Stránka 1 z 1

Preventivní kontrola

Napsal: 08 led 2011 13:57
od kaspi
Zdravím, na noťasu mi vyskakovala infiltrace, ale už by měla být vyléčena. Chtěl bych zkontrolovat zda je vše v pořádku. Dík předem:)


Logfile of random's system information tool 1.08 (written by random/random)
Run by Vision at 2011-01-08 13:54:49
Microsoft Windows 7 Home Premium
System drive C: has 499 GB (84%) free of 597 GB
Total RAM: 5886 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:54:55, on 8.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\QIP 2010\qip.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
C:\Program Files (x86)\Eset\nod32kui.exe
C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Vision.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t57i1l721
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t57i1l721
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso" UpdateWithCreateOnce "Software\CyberLink\MediaShow Espresso\5.6"
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files (x86)\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [UpdateReminder] C:\Program Files (x86)\Eset\UpdateReminder.exe
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Vision\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Infium] "C:\QIP 2010\qip.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Unibet - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files (x86)\Eset\nod32krn.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: Acer ODD Power Service (ODDPwrSvc) - Acer Incorporated - C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14524 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 34202320
\??\C:\Windows\system32\conhost.exe
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Eset\nod32krn.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2648
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\QIP 2010\qip.exe" /autorun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
C:\Windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
"C:\Program Files (x86)\Eset\nod32kui.exe"
"C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play -Embedding
"C:\Windows\system32\wbengine.exe"
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\System32\vds.exe
"C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_http/ --channel=2480.00781900.301596596 /prefetch:3
"C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Vision\AppData\Local\Google\Chrome\Application\8.0.552.224\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\Vision\AppData\Local\Google\Chrome\User Data\Default" --channel=2480.083D9C4C.104900825 /prefetch:4
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\Vision\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Acer Registration - Reminder Recall task.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3784711517-1891709366-2686084796-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3784711517-1891709366-2686084796-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-12-10 399536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg64.dll [2010-11-29 317496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-23 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-12-10 297648]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2010-11-29 843832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Nero Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2010-10-11 1244040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-12-10 399536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Nero Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2010-10-11 1244040]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-12-10 297648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2010-02-05 324608]
"ODDPwr"=C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [2010-04-22 223264]
"mwlDaemon"=C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-04-17 349552]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-03-11 2107176]
"Acer ePower Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2010-03-10 496160]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-05-20 39408]
"Google Update"=C:\Users\Vision\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-26 136176]
"Infium"=C:\QIP 2010\qip.exe [2010-11-19 5842384]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-03-03 1300560]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-04-17 337264]
"EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]
"EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]
"NortonOnlineBackupReminder"=C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [2009-07-25 588648]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-03-09 260608]
"MDS_Menu"=C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"ArcadeMovieService"=C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [2010-04-24 124136]
"nod32kui"=C:\Program Files (x86)\Eset\nod32kui.exe [2010-11-22 949376]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"NBAgent"=C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-09-03 1406248]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"UpdateReminder"=C:\Program Files (x86)\Eset\UpdateReminder.exe [2010-12-01 434176]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-11-25 98304]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-01-08 13:54:49 ----D---- C:\rsit
2011-01-08 13:54:49 ----D---- C:\Program Files\trend micro
2011-01-06 20:22:57 ----D---- C:\Users\Vision\AppData\Roaming\Microgaming
2011-01-06 20:22:19 ----D---- C:\MicroGaming
2010-12-26 21:03:56 ----D---- C:\Program Files\Axantum
2010-12-26 17:52:33 ----D---- C:\Program Files\3D Driving-School
2010-12-24 18:22:27 ----D---- C:\ProgramData\Test Drive Unlimited
2010-12-23 16:43:43 ----D---- C:\Games
2010-12-23 15:37:34 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2010-12-23 15:37:15 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2010-12-23 15:37:14 ----D---- C:\Program Files (x86)\EA Sports
