VIRY.CZ

Dobry den,

chtel bych se zeptat uz drive jsem mel problem v tom, ze kdyz jsem vlozil treba flashku do USB tak nacitani bylo silene dlouha a pc byl jako zaseknuty a to trvalo treba i 15min.

Tak jsem vse smazal, nainstaloval jsem Win7 x64 a vse jelo jak ma. Neco jsem dal do usb a nacteni trvalo ani ne 1 minutu. Ale nyni mam problem znovu, tak jestli mi to nedela nejaky vor a nebo nejaky zmetek v PC. Treba se s tim uz nekdo setkal,

diky za pomoc.
L-D

Hezké poledne

Vložte log ze Rsitu, viz můj podpis

Dekuji za rychlou odpoved
log je v priloze, byl moc dlouhy na to, abych ho mohl vlozit jako prispevek.

Dekuji za pomoc

Rozdělte ho do více příspěvků, je to pro mě přehlednější

info.txt logfile of random's system information tool 1.08 2010-12-20 11:40:12

======Uninstall list======

-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_activeX.exe
-->MsiExec /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}
1-More WebCam-->"C:\Program Files (x86)\1-More WebCam\uninstall.exe"
64 Bit HP CIO Components Installer-->MsiExec.exe /I{C788B026-20BD-4E96-B698-533F1D6C5013}
Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak-->msiexec /I {AC76BA86-1029-4770-7760-000000000004}
Adobe Flash Player 10 ActiveX-->MsiExec.exe /X{B7B3E9B3-FB14-4927-894B-E9124509AF5A}
Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_Plugin.exe -maintain plugin
Adobe Flash Player 9 ActiveX-->MsiExec.exe /X{8E9DB7EF-5DD3-499E-BA2A-A1F3153A4DF8}
aTube Catcher-->C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\uninstall.exe
avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup
Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)-->C:\PROGRA~1\DIFX\F4092DA208C2C970\dpinst.exe /u C:\Windows\system32\DRVSTORE\pccsmcfdx6_8A3BAB842294F8D9255C3CF2A3B1CECAEEB8EA7E\pccsmcfdx64.inf
Call of Duty: Black Ops - Multiplayer-->"C:\Program Files (x86)\Steam\steam.exe" steam://uninstall/42710
Call of Duty: Black Ops-->"C:\Program Files (x86)\Steam\steam.exe" steam://uninstall/42700
Camtasia Studio 6-->MsiExec.exe /I{49253DE2-FC99-4BE3-99A4-DAB01A8E6088}
CoffeeCup Web Form Builder-->C:\PROGRA~2\COFFEE~1\COFFEE~1\UNWISE.EXE C:\PROGRA~2\COFFEE~1\COFFEE~1\INSTALL.LOG
Components Setup-->C:\Program Files (x86)\InstallShield Installation Information\{31187E06-E131-4709-9285-7D105D77AA89}\setup.exe -runfromtemp -l0x0009
Conduit Engine-->C:\PROGRA~2\CONDUI~1\ConduitEngineUninstall.exe
DAEMON Tools Toolbar-->C:\Program Files (x86)\DAEMON Tools Toolbar\uninst.exe
DivX-Setup-->C:\ProgramData\DivX\Setup\DivXSetup.exe /uninstall /bundleGroupId divx.com
DVD Flick-->"C:\Program Files (x86)\DVD Flick\unins000.exe"
Feed Viewer for Windows SideShow-->MsiExec.exe /X{E4DA04B6-3EC4-4DFD-A14E-44959EF36D5B}
FM Screen Capture Codec (Remove Only)-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\Windows\INF\fmcodec.inf
FormatFactory 2.60-->C:\Program Files (x86)\FreeTime\FormatFactory\uninst.exe
HP Customer Participation Program 14.0-->C:\Program Files (x86)\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat -forcereboot
HP Imaging Device Functions 14.0-->C:\Program Files (x86)\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart B010 All-In-One Driver Software 14.0 Rel. 7-->C:\Program Files (x86)\HP\Digital Imaging\{81830FEF-866C-4DC0-9435-B6287B1EDD8A}\setup\hpzscr40.exe -datfile hposcr51.dat -onestop -forcereboot
HP Smart Web Printing 4.60-->C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat
HP Solution Center 14.0-->C:\Program Files (x86)\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot
HP Update-->MsiExec.exe /X{74DC0593-6BC6-4001-AD5F-D810AFB68D86}
ICQ Toolbar-->C:\Program Files (x86)\ICQ6Toolbar\ICQUnToolbar.exe
ICQ7.2-->"C:\Program Files (x86)\InstallShield Installation Information\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}\ICQ7.exe" -runfromtemp -l0x0009 -removeonly
IM Magician-->C:\Program Files (x86)\InstallShield Installation Information\{2969CB97-DF91-4752-BE47-8A73AE810E6C}\setup.exe -runfromtemp -l0x0009 -removeonly
Java(TM) 6 Update 22-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216022FF}
linguatec Voice Reader-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{93293322-B694-4270-B7FE-DDE1A681ACCA}\setup.exe" -l0x7 -removeonly
ManyCam 2.6.25 (remove only)-->"C:\Program Files (x86)\ManyCam\uninstall.exe"
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /x64 /lcid 1029 /parameterfolder ClientLP
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->MsiExec.exe /X{790E02A1-145A-3843-8C13-A4F41C9B48B7}
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
Microsoft Default Manager-->MsiExec.exe /X{61BEA823-ECAF-49F1-8378-A59B3B8AD247}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Czech) 2007-->MsiExec.exe /X{90120000-002A-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{A147FD6E-32F2-4009-BDC9-8B4E2B1B21EB}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{071c9b48-7c32-4621-a0ac-3f809523288f}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Mozilla Firefox (3.6.12)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
MSN Toolbar Platform-->MsiExec.exe /I{58E65E96-6649-4CBE-9382-35326D694E6F}
MSN Toolbar-->C:\Program Files (x86)\MSN Toolbar Installer\InstallManager.exe /UNINSTALL
MSVC80_x64_v2-->MsiExec.exe /I{4D668D4F-FAA2-4726-834C-31F4614F312E}
MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
MSVC90_x64-->MsiExec.exe /I{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}
MSVC90_x86-->MsiExec.exe /I{AF111648-99A1-453E-81DD-80DBBF6DAD0D}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
neoDVDvideo 8 LP edition-->C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{7874B2D1-E558-4533-B6C2-E1087F344D00}
Nokia Connectivity Cable Driver-->MsiExec.exe /I{F1FDAA01-988C-423F-AC12-0D8F333943FD}
Nokia Ovi Player-->MsiExec.exe /I{50D25574-2C48-4AEC-8FFC-32AEAD2EAEFF}
Nokia Ovi Suite Software Updater-->MsiExec.exe /X{EE5B5B24-EEFC-4C8B-BF8B-256D705BAD89}
Nokia Ovi Suite-->C:\ProgramData\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer.exe
Nokia Ovi Suite-->MsiExec.exe /X{B8B4446F-87E1-4423-A47A-16832C24A199}
Nokia_Multimedia_Common_Components_2_5-->MsiExec.exe /I{70B31335-50EE-4834-8431-27412CDE62BD}
NVIDIA Ovladač 3D Vision 260.99-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.0\NVI2.DLL",UninstallPackage Display.3DVision
NVIDIA Ovladače grafiky 260.99-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.0\NVI2.DLL",UninstallPackage Display.Driver
NVIDIA PhysX-->MsiExec.exe /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}
NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask
NVIDIA Systémový software PhysX 9.10.0514-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.0\NVI2.DLL",UninstallPackage Display.PhysX
Opera 10.63-->MsiExec.exe /X{87CC8013-56D1-43E1-A0A5-AD406B4EBA95}
Ovi Desktop Sync Engine-->MsiExec.exe /X{8112C6B3-91E1-4560-8AB9-876DADFA37C5}
OviMPlatform-->MsiExec.exe /I{749A1EDD-16C2-4C63-B013-D38F0F953973}
PC Connectivity Solution-->MsiExec.exe /I{45DF6D99-666D-41FA-8D62-0E183B6240F3}
Photodex Presenter-->C:\Program Files (x86)\Photodex Presenter\uninst.exe
ProShow Producer-->C:\Program Files (x86)\Photodex\ProShowProducer\uninst.exe
PVSonyDll-->MsiExec.exe /I{3D3E663D-4E7E-4577-A560-7ECDDD45548A}
Raptr-->"C:\Program Files (x86)\Raptr\uninstall.exe"
RAR Password Cracker 4.12-->C:\Program Files (x86)\RAR Password Cracker\uninstall.exe
RssBandit-->MsiExec.exe /I{D5D7A88A-5395-4D43-AD18-713B804A1EF6}
SceneGrabber.NET-->MsiExec.exe /I{C8793276-2F36-454A-A524-9957B979FDE1}
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FD8D7C9A-E56A-3E7B-BA6D-FE68F13296E3} /parameterfolder Client
Shop for HP Supplies-->C:\Program Files (x86)\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
Skype Toolbars-->MsiExec.exe /I{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Skype™ 5.0-->MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
The KMPlayer (remove only)-->"C:\Program Files (x86)\The KMPlayer\uninstall.exe"
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {A45DD0BE-3CD9-3F1E-B233-B90C6983AE77} /parameterfolder Client
VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
Vuze Remote Toolbar-->C:\PROGRA~2\VUZE_R~1\UNWISE.EXE /U C:\PROGRA~2\VUZE_R~1\INSTALL.LOG
Vuze-->C:\Program Files (x86)\Vuze\uninstall.exe
Windows Live ID Sign-in Assistant-->MsiExec.exe /X{9B48B0AC-C813-4174-9042-476A887592C7}
WinMerge 2.10.4.0-->"C:\Program Files (x86)\WinMerge\unins000.exe"
WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Zrychleni Pocitace-->"C:\Program Files\Zrychleni Pocitace\unins000.exe"

