Prosím o preventívnu kontrolu
Napsal: 19 bře 2011 11:13
Zdravím, som tu zas, počítač funguje dobre, som už ostražitejší, ale dnes počas surfovania som pritrafil jeden z mojich obľúbených blogov ale miesto homepagu vyskočila tabuľka typu "Your PC is in danger of malicious attacks. We recommend turning on the scan now."
Samozrejme som si hneď všimol že ma to presmerovalo inde a na podobné tabuľky už neklikám ani na "X" v pravom hornom horu. Vypol som miesto toho okno kde som mal stránku otvorenú, ale nejako mi stále nedá a obávam sa, na druhú stranu nechcem hneď prechádzať PC AntiBytes-om tak som sa rozhodol prísť s tým sem.
Tu prikladám log z RSITu. Vopred ďakujem.
Samozrejme som si hneď všimol že ma to presmerovalo inde a na podobné tabuľky už neklikám ani na "X" v pravom hornom horu. Vypol som miesto toho okno kde som mal stránku otvorenú, ale nejako mi stále nedá a obávam sa, na druhú stranu nechcem hneď prechádzať PC AntiBytes-om tak som sa rozhodol prísť s tým sem.
Tu prikladám log z RSITu. Vopred ďakujem.
Kód: Vybrat vše
Logfile of random's system information tool 1.08 (written by random/random)
Run by Bruni at 2011-03-19 11:12:41
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 47 GB (10%) free of 477 GB
Total RAM: 4094 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:12:42, on 19. 3. 2011
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18565)
Boot mode: Normal
Running processes:
C:\Windows\PixArt\PAC207\Monitor.exe
C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Opera\Opera.exe
C:\Users\Bruni\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\Bruni.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/default
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Reader\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\Bruni\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [HDAudDeck] "C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /install /silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [PMCallCenter] "C:\Program Files (x86)\PrettyMay Call Center for Skype\PMCallCenter.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\Bruni\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\Bruni\AppData\Roaming\FlashGetBHO\GetUrl.htm
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Bruni\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O15 - Trusted Zone: http://software.kuaiche.com
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8957 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files (x86)\Reader\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 54248]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - C:\Users\Bruni\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll [2009-12-22 157232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-02-01 1487240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2008-12-10 929224]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-02-01 1487240]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2008-01-18 14593024]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2011-01-13 3396624]
"Nikon Message Center 2"=C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [2010-05-25 619008]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2010-12-20 443728]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1555968]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe [2008-12-10 216520]
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2010-12-18 395640]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 138240]
"PMCallCenter"=C:\Program Files (x86)\PrettyMay Call Center for Skype\PMCallCenter.exe []