2010-12-23 15:37:14 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2010-12-23 13:51:41 ----D---- C:\ProgramData\ATI
2010-12-23 13:48:34 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-12-23 13:48:27 ----D---- C:\Program Files (x86)\ATI Stream
2010-12-23 13:44:03 ----D---- C:\ATI
2010-12-23 13:36:58 ----D---- C:\AMD
2010-12-23 13:29:57 ----D---- C:\Program Files (x86)\uTorrent
2010-12-23 13:29:26 ----D---- C:\Users\Vision\AppData\Roaming\uTorrent
2010-12-23 13:06:13 ----D---- C:\Users\Vision\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2010-12-23 13:04:32 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2010-12-23 13:04:02 ----D---- C:\Program Files\Adobe
2010-12-23 13:01:01 ----D---- C:\Program Files\Common Files\Adobe
2010-12-23 12:02:36 ----D---- C:\Program Files (x86)\Adobe Media Player
2010-12-17 15:07:41 ----HD---- C:\Windows\msdownld.tmp
2010-12-17 15:07:38 ----D---- C:\Windows\SYSWOW64\directx
2010-12-15 16:45:07 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-12-15 16:45:07 ----A---- C:\Windows\system32\tzres.dll
2010-12-15 16:44:57 ----A---- C:\Windows\system32\schedsvc.dll
2010-12-15 16:44:56 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2010-12-15 16:44:56 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2010-12-15 16:44:56 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2010-12-15 16:44:56 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2010-12-15 16:44:56 ----A---- C:\Windows\system32\wmicmiplugin.dll
2010-12-15 16:44:56 ----A---- C:\Windows\system32\taskschd.dll
2010-12-15 16:44:56 ----A---- C:\Windows\system32\taskeng.exe
2010-12-15 16:44:56 ----A---- C:\Windows\system32\taskcomp.dll
2010-12-15 16:44:56 ----A---- C:\Windows\system32\schtasks.exe
2010-12-15 16:44:54 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2010-12-15 16:44:54 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2010-12-15 16:44:54 ----A---- C:\Windows\system32\atmlib.dll
2010-12-15 16:44:54 ----A---- C:\Windows\system32\atmfd.dll
2010-12-15 16:44:53 ----A---- C:\Windows\system32\win32k.sys
2010-12-15 16:44:52 ----A---- C:\Windows\SYSWOW64\webio.dll
2010-12-15 16:44:52 ----A---- C:\Windows\system32\webio.dll
2010-12-15 16:44:50 ----A---- C:\Windows\system32\consent.exe
2010-12-15 16:44:46 ----A---- C:\Windows\system32\mshtml.dll
2010-12-15 16:44:45 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-12-15 16:44:45 ----A---- C:\Windows\system32\mstime.dll
2010-12-15 16:44:45 ----A---- C:\Windows\system32\iertutil.dll
2010-12-15 16:44:45 ----A---- C:\Windows\system32\ieframe.dll
2010-12-15 16:44:44 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-12-15 16:44:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-12-15 16:44:43 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-12-15 16:44:42 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-12-15 16:44:42 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-12-15 16:44:42 ----A---- C:\Windows\system32\wininet.dll
2010-12-15 16:44:42 ----A---- C:\Windows\system32\urlmon.dll
2010-12-15 16:44:42 ----A---- C:\Windows\system32\msfeeds.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\mshtmled.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\msfeedssync.exe
2010-12-15 16:44:41 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\licmgr10.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\ieui.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\iepeers.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\iedkcs32.dll
2010-12-15 16:44:40 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-12-15 16:44:40 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-12-15 16:44:40 ----A---- C:\Windows\system32\jsproxy.dll
2010-12-10 11:26:00 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-12-10 11:26:00 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-12-10 11:26:00 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-12-10 11:26:00 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-12-10 11:26:00 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-12-10 11:26:00 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-12-10 11:25:59 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-12-10 11:25:58 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-12-10 11:25:58 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-12-10 11:25:57 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-12-10 11:25:57 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-12-10 11:25:57 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-12-10 11:25:57 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-12-10 11:25:57 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-12-10 11:25:57 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-12-10 11:25:57 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-12-10 11:25:57 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-12-10 11:25:56 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-12-10 11:25:55 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-12-10 11:25:55 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-12-10 11:25:53 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-12-10 11:25:51 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-12-10 11:25:51 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-12-10 11:25:51 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-12-10 11:25:51 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-12-10 11:25:49 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-12-10 11:25:49 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-12-10 11:25:49 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-12-10 11:25:48 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-12-10 11:25:48 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-12-10 11:25:47 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-12-10 11:25:47 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-12-10 11:25:47 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-12-10 