======System event log======

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Cryptographic Services byl změněn na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090714051424.262212-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Windows Modules Installer byl změněn na: stopped
Record Number: 4
Source Name: Service Control Manager
Time Written: 20090714051424.168612-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Software Protection byl změněn na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20090714051424.059412-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Windows Event Log byl změněn na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20090714051424.012612-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Volume Shadow Copy byl změněn na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20090714051423.934612-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247E29-32
Event Code: 1001
Message: Chybný blok , typ 0
Název události: PnPRequestAdditionalSoftware
Reakce: Není k dispozici
ID souboru CAB: 0

Podpis problému:
P1: x64
P2: USB\VID_09DA&PID_0080&REV_020<
P3: 6.1.0.0
P4: 0405
P5: input.inf
P6: *
P7:
P8:
P9:
P10:

Připojené soubory:

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_d223c3ca8ac183f9fd78e5a63140288dc1340_cab_07be626a

Symbol analýzy:
Opětovné hledání řešení: 0
ID hlášení: 7bc568e2-02b4-11e0-81ce-001fd0982525
Stav hlášení: 4
Record Number: 5
Source Name: Windows Error Reporting
Time Written: 20101208101822.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20101208101648.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20101208101645.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20101208101641.834895-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247E29-32
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20101208101641.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: 37L4247E29-32
Event Code: 4735
Message: Byla změněna zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247E29-32$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Změněné atributy:
Název účtu SAM: -
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101208101624.487664-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4731
Message: Byla vytvořena zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247E29-32$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Nová skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Atributy:
Název účtu SAM: Backup Operators
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101208101624.487664-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.

