16:47:46 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-11-06 16:47:46 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-11-06 16:47:46 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-11-06 16:47:46 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-11-06 16:47:45 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-11-06 16:47:45 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-11-06 16:47:44 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-11-06 16:47:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-11-06 16:47:44 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-11-06 16:47:44 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-11-06 16:47:43 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-11-06 16:47:43 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-11-06 16:47:43 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-11-06 16:47:43 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-11-06 16:47:42 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-11-06 16:47:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-11-06 16:47:42 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-11-06 16:47:42 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-11-06 16:47:41 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-11-06 16:47:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-11-06 16:47:41 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-11-06 16:47:41 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-11-06 16:47:41 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-11-06 16:47:41 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-11-06 16:47:40 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-11-06 16:47:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-11-06 16:47:40 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-11-06 16:47:40 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-11-06 16:47:39 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-11-06 16:47:39 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-11-06 16:47:39 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-11-06 16:47:39 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-11-06 16:47:39 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-11-06 16:47:39 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-11-06 16:47:38 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-11-06 16:47:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-11-06 16:47:38 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-11-06 16:47:38 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-11-06 16:47:37 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-11-06 16:47:37 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-11-06 16:47:36 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-11-06 16:47:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-11-06 16:47:36 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-11-06 16:47:36 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-11-06 16:47:36 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-11-06 16:47:36 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-11-06 16:47:36 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-11-06 16:47:36 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-11-06 16:47:35 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-11-06 16:47:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-11-06 16:47:35 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-11-06 16:47:35 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-11-06 16:47:34 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-11-06 16:47:34 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-11-06 16:47:34 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-11-06 16:47:34 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-11-06 16:47:33 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-11-06 16:47:33 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-11-06 16:47:33 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-11-06 16:47:33 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-11-06 16:47:32 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-11-06 16:47:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-11-06 16:47:32 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-11-06 16:47:32 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-11-06 16:47:31 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-11-06 16:47:31 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-11-06 16:47:31 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-11-06 16:47:31 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-11-06 16:47:30 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-11-06 16:47:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-11-06 16:47:30 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-11-06 16:47:30 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-11-06 16:47:29 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-11-06 16:47:29 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-11-06 16:47:28 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-11-06 16:47:28 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-11-06 16:47:27 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-11-06 16:47:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-11-06 16:47:27 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-11-06 16:47:27 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-11-06 16:47:26 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-11-06 16:47:26 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-11-06 16:47:25 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-11-06 16:47:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-11-06 16:47:25 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-11-06 16:47:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-11-06 16:47:25 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-11-06 16:47:25 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-11-06 16:47:25 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-11-06 16:47:25 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-11-06 16:47:24 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-11-06 16:47:24 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-11-06 16:47:23 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-11-06 16:47:23 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-11-06 16:47:23 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-11-06 16:47:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-11-06 16:47:23 ----A---- C:\Windows\system32\xinput1_3.dll
2010-11-06 16:47:23 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-11-06 16:47:23 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-11-06 16:47:23 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-11-06 16:47:21 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-11-06 16:47:21 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-11-06 16:47:21 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-11-06 16:47:21 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-11-06 16:47:21 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-11-06 16:47:21 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-11-06 16:47:20 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-11-06 16:47:20 ----A---- C:\Windows\system32\d3dx10.dll
2010-11-06 16:47:19 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-11-06 16:47:19 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-11-06 16:47:18 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-11-06 16:47:18 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-11-06 16:47:18 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-11-06 16:47:18 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-11-06 16:47:17 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-11-06 16:47:17 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-11-06 16:47:17 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-11-06 16:47:17 ----A---- C:\Windows\system32\xinput1_2.dll
2010-11-06 16:47:17 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-11-06 16:47:17 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-11-06 16:47:09 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-11-06 16:27:33 ----D---- C:\Program Files (x86)\Battlefield Bad Company 2
2010-11-03 14:21:56 ----D---- C:\Users\Doma\AppData\Roaming\TeamViewer
2010-11-03 14:21:08 ----A---- C:\Windows\system32\drivers\teamviewervpn.sys
2010-11-03 14:21:07 ----D---- C:\Program Files (x86)\TeamViewer
2010-11-01 15:21:13 ----A---- C:\Windows\SYSWOW64\BASSMOD.dll
2010-10-31 16:36:28 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2010-10-31 16:36:28 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2010-10-31 16:36:28 ----A---- C:\Windows\system32\xinput1_1.dll
2010-10-31 16:36:28 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-10-31 16:36:27 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2010-10-31 16:36:27 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-10-31 16:36:22 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-10-31 16:36:21 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2010-10-31 16:36:21 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2010-10-31 16:36:21 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-10-31 16:36:21 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-10-31 16:36:20 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2010-10-31 16:36:20 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2010-10-31 16:36:20 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-10-31 16:36:20 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-10-31 16:36:18 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2010-10-31 16:36:18 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-10-31 16:36:17 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2010-10-31 16:36:17 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-10-31 16:36:16 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2010-10-31 16:36:16 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-10-31 16:36:15 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2010-10-31 16:36:15 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-10-30 09:06:51 ----D---- C:\Program Files (x86)\Google
2010-10-29 08:47:45 ----SHD---- C:\Windows\ftpcache
2010-10-29 08:47:03 ----A---- C:\Windows\game.ini
2010-10-29 08:42:16 ----D---- C:\Program Files (x86)\Activision
2010-10-24 18:16:42 ----D---- C:\ProgramData\Codemasters
2010-10-24 11:19:46 ----A---- C:\Windows\SYSWOW64\rapture3d_oal.dll
2010-10-24 11:19:46 ----A---- C:\Windows\SYSWOW64\mkl_blueripple.dll
2010-10-24 11:19:45 ----D---- C:\Program Files (x86)\BRS
2010-10-24 11:17:21 ----D---- C:\Windows\SYSWOW64\xlive
2010-10-24 11:17:20 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2010-10-24 11:11:09 ----D---- C:\Program Files (x86)\Codemasters
2010-10-22 19:51:21 ----D---- C:\Program Files\DVDFab 8
2010-10-22 19:50:13 ----D---- C:\Program Files (x86)\DVDFab 8