11:25:46 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-12-10 11:25:46 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-12-10 11:25:45 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-12-10 11:25:45 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-12-10 11:25:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-12-10 11:25:45 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-12-10 11:25:45 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-12-10 11:25:45 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-12-10 11:25:45 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-12-10 11:25:44 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-12-10 11:25:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-12-10 11:25:44 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-12-10 11:25:44 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-12-10 11:25:43 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-12-10 11:25:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-12-10 11:25:43 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-12-10 11:25:43 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-12-10 11:25:43 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-12-10 11:25:43 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-12-10 11:25:43 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-12-10 11:25:43 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-12-10 11:25:42 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-12-10 11:25:42 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-12-10 11:25:41 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-12-10 11:25:41 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-12-10 11:25:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-12-10 11:25:41 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-12-10 11:25:41 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-12-10 11:25:41 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-12-10 11:25:36 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-12-10 11:25:36 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-12-10 11:25:35 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-12-10 11:25:35 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-12-10 11:25:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-12-10 11:25:35 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-12-10 11:25:35 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-12-10 11:25:35 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-12-10 11:25:34 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-12-10 11:25:34 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-12-10 11:25:33 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-12-10 11:25:33 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-12-10 11:25:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-12-10 11:25:33 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-12-10 11:25:33 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-12-10 11:25:33 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-12-10 11:25:32 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-12-10 11:25:32 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-12-10 11:25:32 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-12-10 11:25:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-12-10 11:25:32 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-12-10 11:25:32 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-12-10 11:25:32 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-12-10 11:25:32 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-12-10 11:25:32 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-12-10 11:25:31 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-12-10 11:25:31 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-12-10 11:25:31 ----A---- C:\Windows\system32\xinput1_3.dll
2010-12-10 11:25:31 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-12-10 11:25:31 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-12-10 11:25:30 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-12-10 11:25:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-12-10 11:25:30 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-12-10 11:25:30 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-12-10 11:25:29 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-12-10 11:25:29 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-12-10 11:25:29 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-12-10 11:25:29 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-12-10 11:25:28 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-12-10 11:25:28 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-12-10 11:25:28 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-12-10 11:25:28 ----A---- C:\Windows\system32\d3dx10.dll
2010-12-10 11:25:27 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-12-10 11:25:27 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-12-10 11:25:27 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-12-10 11:25:27 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-12-10 11:25:26 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-12-10 11:25:26 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-12-10 11:25:26 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-12-10 11:25:26 ----A---- C:\Windows\system32\xinput1_2.dll
2010-12-10 11:25:26 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-12-10 11:25:26 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-12-10 11:24:31 ----D---- C:\Program Files (x86)\OpenAL
2010-12-10 11:24:31 ----A---- C:\Windows\system32\wrap_oal.dll
2010-12-10 11:24:31 ----A---- C:\Windows\system32\OpenAL32.dll
2010-12-10 11:24:30 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2010-12-10 11:24:30 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2010-12-10 11:23:32 ----D---- C:\Program Files (x86)\Prodigium Game Studios