Počet prvků: 0
ID zásady: 0x32017
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101208101624.191264-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0

Typ přihlášení: 0

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x4
Název procesu:

Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101208101622.568861-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4608
Message: Spouští se systém Windows.

Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101208101622.553261-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%CommonProgramFiles%\Microsoft Shared\Windows Live;C:\Program Files (x86)\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=170a

-----------------EOF-----------------

Ještě poprosím o ten druhý log s názvem log.txt

Logfile of random's system information tool 1.08 (written by random/random)
Run by Web-Tuning at 2010-12-20 15:53:42
Microsoft Windows 7 Ultimate
System drive C: has 37 GB (37%) free of 100 GB
Total RAM: 4094 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:53:45, on 20.12.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\IM Magician\vicamon.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\DivX\DivX Plus Web Player\DDMService.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe
C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Web-Tuning.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/xmas/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
O2 - BHO: MSN Toolbar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: MSN Toolbar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [NokiaMusic FastStart] "C:\Program Files (x86)\Nokia\Ovi Player\NokiaOviPlayer.exe" /command:faststart
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [MSN Toolbar] "C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [IMMON] "C:\Program Files (x86)\IM Magician\Vicamon.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [DivX Download Manager] "C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe" start
O4 - HKCU\..\Run: [Google Update] "C:\Users\Web-Tuning\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Raptr] C:\PROGRA~2\Raptr\raptrstub.exe --startup
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ManyCam] "C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GRA32A~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\Windows\SysWOW64\bgsvcgen.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files (x86)\Photodex\ProShowProducer\ScsiAccess.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15319 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\SysWOW64\bgsvcgen.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Photodex\ProShowProducer\ScsiAccess.exe"
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
WLIDSvcM.exe 2260
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /silent
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe" /watchfiles startup
"C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe"
"C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\IM Magician\vicamon.exe"
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Program Files (x86)\DivX\DivX Plus Web Player\DDMService.exe" start
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Photosmart B010 series#1291875035" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\PROGRA~2\Raptr\raptr.exe" --log_to_file --from_stub --startup
raptr_im.exe
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe"
"C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" "-launchedbycsxs"
"C:\Program Files (x86)\Steam\steam.exe" "steam://rungameid/42710"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3148.026E7900.966629143 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3148.02748600.948247273 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3148.02748480.989923977 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3148.047EFD80.1719001022 /prefetch:3
"C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Web-Tuning\AppData\Local\Google\Chrome\Application\8.0.552.224\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\Web-Tuning\AppData\Local\Google\Chrome\User Data\Default" --channel=3148.07F4EE4C.1950115982 /prefetch:4
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Web-Tuning\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1867650037-4279840285-2190968544-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1867650037-4279840285-2190968544-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-11-05 138624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27 1250696]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
Vuze Remote Toolbar - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
MSN Toolbar BHO - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll [2009-11-16 506720]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-12-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - MSN Toolbar - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll [2009-11-16 506720]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-10-27 1049912]
{ba14329e-9550-4989-b3f2-9732e92d17cc} - Vuze Remote Toolbar - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll [2010-12-09 3911776]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Web-Tuning\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-08 136176]
""= []
"Raptr"=C:\PROGRA~2\Raptr\raptrstub.exe [2010-12-16 53160]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"ManyCam"=C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe [2010-11-30 1735752]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"=C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"NokiaMusic FastStart"=C:\Program Files (x86)\Nokia\Ovi Player\NokiaOviPlayer.exe [2010-03-04 2192672]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2009-11-18 54576]
""= []
"MSN Toolbar"=C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe [2009-11-16 240992]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2009-07-17 288080]
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"IMMON"=C:\Program Files (x86)\IM Magician\Vicamon.exe [2009-05-07 143360]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2010-12-09 1226608]
"DivX Download Manager"=C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe [2010-12-08 63360]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-12-20 12:29:07 ----D---- C:\Temp
2010-12-20 11:40:01 ----D---- C:\rsit
2010-12-20 11:40:01 ----D---- C:\Program Files\trend micro
2010-12-20 00:20:10 ----D---- C:\Program Files (x86)\linguatec