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2011-02-27 1242448]
C:\Users\Bruni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2011-03-19 11:08:58 ----D---- C:\rsit
2011-03-19 11:08:58 ----D---- C:\Program Files (x86)\trend micro
2011-03-19 11:05:15 ----D---- C:\Users\Bruni\AppData\Roaming\Malwarebytes
2011-03-19 11:05:09 ----D---- C:\ProgramData\Malwarebytes
2011-03-19 11:05:09 ----A---- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys
2011-03-19 11:05:06 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-03-18 19:04:28 ----D---- C:\Emergency4
2011-03-16 14:18:38 ----A---- C:\Windows\SysWOW64\shsvcs.dll
2011-03-09 19:28:47 ----D---- C:\Program Files (x86)\Common Files\Java
2011-03-09 19:28:18 ----A---- C:\Windows\SysWOW64\javaws.exe
2011-03-09 19:28:18 ----A---- C:\Windows\SysWOW64\javaw.exe
2011-03-09 19:28:18 ----A---- C:\Windows\SysWOW64\java.exe
2011-03-09 19:26:37 ----D---- C:\ProgramData\McAfee
2011-03-09 14:46:47 ----A---- C:\Windows\SysWOW64\mstscax.dll
2011-03-09 14:46:47 ----A---- C:\Windows\SysWOW64\mstsc.exe
2011-03-09 14:46:45 ----A---- C:\Windows\SysWOW64\sbeio.dll
2011-03-09 14:46:45 ----A---- C:\Windows\SysWOW64\sbe.dll
2011-03-09 14:46:45 ----A---- C:\Windows\SysWOW64\EncDec.dll
2011-02-28 20:46:21 ----D---- C:\Users\Bruni\AppData\Roaming\godzHell
2011-02-28 17:23:12 ----D---- C:\Program Files (x86)\SimSig
2011-02-28 17:12:11 ----D---- C:\Program Files (x86)\mackoy
2011-02-28 14:46:44 ----D---- C:\Users\Bruni\AppData\Roaming\The Creative Assembly
2011-02-27 14:35:16 ----D---- C:\Program Files (x86)\Common Files\Steam
2011-02-27 14:35:13 ----D---- C:\Program Files (x86)\Steam
2011-02-26 02:19:32 ----A---- C:\Windows\SysWOW64\xfcodec.dll
2011-02-24 03:03:06 ----D---- C:\Windows\SysWOW64\WindowsPowerShell
2011-02-24 03:01:21 ----A---- C:\Windows\SysWOW64\winrsmgr.dll
2011-02-24 03:01:12 ----A---- C:\Windows\SysWOW64\wsmplpxy.dll
2011-02-24 03:01:12 ----A---- C:\Windows\SysWOW64\winrssrv.dll
2011-02-24 03:01:02 ----A---- C:\Windows\SysWOW64\pwrshplugin.dll
2011-02-24 03:00:55 ----A---- C:\Windows\SysWOW64\WsmRes.dll
2011-02-24 03:00:55 ----A---- C:\Windows\SysWOW64\wsmprovhost.exe
2011-02-24 03:00:55 ----A---- C:\Windows\SysWOW64\winrshost.exe
2011-02-24 03:00:55 ----A---- C:\Windows\SysWOW64\winrs.exe
2011-02-24 03:00:55 ----A---- C:\Windows\SysWOW64\wevtfwd.dll
2011-02-24 03:00:55 ----A---- C:\Windows\SysWOW64\wecutil.exe
2011-02-24 03:00:55 ----A---- C:\Windows\SysWOW64\wecapi.dll
2011-02-24 03:00:48 ----A---- C:\Windows\SysWOW64\winrm.vbs
2011-02-24 03:00:47 ----A---- C:\Windows\SysWOW64\WsmWmiPl.dll
2011-02-24 03:00:47 ----A---- C:\Windows\SysWOW64\WsmSvc.dll
2011-02-24 03:00:47 ----A---- C:\Windows\SysWOW64\WsmAuto.dll
2011-02-24 03:00:47 ----A---- C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2011-02-24 03:00:47 ----A---- C:\Windows\SysWOW64\WSManHTTPConfig.exe
2011-02-24 03:00:47 ----A---- C:\Windows\SysWOW64\winrscmd.dll
2011-02-21 18:41:43 ----D---- C:\Program Files (x86)\Common Files\Skype
2011-02-21 15:02:09 ----D---- C:\HL2
======List of files/folders modified in the last 1 months======
2011-03-19 11:12:40 ----D---- C:\Windows\Temp
2011-03-19 11:08:58 ----D---- C:\Program Files (x86)
2011-03-19 11:05:09 ----HD---- C:\ProgramData
2011-03-19 11:05:09 ----D---- C:\Windows\SysWOW64\drivers
2011-03-19 11:05:05 ----D---- C:\Windows\Prefetch
2011-03-19 10:24:47 ----D---- C:\Users\Bruni\AppData\Roaming\uTorrent
2011-03-19 10:24:44 ----AD---- C:\ProgramData\TEMP
2011-03-19 10:22:07 ----D---- C:\ProgramData\NVIDIA