======List of files/folders modified in the last 1 months======

2011-01-08 13:54:52 ----D---- C:\Windows\Temp
2011-01-08 13:54:49 ----RD---- C:\Program Files
2011-01-08 13:47:58 ----D---- C:\Windows
2011-01-08 12:45:09 ----D---- C:\Windows\system32\config
2011-01-08 12:32:01 ----HD---- C:\ProgramData
2011-01-07 11:06:56 ----SHD---- C:\System Volume Information
2011-01-06 19:59:20 ----D---- C:\Windows\System32
2011-01-06 19:59:20 ----D---- C:\Windows\inf
2011-01-06 19:59:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-01-06 19:56:26 ----D---- C:\Windows\Prefetch
2011-01-06 13:22:42 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-01-06 11:47:29 ----SHD---- C:\Windows\Installer
2011-01-05 13:30:13 ----D---- C:\Windows\Tasks
2011-01-03 20:05:51 ----RSD---- C:\Windows\assembly
2011-01-03 20:04:30 ----D---- C:\Windows\SysWOW64
2011-01-03 20:01:57 ----D---- C:\Users\Vision\AppData\Roaming\DAEMON Tools Lite
2011-01-02 11:26:06 ----D---- C:\Windows\system32\catroot2
2010-12-26 23:22:58 ----D---- C:\Windows\system32\wdi
2010-12-26 22:24:29 ----D---- C:\Program Files (x86)
2010-12-26 22:24:03 ----D---- C:\Program Files (x86)\Acer GameZone
2010-12-26 21:13:14 ----D---- C:\QIP 2010
2010-12-24 13:37:53 ----D---- C:\Windows\system32\drivers
2010-12-24 10:15:11 ----D---- C:\ProgramData\Adobe
2010-12-23 15:37:14 ----D---- C:\Windows\system32\LogFiles
2010-12-23 14:27:10 ----D---- C:\Users\Vision\AppData\Roaming\Adobe
2010-12-23 13:49:53 ----RSD---- C:\Windows\Fonts
2010-12-23 13:49:11 ----D---- C:\Windows\system32\catroot
2010-12-23 13:48:34 ----D---- C:\Program Files\Common Files
2010-12-23 13:48:34 ----D---- C:\Program Files (x86)\Common Files
2010-12-23 13:48:02 ----D---- C:\Program Files\ATI Technologies
2010-12-23 13:47:56 ----D---- C:\Program Files (x86)\ATI Technologies
2010-12-23 13:45:49 ----D---- C:\Windows\system32\DriverStore
2010-12-23 13:45:13 ----SD---- C:\Users\Vision\AppData\Roaming\Microsoft
2010-12-23 13:41:35 ----D---- C:\Windows\system32\drivers\etc
2010-12-23 13:36:39 ----D---- C:\Program Files (x86)\Adobe
2010-12-23 13:05:42 ----D---- C:\Windows\system32\Tasks
2010-12-23 12:02:13 ----D---- C:\Windows\winsxs
2010-12-20 17:49:18 ----D---- C:\ProgramData\Partner
2010-12-19 13:08:30 ----D---- C:\Windows\rescache
2010-12-16 17:54:12 ----D---- C:\Windows\SYSWOW64\cs-CZ
2010-12-16 17:54:11 ----D---- C:\Windows\system32\cs-CZ
2010-12-16 17:54:09 ----D---- C:\Program Files\Windows Mail
2010-12-16 17:54:09 ----D---- C:\Program Files (x86)\Windows Mail
2010-12-16 17:54:08 ----D---- C:\Program Files (x86)\Internet Explorer
2010-12-16 17:54:07 ----D---- C:\Windows\SYSWOW64\migration
2010-12-16 17:54:07 ----D---- C:\Program Files\Internet Explorer
2010-12-16 17:54:06 ----D---- C:\Windows\system32\migration
2010-12-15 22:44:39 ----D---- C:\ProgramData\Microsoft Help
2010-12-15 22:41:22 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-11-22 834544]
R1 archlp;archlp; C:\Windows\SysWOW64\drivers\archlp.sys [2009-08-13 147968]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 AMON;AMON; C:\Windows\system32\drivers\amon.sys [2010-11-22 146704]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-12 6405120]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-12 188928]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-03-08 123408]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-04-01 3060800]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-01-18 75304]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-05 18432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-03-11 316464]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-05 16896]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 VD_FileDisk;VD_FileDisk; C:\Windows\system32\drivers\VD_FileDisk.sys []
S3 a5kngifh;a5kngifh; C:\Windows\system32\drivers\a5kngifh.sys []
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-04-07 2216960]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
S3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-04-23 335400]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-04-23 102440]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2010-04-23 135720]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2010-04-23 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-04-23 21544]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-04-08 68992]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-12 202752]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-04-17 937248]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-03-03 325200]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2010-03-10 820768]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files (x86)\Eset\nod32krn.exe [2010-11-22 552064]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-03-09 250368]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-11-06 144640]
R2 ODDPwrSvc;Acer ODD Power Service; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [2010-04-22 171040]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2010-12-23 75064]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2010-02-03 244904]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-26 135664]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-05-20 182768]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-04-17 305520]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-11-06 50432]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-11-27 1255736]

-----------------EOF-----------------

Re: Preventivní kontrola

Napsal: 08 led 2011 22:04
od Roli
Zdravím, pokud chceš pomoct odinstaluj ten CRACKED NOD a pořiď si nějaký free antivir když za něj nechceš platit,

do té doby :offtopic:

Re: Preventivní kontrola

Napsal: 09 led 2011 11:05
od kaspi
Omlouvám se, používal jsem aviru, ale byl mi zde nainstalován NOD nezkoumal jsem jaká verze to je.

Re: Preventivní kontrola

Napsal: 09 led 2011 21:19
od Roli
Tak že ho odinstaluj a dej mi sem aktuální log z Rsit.