2010-12-16 23:02:02 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Local
2010-12-16 23:01:50 ----D---- C:\Users\Web-Tuning\AppData\Roaming\DivX
2010-12-16 23:01:37 ----D---- C:\Program Files\DivX
2010-12-16 22:59:16 ----D---- C:\Program Files (x86)\DivX
2010-12-16 22:56:42 ----D---- C:\ProgramData\DivX
2010-12-15 21:19:13 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-12-15 21:18:59 ----D---- C:\ProgramData\NVIDIA
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvdecodemft.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2010-12-15 21:17:36 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\OpenCL.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvwgf2umx.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvoglv64.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvgenco642030.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvdispco642050.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvdecodemft.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvd3dumx.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvcuvid.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvcuvenc.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvcuda.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvcompiler.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\nvapi64.dll
2010-12-15 21:17:36 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2010-12-15 21:17:11 ----D---- C:\NVIDIA
2010-12-15 19:54:46 ----D---- C:\ProgramData\NVIDIA Corporation
2010-12-15 19:54:43 ----D---- C:\Program Files\NVIDIA Corporation
2010-12-15 18:33:31 ----D---- C:\Users\Web-Tuning\AppData\Roaming\ManyCam
2010-12-15 18:33:26 ----D---- C:\Program Files (x86)\ManyCam
2010-12-15 18:13:19 ----D---- C:\Program Files (x86)\Free Labs
2010-12-15 18:04:40 ----D---- C:\Program Files (x86)\1-More WebCam
2010-12-15 18:00:29 ----D---- C:\Program Files (x86)\Biromsoft
2010-12-15 17:47:21 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Vimisoft Studio
2010-12-15 17:47:10 ----A---- C:\Windows\SYSWOW64\vgf.dll
2010-12-15 17:47:09 ----A---- C:\Windows\SYSWOW64\newlistview2.dll
2010-12-15 17:46:49 ----D---- C:\Program Files (x86)\Vimicro Corporation
2010-12-15 17:46:30 ----D---- C:\Program Files (x86)\IM Magician
2010-12-15 17:45:29 ----D---- C:\Users\Web-Tuning\AppData\Roaming\InstallShield
2010-12-15 17:43:09 ----D---- C:\Program Files (x86)\RKComputer
2010-12-15 03:12:55 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-12-15 03:12:55 ----A---- C:\Windows\system32\tzres.dll
2010-12-15 03:12:48 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2010-12-15 03:12:48 ----A---- C:\Windows\system32\wmicmiplugin.dll
2010-12-15 03:12:48 ----A---- C:\Windows\system32\taskschd.dll
2010-12-15 03:12:48 ----A---- C:\Windows\system32\taskeng.exe
2010-12-15 03:12:48 ----A---- C:\Windows\system32\taskcomp.dll
2010-12-15 03:12:48 ----A---- C:\Windows\system32\schtasks.exe
2010-12-15 03:12:48 ----A---- C:\Windows\system32\schedsvc.dll
2010-12-15 03:12:47 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2010-12-15 03:12:47 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2010-12-15 03:12:47 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2010-12-15 03:12:46 ----A---- C:\Windows\system32\atmfd.dll
2010-12-15 03:12:45 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2010-12-15 03:12:45 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2010-12-15 03:12:45 ----A---- C:\Windows\system32\win32k.sys
2010-12-15 03:12:45 ----A---- C:\Windows\system32\atmlib.dll
2010-12-15 03:12:44 ----A---- C:\Windows\SYSWOW64\webio.dll
2010-12-15 03:12:44 ----A---- C:\Windows\system32\webio.dll
2010-12-15 03:12:42 ----A---- C:\Windows\system32\consent.exe
2010-12-15 03:12:40 ----A---- C:\Windows\system32\mshtml.dll
2010-12-15 03:12:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-12-15 03:12:39 ----A---- C:\Windows\system32\iertutil.dll
2010-12-15 03:12:38 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-12-15 03:12:38 ----A---- C:\Windows\system32\mstime.dll
2010-12-15 03:12:38 ----A---- C:\Windows\system32\ieframe.dll
2010-12-15 03:12:37 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-12-15 03:12:36 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-12-15 03:12:36 ----A---- C:\Windows\system32\wininet.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-12-15 03:12:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\urlmon.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\mshtmled.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\msfeedssync.exe
2010-12-15 03:12:35 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\msfeeds.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\licmgr10.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\jsproxy.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\ieui.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\iepeers.dll
2010-12-15 03:12:35 ----A---- C:\Windows\system32\iedkcs32.dll
2010-12-15 00:59:21 ----D---- C:\Program Files (x86)\Mediostream
2010-12-15 00:59:21 ----A---- C:\Windows\SYSWOW64\GenSvcInst.exe
2010-12-15 00:59:21 ----A---- C:\Windows\SYSWOW64\bgsvcgen.exe
2010-12-15 00:14:55 ----D---- C:\Users\Web-Tuning\AppData\Roaming\RssBandit
2010-12-15 00:14:54 ----D---- C:\Program Files (x86)\RssBandit
2010-12-15 00:11:31 ----D---- C:\Users\Web-Tuning\AppData\Roaming\DVD Flick
2010-12-15 00:11:20 ----D---- C:\Program Files (x86)\DVD Flick
2010-12-15 00:11:20 ----A---- C:\Windows\SYSWOW64\ssubtmr6.dll
2010-12-14 20:21:50 ----A---- C:\Windows\SYSWOW64\pncrt.dll
2010-12-14 20:21:35 ----D---- C:\Program Files (x86)\FreeTime
2010-12-14 17:35:12 ----D---- C:\Users\Web-Tuning\AppData\Roaming\VOS
2010-12-14 17:01:40 ----D---- C:\Program Files (x86)\RAR Password Cracker
2010-12-13 16:37:22 ----D---- C:\ProgramData\ABBYY
2010-12-13 16:35:05 ----D---- C:\Users\Web-Tuning\AppData\Roaming\ABBYY
2010-12-13 07:07:33 ----D---- C:\Program Files (x86)\WinMerge
2010-12-12 15:40:56 ----D---- C:\Program Files (x86)\Microsoft Works
2010-12-12 15:40:30 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-12-12 15:40:01 ----D---- C:\Windows\PCHEALTH
2010-12-12 15:40:01 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-12-12 15:38:06 ----D---- C:\Program Files\Microsoft Office
2010-12-12 15:38:00 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2010-12-12 15:37:17 ----D---- C:\ProgramData\Microsoft Help
2010-12-12 15:37:17 ----D---- C:\Program Files (x86)\Microsoft Office
2010-12-12 15:35:48 ----RHD---- C:\MSOCache
2010-12-12 15:28:18 ----D---- C:\Users\Web-Tuning\AppData\Roaming\HPAppData