2011-03-18 17:55:32 ----SHD---- C:\System Volume Information
2011-03-17 06:02:21 ----D---- C:\Windows\SysWOW64
2011-03-17 06:02:21 ----D---- C:\Windows\System32
2011-03-17 06:01:38 ----D---- C:\Windows\winsxs
2011-03-16 15:54:51 ----D---- C:\PR
2011-03-15 22:19:13 ----D---- C:\Users\Bruni\AppData\Roaming\Skype
2011-03-15 19:55:13 ----D---- C:\Users\Bruni\AppData\Roaming\skypePM
2011-03-14 18:42:35 ----D---- C:\MATHS
2011-03-10 06:13:19 ----D---- C:\Windows\Debug
2011-03-09 22:07:27 ----RD---- C:\Program Files
2011-03-09 19:28:47 ----SHD---- C:\Windows\Installer
2011-03-09 19:28:47 ----D---- C:\Program Files (x86)\Common Files
2011-03-09 19:28:03 ----D---- C:\Program Files (x86)\Java
2011-03-09 15:46:10 ----D---- C:\Users\Bruni\AppData\Roaming\vlc
2011-03-04 12:36:56 ----D---- C:\Program Files (x86)\DeusExYED_Eng
2011-03-04 00:29:56 ----D---- C:\Jazz
2011-03-03 14:06:58 ----A---- C:\Windows\SysWOW64\PnkBstrB.exe
2011-03-03 12:41:55 ----D---- C:\Users\Bruni\AppData\Roaming\Xfire
2011-03-03 08:31:25 ----D---- C:\ProgramData\Xfire
2011-03-02 11:51:52 ----D---- C:\Program Files (x86)\Xfire
2011-02-28 22:06:50 ----D---- C:\Users\Bruni\AppData\Roaming\Mumble(PR Edition)
2011-02-28 17:25:36 ----RSD---- C:\Windows\Fonts
2011-02-28 17:22:35 ----D---- C:\SNOOKER
2011-02-28 14:45:40 ----RSD---- C:\Windows\assembly
2011-02-28 14:45:10 ----D---- C:\Windows
2011-02-27 14:48:29 ----SD---- C:\Users\Bruni\AppData\Roaming\Microsoft
2011-02-24 15:56:40 ----D---- C:\Windows\rescache
2011-02-24 03:07:19 ----D---- C:\Windows\Microsoft.NET
2011-02-24 03:03:07 ----D---- C:\Windows\SysWOW64\en-US
2011-02-24 03:03:06 ----D---- C:\Windows\PolicyDefinitions
2011-02-22 13:07:34 ----D---- C:\Program Files (x86)\Electronic Arts
2011-02-22 06:13:20 ----D---- C:\Program Files (x86)\EA SPORTS
2011-02-21 18:42:05 ----RD---- C:\Program Files (x86)\Skype
2011-02-21 18:41:29 ----D---- C:\ProgramData\Skype
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2007-02-07 14104]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys []
R1 aswRdr;aswRdr; C:\Windows\SysWOW64\drivers\aswRdr.sys []
R1 aswSP;aswSP; C:\Windows\SysWOW64\drivers\aswSP.sys []
R1 aswTdi;avast! Network Shield Support; C:\Windows\SysWOW64\drivers\aswTdi.sys []
R2 aswFsBlk;aswFsBlk; C:\Windows\SysWOW64\drivers\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys []
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys []
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys []
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx64.sys []
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys []
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys []
S3 azcs7dk7;azcs7dk7; C:\Windows\SysWOW64\drivers\azcs7dk7.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys []
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys []
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys []
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys []
S3 PAC207;SoC PC-Camera; C:\Windows\system32\DRIVERS\PFC027.SYS []
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys []
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-01-13 40384]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-01-03 75064]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-03-15 407336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater; C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-12-15 25832]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-06-11 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-18 19968]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------