Re: Preventivní kontrola

Napsal: 09 led 2011 21:36
od kaspi
Logfile of random's system information tool 1.08 (written by random/random)
Run by Vision at 2011-01-09 21:35:32
Microsoft Windows 7 Home Premium
System drive C: has 485 GB (81%) free of 597 GB
Total RAM: 5886 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:35:36, on 9.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\QIP 2010\qip.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Vision.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t57i1l721
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t57i1l721
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso" UpdateWithCreateOnce "Software\CyberLink\MediaShow Espresso\5.6"
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Vision\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Infium] "C:\QIP 2010\qip.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Unibet - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: Acer ODD Power Service (ODDPwrSvc) - Acer Incorporated - C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14630 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\system32\WLANExt.exe 27978096
\??\C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_0000042c
\??\C:\Windows\system32\conhost.exe
"C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2500
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe"
"C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"C:\QIP 2010\qip.exe" /autorun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
C:\Windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
"C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
"C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Vision\AppData\Local\Google\Chrome\Application\8.0.552.224\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\Vision\AppData\Local\Google\Chrome\User Data\Default" --channel=384.088C0E4C.475919449 /prefetch:4
"C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_5/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=384.087B3300.1301759692 /prefetch:3
"C:\Users\Vision\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_5/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=384.0690A180.869352994 /prefetch:3
"C:\Users\Vision\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Acer Registration - Reminder Recall task.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3784711517-1891709366-2686084796-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3784711517-1891709366-2686084796-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-12-10 399536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg64.dll [2010-11-29 317496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-23 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-12-10 297648]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2010-11-29 843832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Nero Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2010-10-11 1244040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-12-10 399536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Nero Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2010-10-11 1244040]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-12-10 297648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2010-02-05 324608]
"ODDPwr"=C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [2010-04-22 223264]
"mwlDaemon"=C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-04-17 349552]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-03-11 2107176]
"Acer ePower Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2010-03-10 496160]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-05-20 39408]
"Google Update"=C:\Users\Vision\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-26 136176]
"Infium"=C:\QIP 2010\qip.exe [2010-11-19 5842384]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-03-03 1300560]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-04-17 337264]
"EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]
"EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]
"NortonOnlineBackupReminder"=C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [2009-07-25 588648]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-03-09 260608]
"MDS_Menu"=C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"ArcadeMovieService"=C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [2010-04-24 124136]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"NBAgent"=C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-09-03 1406248]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-11-25 98304]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2010-12-13 281768]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-01-09 11:14:46 ----D---- C:\Users\Vision\AppData\Roaming\Avira
2011-01-09 11:10:42 ----A---- C:\Windows\system32\drivers\avipbb.sys
2011-01-09 11:10:42 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2011-01-09 11:10:41 ----D---- C:\ProgramData\Avira
2011-01-09 11:10:41 ----D---- C:\Program Files (x86)\Avira
2011-01-08 21:14:22 ----D---- C:\dbTemp
2011-01-08 13:54:49 ----D---- C:\rsit
2011-01-08 13:54:49 ----D---- C:\Program Files\trend micro
2011-01-06 20:22:57 ----D---- C:\Users\Vision\AppData\Roaming\Microgaming
2011-01-06 20:22:19 ----D---- C:\MicroGaming
2010-12-26 21:03:56 ----D---- C:\Program Files\Axantum
2010-12-26 17:52:33 ----D---- C:\Program Files\3D Driving-School
2010-12-24 18:22:27 ----D---- C:\ProgramData\Test Drive Unlimited
2010-12-23 16:43:43 ----D---- C:\Games
2010-12-23 15:37:34 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2010-12-23 15:37:15 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2010-12-23 15:37:14 ----D---- C:\Program Files (x86)\EA Sports
2010-12-23 15:37:14 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2010-12-23 13:51:41 ----D---- C:\ProgramData\ATI
2010-12-23 13:48:34 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-12-23 13:48:27 ----D---- C:\Program Files (x86)\ATI Stream
2010-12-23 13:44:03 ----D---- C:\ATI
2010-12-23 13:36:58 ----D---- C:\AMD
2010-12-23 13:29:57 ----D---- C:\Program Files (x86)\uTorrent
2010-12-23 13:29:26 ----D---- C:\Users\Vision\AppData\Roaming\uTorrent
2010-12-23 13:06:13 ----D---- C:\Users\Vision\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2010-12-23 13:04:32 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2010-12-23 13:04:02 ----D---- C:\Program Files\Adobe
2010-12-23 13:01:01 ----D---- C:\Program Files\Common Files\Adobe
2010-12-23 12:02:36 ----D---- C:\Program Files (x86)\Adobe Media Player
2010-12-17 15:07:41 ----HD---- C:\Windows\msdownld.tmp
2010-12-17 15:07:38 ----D---- C:\Windows\SYSWOW64\directx
2010-12-15 16:45:07 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-12-15 16:45:07 ----A---- C:\Windows\system32\tzres.dll
2010-12-15 16:44:57 ----A---- C:\Windows\system32\schedsvc.dll
2010-12-15 16:44:56 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2010-12-15 16:44:56 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2010-12-15 16:44:56 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2010-12-15 16:44:56 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2010-12-15 16:44:56 ----A---- C:\Windows\system32\wmicmiplugin.dll
2010-12-15 16:44:56 ----A---- C:\Windows\system32\taskschd.dll
2010-12-15 16:44:56 ----A---- C:\Windows\system32\taskeng.exe
2010-12-15 16:44:56 ----A---- C:\Windows\system32\taskcomp.dll
2010-12-15 16:44:56 ----A---- C:\Windows\system32\schtasks.exe
2010-12-15 16:44:54 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2010-12-15 16:44:54 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2010-12-15 16:44:54 ----A---- C:\Windows\system32\atmlib.dll
2010-12-15 16:44:54 ----A---- C:\Windows\system32\atmfd.dll
2010-12-15 16:44:53 ----A---- C:\Windows\system32\win32k.sys
2010-12-15 16:44:52 ----A---- C:\Windows\SYSWOW64\webio.dll
2010-12-15 16:44:52 ----A---- C:\Windows\system32\webio.dll
2010-12-15 16:44:50 ----A---- C:\Windows\system32\consent.exe
2010-12-15 16:44:46 ----A---- C:\Windows\system32\mshtml.dll
2010-12-15 16:44:45 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-12-15 16:44:45 ----A---- C:\Windows\system32\mstime.dll
2010-12-15 16:44:45 ----A---- C:\Windows\system32\iertutil.dll
2010-12-15 16:44:45 ----A---- C:\Windows\system32\ieframe.dll
2010-12-15 16:44:44 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-12-15 16:44:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-12-15 16:44:43 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-12-15 16:44:42 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-12-15 16:44:42 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-12-15 16:44:42 ----A---- C:\Windows\system32\wininet.dll
2010-12-15 16:44:42 ----A---- C:\Windows\system32\urlmon.dll
2010-12-15 16:44:42 ----A---- C:\Windows\system32\msfeeds.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-12-15 16:44:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\mshtmled.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\msfeedssync.exe
2010-12-15 16:44:41 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\licmgr10.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\ieui.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\iepeers.dll
2010-12-15 16:44:41 ----A---- C:\Windows\system32\iedkcs32.dll
2010-12-15 16:44:40 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-12-15 16:44:40 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-12-15 16:44:40 ----A---- C:\Windows\system32\jsproxy.dll
2010-12-10 11:26:00 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-12-10 11:26:00 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-12-10 11:26:00 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-12-10 11:26:00 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-12-10 11:26:00 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-12-10 11:26:00 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-12-10 11:25:59 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-12-10 11:25:59 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-12-10 11:25:58 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-12-10 11:25:58 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-12-10 11:25:57 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-12-10 11:25:57 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-12-10 11:25:57 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-12-10 11:25:57 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-12-10 11:25:57 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-12-10 11:25:57 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-12-10 11:25:57 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-12-10 11:25:57 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-12-10 11:25:56 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-12-10 11:25:55 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-12-10 11:25:55 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-12-10 11:25:53 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-12-10 11:25:51 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-12-10 11:25:51 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-12-10 11:25:51 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-12-10 11:25:51 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-12-10 11:25:49 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-12-10 11:25:49 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-12-10 11:25:49 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-12-10 11:25:48 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-12-10 11:25:48 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-12-10 11:25:47 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-12-10 11:25:47 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-12-10 11:25:47 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-12-10 11:25:46 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-12-10 11:25:46 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-12-10 11:25:45 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-12-10 