2010-12-12 15:09:01 ----D---- C:\Users\Web-Tuning\AppData\Roaming\CoffeeCup Software
2010-12-12 15:08:51 ----D---- C:\Program Files (x86)\CoffeeCup Software
2010-12-12 15:06:15 ----D---- C:\Program Files (x86)\Windows SideShow
2010-12-12 14:37:16 ----D---- C:\Program Files (x86)\IPACS
2010-12-12 14:26:30 ----D---- C:\Program Files (x86)\DAEMON Tools Toolbar
2010-12-12 14:25:54 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-12-12 14:25:33 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2010-12-12 14:24:57 ----D---- C:\Users\Web-Tuning\AppData\Roaming\DAEMON Tools Lite
2010-12-12 14:24:53 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-12-12 13:23:27 ----D---- C:\ProgramData\Sun
2010-12-12 13:23:12 ----A---- C:\Windows\SYSWOW64\javaws.exe
2010-12-12 13:23:12 ----A---- C:\Windows\SYSWOW64\javaw.exe
2010-12-12 13:23:12 ----A---- C:\Windows\SYSWOW64\java.exe
2010-12-12 13:23:12 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2010-12-12 13:23:03 ----D---- C:\Program Files (x86)\Java
2010-12-12 12:57:25 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Raptr
2010-12-12 12:57:25 ----D---- C:\Program Files (x86)\Raptr
2010-12-12 12:56:17 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Azureus
2010-12-12 12:54:43 ----D---- C:\Program Files (x86)\Vuze
2010-12-12 12:54:39 ----D---- C:\Program Files (x86)\Conduit
2010-12-12 12:54:37 ----D---- C:\Program Files (x86)\ConduitEngine
2010-12-12 12:54:36 ----D---- C:\Program Files (x86)\Vuze_Remote
2010-12-12 10:47:20 ----D---- C:\Program Files (x86)\DsNET Corp
2010-12-12 10:44:44 ----D---- C:\Program Files\Zrychleni Pocitace
2010-12-12 10:32:46 ----D---- C:\Windows\XSxS
2010-12-12 10:32:46 ----D---- C:\Program Files (x86)\Xenocode
2010-12-11 13:48:31 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Thinstall
2010-12-10 16:38:56 ----D---- C:\Program Files (x86)\ICQ6Toolbar
2010-12-10 16:38:55 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-12-10 16:38:55 ----D---- C:\ProgramData\ICQ
2010-12-10 16:38:47 ----D---- C:\Users\Web-Tuning\AppData\Roaming\ICQ
2010-12-10 16:38:44 ----D---- C:\Program Files (x86)\ICQ7.2
2010-12-10 09:16:08 ----D---- C:\Program Files (x86)\directx
2010-12-10 08:15:52 ----D---- C:\Program Files (x86)\MSXML 4.0
2010-12-10 08:09:19 ----D---- C:\Windows\SYSWOW64\Wat
2010-12-10 08:09:19 ----D---- C:\Windows\system32\Wat
2010-12-09 20:23:54 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2010-12-09 20:23:54 ----A---- C:\Windows\system32\msv1_0.dll
2010-12-09 20:18:00 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2010-12-09 20:18:00 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2010-12-09 20:18:00 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2010-12-09 20:18:00 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2010-12-09 20:18:00 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2010-12-09 20:18:00 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-12-09 20:18:00 ----A---- C:\Windows\system32\PresentationHost.exe
2010-12-09 20:18:00 ----A---- C:\Windows\system32\netfxperf.dll
2010-12-09 20:18:00 ----A---- C:\Windows\system32\mscoree.dll
2010-12-09 20:18:00 ----A---- C:\Windows\system32\dfshim.dll
2010-12-09 20:17:42 ----A---- C:\Windows\system32\browserchoice.exe
2010-12-09 20:13:12 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2010-12-09 20:13:12 ----A---- C:\Windows\system32\drivers\ks.sys
2010-12-09 16:38:53 ----D---- C:\Program Files (x86)\SiteGrinder 3
2010-12-09 16:21:35 ----D---- C:\Program Files (x86)\targit
2010-12-09 16:05:02 ----A---- C:\Windows\SYSWOW64\tsccvid.dll
2010-12-09 16:05:01 ----D---- C:\Windows\SYSWOW64\QuickTime
2010-12-09 16:04:57 ----D---- C:\ProgramData\TechSmith
2010-12-09 16:04:52 ----D---- C:\Program Files (x86)\TechSmith
2010-12-09 16:01:42 ----D---- C:\ProgramData\Bimesoft
2010-12-09 15:08:57 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Opera
2010-12-09 15:08:51 ----D---- C:\Program Files (x86)\Opera
2010-12-09 15:03:38 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-12-09 11:25:46 ----D---- C:\Windows\Minidump
2010-12-09 08:48:48 ----D---- C:\Program Files (x86)\The KMPlayer
2010-12-09 08:31:18 ----D---- C:\Program Files (x86)\Photodex
2010-12-09 08:29:33 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Photodex
2010-12-09 08:26:47 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Netscape
2010-12-09 08:26:47 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Mozilla
2010-12-09 08:26:47 ----D---- C:\Program Files (x86)\Photodex Presenter
2010-12-09 08:26:46 ----D---- C:\ProgramData\Photodex
2010-12-09 07:59:42 ----D---- C:\ProgramData\FLEXnet
2010-12-09 07:52:48 ----RA---- C:\Windows\system32\AdobePDFUI.dll
2010-12-09 07:50:44 ----D---- C:\ProgramData\Adobe
2010-12-09 07:50:44 ----D---- C:\Program Files (x86)\Adobe
2010-12-09 07:12:41 ----D---- C:\ProgramData\WEBREG
2010-12-09 07:10:40 ----D---- C:\Users\Web-Tuning\AppData\Roaming\HP
2010-12-09 07:09:15 ----D---- C:\Program Files (x86)\MSN Toolbar
2010-12-09 07:09:15 ----D---- C:\Program Files (x86)\Microsoft
2010-12-09 07:09:10 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-12-09 07:08:59 ----D---- C:\Program Files (x86)\MSN Toolbar Installer
2010-12-09 07:08:54 ----D---- C:\Users\Web-Tuning\AppData\Roaming\HpUpdate
2010-12-09 07:08:22 ----D---- C:\ProgramData\HP Product Assistant
2010-12-09 07:07:50 ----D---- C:\Windows\SYSWOW64\Macromed
2010-12-09 07:06:53 ----A---- C:\Windows\system32\hpf3l101.dll
2010-12-09 07:06:21 ----HD---- C:\Config.Msi
2010-12-09 07:06:15 ----D---- C:\Program Files (x86)\HP
2010-12-09 07:05:47 ----D---- C:\ProgramData\HP
2010-12-09 07:05:42 ----A---- C:\Windows\system32\hpzids40.dll
2010-12-09 07:05:42 ----A---- C:\Windows\system32\hposwia_p04h.dll
2010-12-09 07:05:41 ----A---- C:\Windows\system32\hpost_p04h.dll
2010-12-09 07:05:41 ----A---- C:\Windows\system32\hposc_p04a.dll
2010-12-09 06:09:44 ----A---- C:\Windows\system32\drivers\aswSP.sys
2010-12-09 06:09:44 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2010-12-09 06:09:42 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2010-12-09 06:09:41 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2010-12-09 06:09:37 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2010-12-09 06:09:11 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2010-12-09 06:09:10 ----D---- C:\ProgramData\Alwil Software
2010-12-09 06:09:10 ----D---- C:\Program Files\Alwil Software
2010-12-09 05:53:59 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Nokia Ovi Suite