======List of files/folders modified in the last 1 months======

2010-11-21 13:44:32 ----D---- C:\Windows\Temp
2010-11-21 13:44:09 ----D---- C:\Windows\System32
2010-11-21 13:44:08 ----D---- C:\Windows\inf
2010-11-21 13:44:08 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-21 13:40:29 ----D---- C:\Windows
2010-11-21 13:39:37 ----D---- C:\Windows\system32\drivers
2010-11-21 13:21:36 ----SHD---- C:\System Volume Information
2010-11-21 13:21:09 ----D---- C:\Windows\Prefetch
2010-11-21 13:17:50 ----RD---- C:\Program Files
2010-11-21 13:12:12 ----D---- C:\Users\Doma\AppData\Roaming\Skype
2010-11-21 13:11:34 ----D---- C:\Program Files (x86)\ABBYY FineReader 10
2010-11-21 12:05:47 ----D---- C:\Users\Doma\AppData\Roaming\skypePM
2010-11-19 14:08:36 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-11-19 12:33:27 ----D---- C:\Windows\system32\config
2010-11-18 18:14:50 ----D---- C:\Program Files (x86)\Steam
2010-11-18 18:09:54 ----SHD---- C:\Windows\Installer
2010-11-18 18:09:54 ----HD---- C:\Config.Msi
2010-11-18 18:08:56 ----RSD---- C:\Windows\assembly
2010-11-18 18:07:56 ----D---- C:\Windows\Logs
2010-11-18 17:37:57 ----D---- C:\Windows\system32\Tasks
2010-11-18 17:37:54 ----D---- C:\Program Files (x86)
2010-11-17 11:23:32 ----D---- C:\Windows\system32\drivers\etc
2010-11-17 10:46:25 ----A---- C:\Windows\SYSWOW64\everest_cpl.ini
2010-11-11 15:24:11 ----D---- C:\Windows\SysWOW64
2010-11-09 19:04:01 ----SD---- C:\Users\Doma\AppData\Roaming\Microsoft
2010-11-07 19:56:15 ----D---- C:\Program Files (x86)\CCleaner
2010-11-06 16:48:35 ----D---- C:\Windows\system32\LogFiles
2010-11-03 14:21:10 ----D---- C:\Windows\system32\DriverStore
2010-11-03 14:21:10 ----D---- C:\Windows\system32\catroot
2010-11-01 12:16:40 ----D---- C:\Windows\system32\catroot2
2010-10-31 16:36:55 ----D---- C:\Program Files (x86)\Electronic Arts
2010-10-29 08:47:30 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-10-29 08:38:30 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-10-24 18:16:42 ----HD---- C:\ProgramData
2010-10-24 11:19:43 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2010-10-24 11:19:43 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2010-10-24 11:19:43 ----A---- C:\Windows\system32\wrap_oal.dll
2010-10-24 11:19:43 ----A---- C:\Windows\system32\OpenAL32.dll
2010-10-24 11:06:29 ----SD---- C:\ProgramData\Microsoft
2010-10-22 19:50:27 ----D---- C:\Users\Doma\AppData\Roaming\Vso
2010-10-22 19:50:25 ----A---- C:\Users\Doma\AppData\Roaming\inst.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-04 16440]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-10-16 828912]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x64.sys [2009-03-27 19432]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 168544]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-07-29 171152]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-07-29 50624]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-30 6103552]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-07-07 265728]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-07-29 33632]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-03-12 2291616]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-08-22 82816]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-08-20 239616]
R3 teamviewervpn;TeamViewer VPN Adapter; C:\Windows\system32\DRIVERS\teamviewervpn.sys [2010-10-15 35112]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-04-03 34872]
R4 DRIVER_B;DRIVER_B; \??\C:\Windows\system32\Drivers\DRIVER_BIN64 []
S1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys []
S2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/08/21 10:20:13]; C:\Windows\system32\drivers\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}.sys []
S3 a0ypogit;a0ypogit; C:\Windows\system32\drivers\a0ypogit.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-30 6103552]
S3 cpuz130;cpuz130; C:\Windows\system32\drivers\cpuz130.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-14 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-29 202752]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2010-08-12 810144]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 IS360service;IS360service; C:\Program Files (x86)\IObit\IObit Security 360\IS360srv.exe [2010-06-11 312152]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-08-12 42360]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-08-24 651720]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2009-07-16 316664]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Uživatelský avatar
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 lis 2006 13:37
Bydliště: ČR

Re: preventívna kontrola

#4 Příspěvek od Roli »

Tohle fixni v HJT :

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.justhit.net
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll


HJT najdeš zde :

C:\Program Files\trend micro\Doma.exe

Fix znamená že spustíš HJT Obrázek jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Odinstaluj SpybotSD který je už za zenitem a IObit Security 360, místo nich si nainstaluj třeba SUPERAntiSpyware.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

Čištění registru je třeba několikrát zopakovat !


Jinak nic špatného nevidím.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

Odpovědět