11:25:45 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-12-10 11:25:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-12-10 11:25:45 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-12-10 11:25:45 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-12-10 11:25:45 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-12-10 11:25:45 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-12-10 11:25:44 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-12-10 11:25:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-12-10 11:25:44 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-12-10 11:25:44 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-12-10 11:25:43 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-12-10 11:25:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-12-10 11:25:43 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-12-10 11:25:43 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-12-10 11:25:43 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-12-10 11:25:43 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-12-10 11:25:43 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-12-10 11:25:43 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-12-10 11:25:42 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-12-10 11:25:42 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-12-10 11:25:41 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-12-10 11:25:41 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-12-10 11:25:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-12-10 11:25:41 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-12-10 11:25:41 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-12-10 11:25:41 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-12-10 11:25:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-12-10 11:25:39 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-12-10 11:25:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-12-10 11:25:37 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-12-10 11:25:36 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-12-10 11:25:36 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-12-10 11:25:35 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-12-10 11:25:35 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-12-10 11:25:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-12-10 11:25:35 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-12-10 11:25:35 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-12-10 11:25:35 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-12-10 11:25:34 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-12-10 11:25:34 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-12-10 11:25:33 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-12-10 11:25:33 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-12-10 11:25:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-12-10 11:25:33 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-12-10 11:25:33 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-12-10 11:25:33 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-12-10 11:25:32 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-12-10 11:25:32 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-12-10 11:25:32 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-12-10 11:25:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-12-10 11:25:32 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-12-10 11:25:32 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-12-10 11:25:32 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-12-10 11:25:32 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-12-10 11:25:32 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-12-10 11:25:31 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-12-10 11:25:31 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-12-10 11:25:31 ----A---- C:\Windows\system32\xinput1_3.dll
2010-12-10 11:25:31 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-12-10 11:25:31 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-12-10 11:25:30 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-12-10 11:25:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-12-10 11:25:30 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-12-10 11:25:30 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-12-10 11:25:29 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-12-10 11:25:29 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-12-10 11:25:29 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-12-10 11:25:29 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-12-10 11:25:28 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-12-10 11:25:28 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-12-10 11:25:28 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-12-10 11:25:28 ----A---- C:\Windows\system32\d3dx10.dll
2010-12-10 11:25:27 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-12-10 11:25:27 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-12-10 11:25:27 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-12-10 11:25:27 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-12-10 11:25:26 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-12-10 11:25:26 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-12-10 11:25:26 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-12-10 11:25:26 ----A---- C:\Windows\system32\xinput1_2.dll
2010-12-10 11:25:26 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-12-10 11:25:26 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-12-10 11:24:31 ----D---- C:\Program Files (x86)\OpenAL
2010-12-10 11:24:31 ----A---- C:\Windows\system32\wrap_oal.dll
2010-12-10 11:24:31 ----A---- C:\Windows\system32\OpenAL32.dll
2010-12-10 11:24:30 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2010-12-10 11:24:30 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2010-12-10 11:23:32 ----D---- C:\Program Files (x86)\Prodigium Game Studios

======List of files/folders modified in the last 1 months======

2011-01-09 20:27:25 ----D---- C:\Windows\system32\config
2011-01-09 20:16:13 ----D---- C:\Windows\Temp
2011-01-09 20:13:43 ----SHD---- C:\System Volume Information
2011-01-09 12:13:04 ----D---- C:\Windows\System32
2011-01-09 12:13:04 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-01-09 12:13:03 ----D---- C:\Windows\inf
2011-01-09 11:10:48 ----D---- C:\Windows\system32\catroot
2011-01-09 11:10:42 ----D---- C:\Windows\system32\drivers
2011-01-09 11:10:41 ----HD---- C:\ProgramData
2011-01-09 11:10:41 ----D---- C:\Program Files (x86)
2011-01-09 11:03:01 ----D---- C:\Windows\SysWOW64
2011-01-09 11:03:01 ----D---- C:\Program Files (x86)\Eset
2011-01-08 13:54:49 ----RD---- C:\Program Files
2011-01-08 13:47:58 ----D---- C:\Windows
2011-01-06 19:56:26 ----D---- C:\Windows\Prefetch
2011-01-06 13:22:42 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-01-06 11:47:29 ----SHD---- C:\Windows\Installer
2011-01-05 13:30:13 ----D---- C:\Windows\Tasks
2011-01-03 20:05:51 ----RSD---- C:\Windows\assembly
2011-01-03 20:01:57 ----D---- C:\Users\Vision\AppData\Roaming\DAEMON Tools Lite
2011-01-02 11:26:06 ----D---- C:\Windows\system32\catroot2
2010-12-26 23:22:58 ----D---- C:\Windows\system32\wdi
2010-12-26 22:24:03 ----D---- C:\Program Files (x86)\Acer GameZone
2010-12-26 21:13:14 ----D---- C:\QIP 2010
2010-12-24 10:15:11 ----D---- C:\ProgramData\Adobe
2010-12-23 15:37:14 ----D---- C:\Windows\system32\LogFiles
2010-12-23 14:27:10 ----D---- C:\Users\Vision\AppData\Roaming\Adobe
2010-12-23 13:49:53 ----RSD---- C:\Windows\Fonts
2010-12-23 13:48:34 ----D---- C:\Program Files\Common Files
2010-12-23 13:48:34 ----D---- C:\Program Files (x86)\Common Files
2010-12-23 13:48:02 ----D---- C:\Program Files\ATI Technologies
2010-12-23 13:47:56 ----D---- C:\Program Files (x86)\ATI Technologies
2010-12-23 13:45:49 ----D---- C:\Windows\system32\DriverStore
2010-12-23 13:45:13 ----SD---- C:\Users\Vision\AppData\Roaming\Microsoft
2010-12-23 13:41:35 ----D---- C:\Windows\system32\drivers\etc
2010-12-23 13:36:39 ----D---- C:\Program Files (x86)\Adobe
2010-12-23 13:05:42 ----D---- C:\Windows\system32\Tasks
2010-12-23 12:02:13 ----D---- C:\Windows\winsxs
2010-12-20 17:49:18 ----D---- C:\ProgramData\Partner
2010-12-19 13:08:30 ----D---- C:\Windows\rescache
2010-12-16 17:54:12 ----D---- C:\Windows\SYSWOW64\cs-CZ
2010-12-16 17:54:11 ----D---- C:\Windows\system32\cs-CZ
2010-12-16 17:54:09 ----D---- C:\Program Files\Windows Mail
2010-12-16 17:54:09 ----D---- C:\Program Files (x86)\Windows Mail
2010-12-16 17:54:08 ----D---- C:\Program Files (x86)\Internet Explorer
2010-12-16 17:54:07 ----D---- C:\Windows\SYSWOW64\migration
2010-12-16 17:54:07 ----D---- C:\Program Files\Internet Explorer
2010-12-16 17:54:06 ----D---- C:\Windows\system32\migration
2010-12-15 22:44:39 ----D---- C:\ProgramData\Microsoft Help
2010-12-15 22:41:22 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-11-22 834544]
R1 archlp;archlp; C:\Windows\SysWOW64\drivers\archlp.sys [2009-08-13 147968]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-12-13 116568]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-12-13 83120]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-12 6405120]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-12 188928]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-03-08 123408]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-04-01 3060800]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-01-18 75304]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-05 18432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-03-11 316464]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-05 16896]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 VD_FileDisk;VD_FileDisk; C:\Windows\system32\drivers\VD_FileDisk.sys []
S3 a88g5zqj;a88g5zqj; C:\Windows\system32\drivers\a88g5zqj.sys []
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-04-07 2216960]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
S3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-04-23 335400]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-04-23 102440]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2010-04-23 135720]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2010-04-23 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-04-23 21544]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-04-08 68992]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-12 202752]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2010-12-13 267944]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-04-17 937248]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-03-03 325200]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2010-03-10 820768]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-03-09 250368]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-11-06 144640]
R2 ODDPwrSvc;Acer ODD Power Service; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [2010-04-22 171040]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2010-12-23 75064]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2010-02-03 244904]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-26 135664]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-05-20 182768]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-04-17 305520]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-11-06 50432]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-11-27 1255736]

-----------------EOF-----------------

Re: Preventivní kontrola

Napsal: 09 led 2011 21:49
od Roli
No to už je lepší.

Tohle fixni v HJT :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Vision\AppData\Local\Google\Update\GoogleUpdate.exe" /c


HJT najdeš zde :

C:\Program Files\trend micro\Vision.exe

Fix znamená že spustíš HJT Obrázek jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

Cyberlink RichVideo Service

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


Jinak nic špatného nevidím.

Re: Preventivní kontrola

Napsal: 09 led 2011 22:01
od kaspi
Dobře, dík za kontrolu. :)

Re: Preventivní kontrola

Napsal: 09 led 2011 22:05
od Roli
Není zač.