2010-12-09 05:45:50 ----D---- C:\ProgramData\Nokia
2010-12-09 05:38:55 ----D---- C:\ProgramData\PC Suite
2010-12-09 05:38:47 ----D---- C:\Users\Web-Tuning\AppData\Roaming\PC Suite
2010-12-09 05:37:51 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2010-12-09 05:36:12 ----D---- C:\ProgramData\NokiaInstallerCache
2010-12-09 03:08:25 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2010-12-09 03:08:25 ----A---- C:\Windows\system32\asycfilt.dll
2010-12-09 03:08:23 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2010-12-09 03:08:23 ----A---- C:\Windows\system32\ntdll.dll
2010-12-09 03:08:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2010-12-09 03:08:22 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2010-12-09 03:08:22 ----A---- C:\Windows\system32\vbscript.dll
2010-12-09 03:08:22 ----A---- C:\Windows\system32\t2embed.dll
2010-12-09 03:08:21 ----A---- C:\Windows\system32\ole32.dll
2010-12-09 03:08:20 ----A---- C:\Windows\SYSWOW64\ole32.dll
2010-12-09 03:08:19 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2010-12-09 03:08:19 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-12-09 03:08:16 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2010-12-09 03:08:16 ----A---- C:\Windows\system32\CertEnroll.dll
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\secproc.dll
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2010-12-09 03:07:59 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2010-12-09 03:07:59 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-12-09 03:07:59 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-12-09 03:07:59 ----A---- C:\Windows\system32\secproc_isv.dll
2010-12-09 03:07:59 ----A---- C:\Windows\system32\secproc.dll
2010-12-09 03:07:59 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-12-09 03:07:59 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-12-09 03:07:59 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-12-09 03:07:59 ----A---- C:\Windows\system32\RMActivate.exe
2010-12-09 03:07:48 ----A---- C:\Windows\system32\shell32.dll
2010-12-09 03:07:47 ----A---- C:\Windows\SYSWOW64\shell32.dll
2010-12-09 03:07:46 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2010-12-09 03:07:46 ----A---- C:\Windows\system32\inetcomm.dll
2010-12-09 03:07:45 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2010-12-09 03:07:45 ----A---- C:\Windows\system32\CPFilters.dll
2010-12-09 03:07:44 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2010-12-09 03:07:44 ----A---- C:\Windows\system32\psisdecd.dll
2010-12-09 03:07:44 ----A---- C:\Windows\system32\msdri.dll
2010-12-09 03:07:33 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-12-09 03:07:30 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2010-12-09 03:07:30 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2010-12-09 03:07:30 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-12-09 03:07:27 ----A---- C:\Windows\SYSWOW64\schannel.dll
2010-12-09 03:07:27 ----A---- C:\Windows\system32\schannel.dll
2010-12-09 03:07:23 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2010-12-09 03:07:23 ----A---- C:\Windows\system32\comctl32.dll
2010-12-09 03:07:21 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2010-12-09 03:07:21 ----A---- C:\Windows\system32\oleaut32.dll
2010-12-09 03:07:20 ----A---- C:\Windows\SYSWOW64\explorer.exe
2010-12-09 03:07:20 ----A---- C:\Windows\system32\winlogon.exe
2010-12-09 03:07:20 ----A---- C:\Windows\explorer.exe
2010-12-09 03:07:15 ----A---- C:\Windows\SYSWOW64\wow32.dll
2010-12-09 03:07:15 ----A---- C:\Windows\SYSWOW64\user.exe
2010-12-09 03:07:15 ----A---- C:\Windows\SYSWOW64\setup16.exe
2010-12-09 03:07:15 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2010-12-09 03:07:15 ----A---- C:\Windows\SYSWOW64\instnm.exe
2010-12-09 03:07:15 ----A---- C:\Windows\system32\wow64.dll
2010-12-09 03:07:13 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2010-12-09 03:07:13 ----A---- C:\Windows\system32\rtutils.dll
2010-12-09 03:06:55 ----A---- C:\Windows\system32\spoolsv.exe
2010-12-09 03:06:54 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2010-12-09 03:06:54 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-12-09 03:06:54 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-12-09 03:06:54 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-12-09 03:06:53 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-12-09 03:06:52 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-12-09 03:06:52 ----A---- C:\Windows\system32\cdd.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\quartz.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\wmpmde.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\tsbyuv.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\quartz.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\msyuv.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\msvidc32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\msrle32.dll
2010-12-09 03:06:43 ----A---- C:\Windows\system32\iyuv_32.dll
2010-12-09 03:06:31 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2010-12-09 03:06:31 ----A---- C:\Windows\system32\msxml3.dll
2010-12-09 03:06:31 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-12-09 03:06:29 ----A---- C:\Windows\SYSWOW64\jscript.dll
2010-12-09 03:06:29 ----A---- C:\Windows\system32\jscript.dll
2010-12-09 03:06:27 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2010-12-09 03:06:27 ----A---- C:\Windows\SYSWOW64\secur32.dll
2010-12-09 03:06:27 ----A---- C:\Windows\system32\lsasrv.dll
2010-12-09 03:06:27 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-12-09 03:06:15 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2010-12-09 03:06:15 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2010-12-09 03:06:13 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2010-12-09 03:06:13 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2010-12-09 03:06:13 ----A---- C:\Windows\system32\msasn1.dll
2010-12-09 03:06:13 ----A---- C:\Windows\system32\fontsub.dll
2010-12-09 03:06:02 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2010-12-09 03:06:02 ----A---- C:\Windows\SYSWOW64\wmp.dll
2010-12-09 03:06:02 ----A---- C:\Windows\system32\wmp.dll
2010-12-09 03:06:01 ----A---- C:\Windows\system32\wmploc.DLL
2010-12-09 03:05:58 ----A---- C:\Windows\system32\drivers\srv.sys
2010-12-09 03:05:57 ----A---- C:\Windows\SYSWOW64\sscore.dll
2010-12-09 03:05:57 ----A---- C:\Windows\system32\srvsvc.dll
2010-12-09 03:05:57 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-12-09 03:05:57 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-12-08 14:39:00 ----D---- C:\Users\Web-Tuning\AppData\Roaming\GHISLER
2010-12-08 14:39:00 ----D---- C:\totalcmd
2010-12-08 14:39:00 ----A---- C:\Windows\UC.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\RAR.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\PKZIP.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\PKUNZIP.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\NOCLOSE.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\LHA.PIF
2010-12-08 14:39:00 ----A---- C:\Windows\ARJ.PIF
2010-12-08 14:31:00 ----D---- C:\Users\Web-Tuning\AppData\Roaming\WinRAR
2010-12-08 14:30:54 ----D---- C:\Program Files\WinRAR
2010-12-08 12:46:11 ----D---- C:\Users\Web-Tuning\AppData\Roaming\skypePM
2010-12-08 12:45:14 ----RD---- C:\Program Files (x86)\Skype
2010-12-08 12:45:14 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Skype
2010-12-08 12:45:13 ----D---- C:\ProgramData\Skype
2010-12-08 12:42:31 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-12-08 12:42:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-12-08 12:42:31 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-12-08 12:42:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-12-08 12:42:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-12-08 12:42:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-12-08 12:42:31 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-12-08 12:42:31 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-12-08 12:42:30 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-12-08 12:42:29 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-12-08 12:42:29 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-12-08 12:42:28 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-12-08 12:42:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-12-08 12:42:27 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-12-08 12:42:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-12-08 12:42:26 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-12-08 12:42:25 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\xinput1_3.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-12-08 12:42:24 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-12-08 12:42:23 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-12-08 12:42:23 ----A---- C:\Windows\system32\d3dx10.dll
2010-12-08 12:42:22 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-12-08 12:42:22 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2010-12-08 12:42:22 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-12-08 12:42:22 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2010-12-08 12:42:22 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2010-12-08 12:42:22 ----A---- C:\Windows\system32\xinput1_2.dll
2010-12-08 12:42:22 ----A---- C:\Windows\system32\xinput1_1.dll
2010-12-08 12:42:22 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-12-08 12:42:22 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-12-08 12:42:22 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-12-08 12:42:21 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2010-12-08 12:42:21 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2010-12-08 12:42:21 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-12-08 12:42:21 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2010-12-08 12:42:21 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-12-08 12:42:21 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-12-08 12:42:21 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-12-08 12:42:21 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-12-08 12:42:20 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2010-12-08 12:42:20 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2010-12-08 12:42:20 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2010-12-08 12:42:20 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2010-12-08 12:42:20 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2010-12-08 12:42:20 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-12-08 12:42:20 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-12-08 12:42:20 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-12-08 12:42:20 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-12-08 12:42:20 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-12-08 12:38:27 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Nokia
2010-12-08 12:36:15 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2010-12-08 12:36:07 ----D---- C:\ProgramData\NokiaMusic
2010-12-08 12:34:56 ----D---- C:\Program Files\DIFX
2010-12-08 12:34:55 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2010-12-08 12:34:54 ----DC---- C:\Windows\system32\DRVSTORE
2010-12-08 12:34:28 ----D---- C:\Program Files (x86)\Nokia
2010-12-08 12:34:28 ----A---- C:\Windows\system32\nmwcdclsx64.dll
2010-12-08 11:51:27 ----N---- C:\Windows\system32\MpSigStub.exe
2010-12-08 11:47:44 ----D---- C:\Program Files (x86)\Steam
2010-12-08 11:47:03 ----SHD---- C:\Windows\Installer
2010-12-08 11:37:26 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Macromedia
2010-12-08 11:37:26 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Adobe
2010-12-08 11:28:32 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2010-12-08 11:28:32 ----A---- C:\Windows\system32\wintrust.dll
2010-12-08 11:28:31 ----A---- C:\Windows\SYSWOW64\cabview.dll
2010-12-08 11:28:31 ----A---- C:\Windows\system32\cabview.dll
2010-12-08 11:24:37 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Identities
2010-12-08 11:24:21 ----SD---- C:\Users\Web-Tuning\AppData\Roaming\Microsoft
2010-12-08 11:24:21 ----D---- C:\Users\Web-Tuning\AppData\Roaming\Media Center Programs
2010-12-08 11:22:58 ----SHD---- C:\Recovery
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Šablony
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Plocha
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Oblíbené položky
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Nabídka Start
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Dokumenty
2010-12-08 11:22:58 ----SHD---- C:\ProgramData\Data aplikací
2010-12-08 11:18:48 ----D---- C:\Windows\SoftwareDistribution
2010-12-08 11:16:20 ----D---- C:\Windows\Prefetch
2010-12-08 11:16:16 ----ASH---- C:\pagefile.sys
2010-12-08 11:16:07 ----SHD---- C:\System Volume Information
2010-12-08 11:16:07 ----ASH---- C:\hiberfil.sys
2010-12-08 11:15:09 ----D---- C:\Windows\Panther
2010-12-08 11:14:58 ----RASH---- C:\BOOTSECT.BAK
2010-12-08 11:14:56 ----SHD---- C:\Boot

======List of files/folders modified in the last 1 months======

2010-12-20 15:53:45 ----D---- C:\Windows\Temp
2010-12-20 11:40:01 ----RD---- C:\Program Files
2010-12-20 10:57:06 ----D---- C:\Windows\System32
2010-12-20 10:57:06 ----D---- C:\Windows\inf
2010-12-20 10:57:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-12-20 10:35:34 ----D---- C:\Windows\system32\config
2010-12-20 10:25:31 ----D---- C:\Windows\system32\drivers
2010-12-20 00:20:10 ----RD---- C:\Program Files (x86)
2010-12-19 23:57:48 ----D---- C:\Windows\SysWOW64
2010-12-18 12:40:56 ----D---- C:\Windows\Microsoft.NET
2010-12-18 12:40:17 ----RSD---- C:\Windows\assembly
2010-12-17 03:03:36 ----D---- C:\Windows\SYSWOW64\cs-CZ
2010-12-17 03:03:36 ----D---- C:\Windows\system32\cs-CZ
2010-12-17 03:01:16 ----D---- C:\Windows\SYSWOW64\en-US
2010-12-17 03:01:16 ----D---- C:\Windows\system32\en-US
2010-12-16 23:01:41 ----D---- C:\Program Files (x86)\Common Files
2010-12-16 22:56:42 ----HD---- C:\ProgramData
2010-12-16 03:59:39 ----D---- C:\Windows\rescache
2010-12-16 03:19:28 ----D---- C:\Windows\winsxs
2010-12-16 03:17:35 ----D---- C:\Windows\SYSWOW64\migration
2010-12-16 03:17:35 ----D---- C:\Windows\system32\migration
2010-12-16 03:17:35 ----D---- C:\Program Files\Windows Mail
2010-12-16 03:17:35 ----D---- C:\Program Files\Internet Explorer
2010-12-16 03:17:35 ----D---- C:\Program Files (x86)\Windows Mail
2010-12-16 03:17:35 ----D---- C:\Program Files (x86)\Internet Explorer
2010-12-16 03:01:36 ----D---- C:\Windows\system32\catroot
2010-12-15 21:23:11 ----D---- C:\Windows
2010-12-15 21:17:48 ----D---- C:\Windows\system32\DriverStore
2010-12-15 19:55:05 ----D---- C:\Windows\Help
2010-12-15 19:54:42 ----D---- C:\Windows\system32\catroot2
2010-12-13 07:22:57 ----D---- C:\Windows\LiveKernelReports
2010-12-12 16:46:43 ----D---- C:\Windows\system32\wdi
2010-12-12 15:40:47 ----D---- C:\Program Files (x86)\MSBuild
2010-12-12 15:40:26 ----D---- C:\Windows\ShellNew
2010-12-12 15:40:11 ----RSD---- C:\Windows\Fonts
2010-12-12 15:40:01 ----SD---- C:\ProgramData\Microsoft
2010-12-12 15:39:12 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-12-12 15:37:41 ----A---- C:\Windows\win.ini
2010-12-12 14:52:19 ----D---- C:\Windows\system32\Tasks
2010-12-12 10:32:58 ----RD---- C:\Users
2010-12-12 06:32:48 ----D---- C:\Windows\system32\LogFiles
2010-12-10 08:09:25 ----D---- C:\Windows\ehome
2010-12-10 08:09:22 ----D---- C:\Windows\AppPatch
2010-12-10 08:09:12 ----D---- C:\Program Files (x86)\Windows Media Player
2010-12-10 08:09:11 ----D---- C:\Program Files\Windows Media Player
2010-12-09 16:25:55 ----D---- C:\Windows\Logs
2010-12-09 07:56:37 ----D---- C:\Windows\system32\drivers\etc
2010-12-09 07:09:49 ----D---- C:\Windows\twain_32
2010-12-09 05:52:23 ----D---- C:\Windows\system32\drivers\UMDF
2010-12-08 12:36:12 ----D---- C:\Windows\Globalization
2010-12-08 11:43:13 ----D---- C:\Windows\system32\CodeIntegrity
2010-12-08 11:36:13 ----D---- C:\Windows\Tasks
2010-12-08 11:28:32 ----D---- C:\Windows\system32\restore
2010-12-08 11:24:34 ----SHD---- C:\$Recycle.Bin
2010-12-08 11:22:58 ----D---- C:\Program Files\Windows NT
2010-12-08 11:21:45 ----D---- C:\Windows\debug
2010-12-08 11:18:35 ----D---- C:\Windows\system32\sysprep
2010-12-08 11:16:41 ----D---- C:\Windows\CSC
2010-12-08 11:14:44 ----D---- C:\Windows\Setup

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-12 834544]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-09-07 28752]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-09-07 121936]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-09-07 51280]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-09-07 20048]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-09-07 61008]
R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-14 19968]
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2009-06-10 51712]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 amah2acc;amah2acc; C:\Windows\system32\drivers\amah2acc.sys []
S3 nmwcdcx64;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-02-26 25088]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2010-02-26 173056]
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-02-26 19456]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-02-26 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys [2010-02-26 9216]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 bgsvcgen;B's Recorder GOLD Library General Service; C:\Windows\SysWOW64\bgsvcgen.exe [2006-12-28 122512]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 ICQ Service;ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-10-27 247096]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-10-16 989800]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ScsiAccess;ScsiAccess; C:\Program Files (x86)\Photodex\ProShowProducer\ScsiAccess.exe [2010-12-09 181312]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-11-05 242048]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-12-08 403240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-12-09 651720]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-09 1255736]

-----------------EOF-----------------

Vložte flešku do pc.

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix