Stránka 1 z 1

fltmgr.sys způsobuje BSOD

Napsal: 27 kvě 2011 20:21
od LosEagle
Dobrý den,

mám problém se souborem fltmgr.sys. Neustále mi padal Windows do BSOD a psal něco jako DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1), poté se znovu spustil a odkázal mě na dmp soubor v minidump ve složce windows. Ten jsem přečetl a hlásil chybu v již zmiňovaném fltmgr.sys. U té modré obrazovky jsem si ještě na rychlo všiml, že problém dělá nějaký ovladač. Pustil jsem test paměti a vyšel jsem absolutně bez problému. Windows mi padá do BSOD pravidelně téměř každý druhý den a po hodinách googlování stejně nevím, co s tím dělat. Windows jsem opravil pomocí instalačního cd formou upgradu, abych nepřišel o data a stejně tento problém neustále mám. Na internetu všude píší, že mám pročistit registr. To jsem udělal asi 100x pomocí CCleaneru a pořád stejný problém.

Už jsem zoufalý neví někdo co s tím ? Mám Windows 7

Děkuji všem

Re: fltmgr.sys způsobuje BSOD

Napsal: 27 kvě 2011 20:31
od Rudy

Re: fltmgr.sys způsobuje BSOD

Napsal: 27 kvě 2011 20:36
od LosEagle
Logfile of random's system information tool 1.08 (written by random/random)
Run by Eagle at 2011-05-27 21:33:41
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 130 GB (56%) free of 231 GB
Total RAM: 4095 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:33:45, on 27.5.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Debugging Tools for Windows (x86)\windbg.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Eagle.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files (x86)\Seznam.cz\toolbar\toolbar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICAE.EXE /FU "C:\Windows\TEMP\E_S5D1E.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Eagle\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\system32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2856523427-356265775-3866200097-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2856523427-356265775-3866200097-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\Windows\runservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Služba Technologie aktivace Windows (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11250 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\runservice.exe
"C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1584
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a0ca6539-51b1-46a4-8940-4bc3a1c8a382 -SystemEventPortName:HostProcess-532a88f0-9992-4e42-a661-ed69566e0ef6 -IoCancelEventPortName:HostProcess-e6e318ae-589c-4a12-a9b5-bb8792ff044e -NonStateChangingEventPortName:HostProcess-5a7c6a7d-b5d9-482a-9ade-f2acf78b539e -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c20eebc1-b476-4574-93a7-0888b6d09324
C:\Windows\System32\WerFault.exe -k -q
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe" /SILENT
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Windows\system32\StikyNot.exe"
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_9/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=2512.0464DD80.390357620 /prefetch:3
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_9/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=2512.01E08A80.794951357 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_9/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=2512.01E08900.713432170 /prefetch:3 --ignored=" --type=renderer "
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_5/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_9/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=2512.06D20480.2068063969 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\Eagle\AppData\Local\Google\Chrome\Application\11.0.696.68\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Eagle\AppData\Local\Google\Chrome\Application\11.0.696.68\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\Eagle\AppData\Local\Google\Chrome\User Data\Default" --channel=2512.06B67200.1236138805 /prefetch:4 --flash-broker=4776
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Debugging Tools for Windows (x86)\windbg.exe"
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_5/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_9/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=2512.09C48C00.1257483004 /prefetch:3
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_5/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_9/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=2512.06B6D900.1818904741 /prefetch:3
"C:\Program Files\CCleaner\CCleaner64.exe"
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_5/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_9/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=2512.06B6D780.1666126111 /prefetch:3
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_5/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_9/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=2512.079F0C00.1810366046 /prefetch:3
"C:\Users\Eagle\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_5/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_9/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/ --channel=2512.0C41D180.920013229 /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\Eagle\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2856523427-356265775-3866200097-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2856523427-356265775-3866200097-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files (x86)\Seznam.cz\listicka.dll [2011-03-15 2201600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Program Files (x86)\Seznam.cz\toolbar\toolbar.dll [2011-03-10 183808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-05-22 9057608]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-08-12 2916584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21 1174016]
"EPSON Stylus DX4400 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICAE.EXE [2007-03-01 211456]
"Google Update"=C:\Users\Eagle\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-09 136176]
"RESTART_STICKY_NOTES"=C:\Windows\system32\StikyNot.exe [2009-07-14 427520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\20090604]
D:\Program Files (x86)\Encore\Hoyle Casino Games 2011\Ereg\encore_reg.exe /r D:\Program Files (x86)\Encore\Hoyle Casino Games 2011\Ereg\encore_reg.rpd []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-02-15 1230704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files (x86)\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Eagle\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-09 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware (reboot)]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe [2010-12-20 963976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminator]
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2011-05-20 2557440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2011-05-20 3318784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2011-03-27 1242448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TNOD UP]
C:\Program Files (x86)\TNod User & Password Finder\TNODUP.exe [2010-04-02 1811968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamersFirst LIVE!.lnk]
C:\PROGRA~2\GamersFirst\LIVE!\Live.exe [2011-05-03 2846320]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-05-27 21:33:41 ----D---- C:\rsit
2011-05-27 21:33:41 ----D---- C:\Program Files\trend micro
2011-05-27 21:02:20 ----D---- C:\Program Files (x86)\Debugging Tools for Windows (x86)
2011-05-27 20:56:42 ----D---- C:\Windows\Minidump
2011-05-27 18:25:31 ----D---- C:\Users\Eagle\AppData\Roaming\wargaming.net
2011-05-26 17:22:24 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-05-26 17:22:24 ----A---- C:\Windows\system32\FntCache.dll
2011-05-26 17:22:24 ----A---- C:\Windows\system32\DWrite.dll
2011-05-26 17:22:24 ----A---- C:\Windows\system32\d2d1.dll
2011-05-26 17:22:23 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-05-26 17:22:11 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-05-26 17:22:11 ----A---- C:\Windows\system32\poqexec.exe
2011-05-26 17:22:10 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-05-26 17:22:10 ----A---- C:\Windows\system32\prevhost.exe
2011-05-26 13:57:50 ----A---- C:\Windows\explorer.exe
2011-05-26 13:57:49 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-05-26 13:57:49 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-05-26 13:57:49 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-05-26 13:57:46 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-05-26 13:57:46 ----A---- C:\Windows\system32\XpsPrint.dll
2011-05-26 13:57:33 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-05-25 22:59:48 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2011-05-25 22:59:48 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2011-05-25 22:59:48 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2011-05-25 22:59:48 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2011-05-25 22:59:48 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2011-05-25 22:59:48 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2011-05-25 22:59:48 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2011-05-25 22:59:48 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2011-05-25 22:59:48 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2011-05-25 22:59:48 ----A---- C:\Windows\system32\OpenCL.dll
2011-05-25 22:59:48 ----A---- C:\Windows\system32\nvoglv64.dll
2011-05-25 22:59:48 ----A---- C:\Windows\system32\nvd3dumx.dll
2011-05-25 22:59:48 ----A---- C:\Windows\system32\nvcuvid.dll
2011-05-25 22:59:48 ----A---- C:\Windows\system32\nvcuvenc.dll
2011-05-25 22:59:48 ----A---- C:\Windows\system32\nvcuda.dll
2011-05-25 22:59:48 ----A---- C:\Windows\system32\nvcompiler.dll
2011-05-25 22:59:48 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2011-05-25 20:18:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-05-25 20:18:28 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-05-25 20:18:26 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-05-25 20:18:24 ----A---- C:\Windows\system32\mfc42u.dll
2011-05-25 20:18:24 ----A---- C:\Windows\system32\mfc42.dll
2011-05-25 20:18:23 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-05-25 20:18:23 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-05-25 20:18:20 ----A---- C:\Windows\system32\mshtml.dll
2011-05-25 20:18:19 ----A---- C:\Windows\system32\ieframe.dll
2011-05-25 20:18:17 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-05-25 20:18:17 ----A---- C:\Windows\system32\urlmon.dll
2011-05-25 20:18:14 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-05-25 20:18:13 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-05-25 20:18:13 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-05-25 20:18:13 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-05-25 20:18:13 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-05-25 20:18:13 ----A---- C:\Windows\system32\wininet.dll
2011-05-25 20:18:13 ----A---- C:\Windows\system32\jsproxy.dll
2011-05-25 20:18:13 ----A---- C:\Windows\system32\ieui.dll
2011-05-25 20:18:10 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-05-25 20:18:10 ----A---- C:\Windows\system32\EncDec.dll
2011-05-25 20:18:10 ----A---- C:\Windows\system32\CPFilters.dll
2011-05-25 20:18:09 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-05-25 20:18:09 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-05-25 20:18:09 ----A---- C:\Windows\system32\sbe.dll
2011-05-25 20:18:08 ----A---- C:\Windows\system32\kerberos.dll
2011-05-25 20:18:07 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-05-25 20:18:04 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-05-25 20:18:04 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-05-25 20:18:04 ----A---- C:\Windows\system32\drivers\srv.sys
2011-05-25 20:18:03 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-05-25 20:18:03 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-05-25 20:18:03 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-05-25 20:18:03 ----A---- C:\Windows\system32\fontsub.dll
2011-05-25 20:18:03 ----A---- C:\Windows\system32\atmlib.dll
2011-05-25 20:18:03 ----A---- C:\Windows\system32\atmfd.dll
2011-05-25 20:18:01 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-05-25 20:18:01 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-05-25 20:18:01 ----A---- C:\Windows\system32\vbscript.dll
2011-05-25 20:18:01 ----A---- C:\Windows\system32\jscript.dll
2011-05-25 20:17:59 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-05-25 20:17:59 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-05-25 20:17:59 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-05-25 20:17:59 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-05-25 20:17:59 ----A---- C:\Windows\system32\dnsapi.dll
2011-05-25 20:17:58 ----A---- C:\Windows\system32\win32k.sys
2011-05-25 20:17:56 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-05-25 20:17:56 ----A---- C:\Windows\system32\inetcomm.dll
2011-05-25 20:17:46 ----A---- C:\Windows\system32\winresume.exe
2011-05-25 20:17:46 ----A---- C:\Windows\system32\winload.exe
2011-05-25 20:17:46 ----A---- C:\Windows\system32\kdusb.dll
2011-05-25 20:17:46 ----A---- C:\Windows\system32\kdcom.dll
2011-05-25 20:17:46 ----A---- C:\Windows\system32\kd1394.dll
2011-05-25 20:17:45 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-05-25 20:16:13 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-05-25 20:16:13 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-05-25 20:16:13 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-05-25 20:16:13 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-05-25 19:32:13 ----D---- C:\Windows\Panther
2011-05-25 19:20:47 ----HD---- C:\$WINDOWS.~Q
2011-05-25 19:17:53 ----SHD---- C:\ProgramData\Šablony
2011-05-25 19:17:53 ----SHD---- C:\ProgramData\Plocha
2011-05-25 19:17:53 ----SHD---- C:\ProgramData\Oblíbené položky
2011-05-25 19:17:53 ----SHD---- C:\ProgramData\Nabídka Start
2011-05-25 19:17:53 ----SHD---- C:\ProgramData\Dokumenty
2011-05-25 19:17:53 ----SHD---- C:\ProgramData\Data aplikací
2011-05-25 19:16:59 ----HD---- C:\$INPLACE.~TR
2011-05-25 19:13:47 ----ASH---- C:\hiberfil.sys
2011-05-25 18:38:09 ----SD---- C:\Users\Eagle\AppData\Roaming\Microsoft
2011-05-25 18:38:09 ----D---- C:\Users\Eagle\AppData\Roaming\Media Center Programs
2011-05-25 18:33:59 ----D---- C:\Windows\Prefetch
2011-05-25 17:00:14 ----D---- C:\Windows\SYSWOW64\Wat
2011-05-25 17:00:14 ----D---- C:\Windows\system32\Wat
2011-05-25 16:23:29 ----A---- C:\bootsect.lxe.bak
2011-05-25 16:04:26 ----D---- C:\TokensBackup
2011-05-25 15:56:05 ----SHD---- C:\Config.Msi
2011-05-25 15:06:35 ----D---- C:\ProgramData\NVIDIA Corporation
2011-05-25 15:06:30 ----D---- C:\Program Files\NVIDIA Corporation
2011-05-24 20:13:29 ----D---- C:\FSDownloader
2011-05-24 13:47:06 ----D---- C:\Windows\pss
2011-05-23 22:09:59 ----D---- C:\ProgramData\PMB Files
2011-05-23 22:09:53 ----D---- C:\Program Files (x86)\Pando Networks
2011-05-23 22:09:47 ----D---- C:\Program Files (x86)\GamersFirst
2011-05-22 13:06:02 ----D---- C:\Users\Eagle\AppData\Roaming\Malwarebytes
2011-05-22 13:05:56 ----A---- C:\Windows\SYSWOW64\drivers\mbamswissarmy.sys
2011-05-22 13:05:55 ----D---- C:\ProgramData\Malwarebytes
2011-05-22 13:05:52 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-05-22 13:05:52 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-05-20 17:09:11 ----D---- C:\Users\Eagle\AppData\Roaming\Spyware Terminator
2011-05-20 17:09:08 ----D---- C:\ProgramData\Spyware Terminator
2011-05-20 17:09:08 ----D---- C:\Program Files (x86)\Spyware Terminator
2011-05-19 21:04:57 ----D---- C:\Program Files (x86)\Mad Scientist Productions
2011-05-19 12:25:57 ----D---- C:\ProgramData\IObit
2011-05-19 12:25:56 ----D---- C:\Program Files (x86)\IObit
2011-05-18 17:59:08 ----D---- C:\Users\Eagle\AppData\Roaming\Tributech
2011-05-16 23:35:21 ----D---- C:\Program Files (x86)\EasyHex
2011-05-13 22:38:57 ----D---- C:\Users\Eagle\AppData\Roaming\calibre
2011-05-13 22:37:45 ----D---- C:\Program Files (x86)\Calibre2
2011-05-07 18:25:35 ----D---- C:\Users\Eagle\AppData\Roaming\Mount&Blade With Fire and Sword
2011-05-03 15:04:01 ----D---- C:\Users\Eagle\AppData\Roaming\.minecraft
2011-05-01 14:30:45 ----A---- C:\Users\Eagle\AppData\Roaming\myMPQ.ini
2011-05-01 14:27:59 ----D---- C:\Program Files (x86)\StarCraft II
2011-05-01 02:51:11 ----D---- C:\Program Files (x86)\SopCast
2011-04-30 17:50:00 ----D---- C:\ProgramData\Blizzard Entertainment
2011-04-29 04:27:58 ----D---- C:\Program Files (x86)\Veetle

======List of files/folders modified in the last 1 months======

2011-05-27 21:33:42 ----D---- C:\Windows\Temp
2011-05-27 21:33:41 ----RD---- C:\Program Files
2011-05-27 21:27:30 ----D---- C:\Users\Eagle\AppData\Roaming\Skype
2011-05-27 21:21:10 ----D---- C:\Windows\system32\config
2011-05-27 21:02:23 ----SHD---- C:\Windows\Installer
2011-05-27 21:02:20 ----RD---- C:\Program Files (x86)
2011-05-27 21:01:55 ----SHD---- C:\System Volume Information
2011-05-27 20:57:25 ----D---- C:\Windows\system32\Tasks
2011-05-27 20:56:59 ----D---- C:\ProgramData\NVIDIA
2011-05-27 20:56:42 ----D---- C:\Windows
2011-05-27 19:33:11 ----D---- C:\Users\Eagle\AppData\Roaming\skypePM
2011-05-27 18:43:09 ----D---- C:\Windows\System32
2011-05-27 18:43:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-05-27 18:43:08 ----D---- C:\Windows\inf
2011-05-27 18:24:03 ----RSD---- C:\Windows\assembly
2011-05-27 18:00:23 ----D---- C:\Users\Eagle\AppData\Roaming\codeblocks
2011-05-27 13:34:01 ----D---- C:\Program Files (x86)\JDownloader
2011-05-26 19:27:46 ----D---- C:\Windows\winsxs
2011-05-26 18:37:33 ----D---- C:\Windows\SysWOW64
2011-05-26 17:22:18 ----D---- C:\Windows\system32\catroot2
2011-05-26 17:22:18 ----D---- C:\Windows\system32\catroot
2011-05-26 13:58:15 ----D---- C:\Windows\system32\drivers
2011-05-25 23:02:23 ----D---- C:\Windows\system32\DriverStore
2011-05-25 22:32:22 ----D---- C:\Windows\Microsoft.NET
2011-05-25 22:19:30 ----D---- C:\Windows\system32\wdi
2011-05-25 22:19:15 ----D---- C:\Windows\SYSWOW64\migration
2011-05-25 22:19:15 ----D---- C:\Windows\system32\migration
2011-05-25 22:19:15 ----D---- C:\Windows\system32\Boot
2011-05-25 22:19:15 ----D---- C:\Program Files\Internet Explorer
2011-05-25 22:19:15 ----D---- C:\Program Files (x86)\Internet Explorer
2011-05-25 20:25:53 ----D---- C:\Program Files (x86)\MSI Afterburner
2011-05-25 19:32:12 ----D---- C:\Windows\system32\oobe
2011-05-25 19:32:00 ----RASH---- C:\BOOTSECT.BAK
2011-05-25 19:31:57 ----SHD---- C:\Boot
2011-05-25 19:31:03 ----SD---- C:\Windows\system32\Microsoft
2011-05-25 19:22:39 ----D---- C:\Windows\SYSWOW64\en-US
2011-05-25 19:22:39 ----D---- C:\Windows\system32\en-US
2011-05-25 19:20:40 ----HD---- C:\ProgramData
2011-05-25 19:19:45 ----D---- C:\Windows\system32\restore
2011-05-25 19:18:19 ----D---- C:\Windows\SoftwareDistribution
2011-05-25 19:17:53 ----SHD---- C:\Recovery
2011-05-25 19:17:53 ----D---- C:\Windows\system32\Recovery
2011-05-25 19:17:53 ----D---- C:\Program Files\Windows NT
2011-05-25 19:15:27 ----D---- C:\Windows\rescache
2011-05-25 19:05:45 ----D---- C:\Windows\Registration
2011-05-25 19:04:58 ----D---- C:\Windows\system32\LogFiles
2011-05-25 19:00:09 ----RD---- C:\Users
2011-05-25 18:57:29 ----D---- C:\Users\Eagle\AppData\Roaming\Zoner
2011-05-25 18:57:29 ----D---- C:\Users\Eagle\AppData\Roaming\Wireshark
2011-05-25 18:57:29 ----D---- C:\Users\Eagle\AppData\Roaming\WinRAR
2011-05-25 18:57:28 ----D---- C:\Users\Eagle\AppData\Roaming\vlc
2011-05-25 18:57:28 ----D---- C:\Users\Eagle\AppData\Roaming\ValuSoft
2011-05-25 18:57:28 ----D---- C:\Users\Eagle\AppData\Roaming\uTorrent
2011-05-25 18:57:26 ----D---- C:\Users\Eagle\AppData\Roaming\Tropico3
2011-05-25 18:57:26 ----D---- C:\Users\Eagle\AppData\Roaming\The Creative Assembly
2011-05-25 18:57:26 ----D---- C:\Users\Eagle\AppData\Roaming\StreamTorrent
2011-05-25 18:57:25 ----D---- C:\Users\Eagle\AppData\Roaming\Sports Interactive
2011-05-25 18:57:25 ----D---- C:\Users\Eagle\AppData\Roaming\Sony
2011-05-25 18:57:22 ----D---- C:\Users\Eagle\AppData\Roaming\Scirra
2011-05-25 18:57:22 ----D---- C:\Users\Eagle\AppData\Roaming\PunkBuster
2011-05-25 18:57:22 ----D---- C:\Users\Eagle\AppData\Roaming\ProtectDISC
2011-05-25 18:57:22 ----D---- C:\Users\Eagle\AppData\Roaming\PC Suite
2011-05-25 18:57:22 ----D---- C:\Users\Eagle\AppData\Roaming\Opera
2011-05-25 18:57:22 ----D---- C:\Users\Eagle\AppData\Roaming\NVIDIA
2011-05-25 18:57:22 ----D---- C:\Users\Eagle\AppData\Roaming\Nokia
2011-05-25 18:57:21 ----D---- C:\Users\Eagle\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2011-05-25 18:57:21 ----D---- C:\Users\Eagle\AppData\Roaming\Mozilla
2011-05-25 18:57:21 ----D---- C:\Users\Eagle\AppData\Roaming\Microsoft Games
2011-05-25 18:57:13 ----D---- C:\Users\Eagle\AppData\Roaming\Macromedia
2011-05-25 18:57:13 ----D---- C:\Users\Eagle\AppData\Roaming\Leadertech
2011-05-25 18:57:13 ----D---- C:\Users\Eagle\AppData\Roaming\Kalypso Media
2011-05-25 18:57:13 ----D---- C:\Users\Eagle\AppData\Roaming\Identities
2011-05-25 18:57:13 ----D---- C:\Users\Eagle\AppData\Roaming\Hoyle FaceCreator
2011-05-25 18:57:13 ----D---- C:\Users\Eagle\AppData\Roaming\Hoyle
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\GHISLER
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\fretsonfire
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\fofix
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\ESET
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\dvdcss
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\Avanquest
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\AutoHideIP
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\Audacity
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\aliasworlds
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\Adobe
2011-05-25 18:57:12 ----D---- C:\Users\Eagle\AppData\Roaming\2K Sports
2011-05-25 18:48:11 ----D---- C:\Windows\twain_32
2011-05-25 18:48:11 ----D---- C:\Windows\SYSWOW64\xlive
2011-05-25 18:48:09 ----D---- C:\Windows\SYSWOW64\Macromed
2011-05-25 18:48:09 ----D---- C:\Windows\SYSWOW64\drivers
2011-05-25 18:48:07 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-05-25 18:47:55 ----DC---- C:\Windows\system32\DRVSTORE
2011-05-25 18:47:55 ----D---- C:\Windows\system32\NDF
2011-05-25 18:47:55 ----D---- C:\Windows\system32\drivers\etc
2011-05-25 18:47:52 ----D---- C:\Windows\system32\cs-CZ
2011-05-25 18:47:47 ----D---- C:\Windows\system
2011-05-25 18:47:47 ----D---- C:\Windows\ShellNew
2011-05-25 18:47:45 ----D---- C:\Windows\Replay Video Capture
2011-05-25 18:47:16 ----D---- C:\Windows\Logs
2011-05-25 18:47:16 ----D---- C:\Windows\LiveKernelReports
2011-05-25 18:46:59 ----D---- C:\Windows\Hired Guns
2011-05-25 18:46:56 ----D---- C:\Windows\Help
2011-05-25 18:46:55 ----RSD---- C:\Windows\Fonts
2011-05-25 18:46:23 ----D---- C:\Windows\Downloaded Program Files
2011-05-25 18:46:12 ----D---- C:\ProgramData\Ubisoft
2011-05-25 18:46:12 ----D---- C:\ProgramData\TVU Networks
2011-05-25 18:46:12 ----D---- C:\ProgramData\Trymedia
2011-05-25 18:46:11 ----D---- C:\ProgramData\Sun
2011-05-25 18:46:11 ----D---- C:\ProgramData\Sony
2011-05-25 18:46:11 ----D---- C:\ProgramData\Skype
2011-05-25 18:46:06 ----D---- C:\ProgramData\PC Suite
2011-05-25 18:46:04 ----D---- C:\ProgramData\NexonEU
2011-05-25 18:46:04 ----D---- C:\ProgramData\Nexon
2011-05-25 18:46:04 ----D---- C:\ProgramData\mpDRM
2011-05-25 18:46:04 ----D---- C:\ProgramData\Microsoft Help
2011-05-25 18:45:36 ----SD---- C:\ProgramData\Microsoft
2011-05-25 18:45:30 ----D---- C:\ProgramData\McAfee
2011-05-25 18:45:29 ----D---- C:\ProgramData\Installations
2011-05-25 18:45:29 ----D---- C:\ProgramData\Hewlett-Packard
2011-05-25 18:45:25 ----D---- C:\ProgramData\ESET
2011-05-25 18:45:25 ----D---- C:\ProgramData\EPSON
2011-05-25 18:45:24 ----D---- C:\ProgramData\Electronic Arts
2011-05-25 18:45:23 ----D---- C:\ProgramData\EA Core
2011-05-25 18:45:23 ----D---- C:\ProgramData\DivX
2011-05-25 18:45:23 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-05-25 18:45:22 ----D---- C:\ProgramData\Comodo
2011-05-25 18:45:21 ----D---- C:\ProgramData\Codemasters
2011-05-25 18:44:13 ----D---- C:\ProgramData\AutoHideIP
2011-05-25 18:44:13 ----D---- C:\ProgramData\aliasworlds
2011-05-25 18:44:13 ----D---- C:\ProgramData\Adobe
2011-05-25 18:44:13 ----D---- C:\Program Files (x86)\Xvid
2011-05-25 18:44:13 ----D---- C:\Program Files (x86)\WinPcap
2011-05-25 18:44:07 ----D---- C:\Program Files (x86)\VideoLAN
2011-05-25 18:44:06 ----D---- C:\Program Files (x86)\uTorrent
2011-05-25 18:44:06 ----D---- C:\Program Files (x86)\UnH Solutions
2011-05-25 18:44:05 ----D---- C:\Program Files (x86)\Ubisoft
2011-05-25 18:44:05 ----D---- C:\Program Files (x86)\TNod User & Password Finder
2011-05-25 18:44:05 ----D---- C:\Program Files (x86)\StreamTorrent 1.0
2011-05-25 18:44:05 ----D---- C:\Program Files (x86)\Steam
2011-05-25 18:43:57 ----RD---- C:\Program Files (x86)\Skype
2011-05-25 18:43:57 ----D---- C:\Program Files (x86)\Sony
2011-05-25 18:43:57 ----D---- C:\Program Files (x86)\Seznam.cz
2011-05-25 18:43:57 ----D---- C:\Program Files (x86)\Replay Video Capture
2011-05-25 18:43:55 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2011-05-25 18:43:55 ----D---- C:\Program Files (x86)\OpenAL
2011-05-25 18:43:55 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2011-05-25 18:43:54 ----D---- C:\Program Files (x86)\Nokia
2011-05-25 18:43:54 ----D---- C:\Program Files (x86)\MSI Kombustor
2011-05-25 18:43:54 ----D---- C:\Program Files (x86)\MSBuild
2011-05-25 18:43:54 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-05-25 18:43:54 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-05-25 18:43:54 ----D---- C:\Program Files (x86)\Microsoft WSE
2011-05-25 18:43:54 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2011-05-25 18:43:52 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-05-25 18:43:52 ----D---- C:\Program Files (x86)\Microsoft Office
2011-05-25 18:43:52 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2011-05-25 18:43:51 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2011-05-25 18:43:50 ----D---- C:\Program Files (x86)\Lame For Audacity
2011-05-25 18:43:28 ----D---- C:\Program Files (x86)\Java
2011-05-25 18:43:27 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-05-25 18:43:26 ----D---- C:\Program Files (x86)\Install Creator Pro
2011-05-25 18:43:26 ----D---- C:\Program Files (x86)\Hewlett-Packard
2011-05-25 18:43:25 ----D---- C:\Program Files (x86)\Google
2011-05-25 18:43:07 ----D---- C:\Program Files (x86)\Frets on Fire
2011-05-25 18:43:07 ----D---- C:\Program Files (x86)\fofix-4.0.0alpha1
2011-05-25 18:43:04 ----D---- C:\Windows\system32\CodeIntegrity
2011-05-25 18:43:02 ----D---- C:\Program Files (x86)\epson
2011-05-25 18:43:02 ----D---- C:\Program Files (x86)\Electronic Arts
2011-05-25 18:43:01 ----D---- C:\Program Files (x86)\DsNET Corp
2011-05-25 18:43:01 ----D---- C:\Program Files (x86)\DivX
2011-05-25 18:43:00 ----D---- C:\Program Files (x86)\DirectVobSub
2011-05-25 18:43:00 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2011-05-25 18:43:00 ----D---- C:\Program Files (x86)\Common Files
2011-05-25 18:42:50 ----D---- C:\Program Files (x86)\CodeBlocks
2011-05-25 18:42:40 ----D---- C:\Program Files (x86)\Cisco Packet Tracer 5.3
2011-05-25 18:42:20 ----D---- C:\Program Files (x86)\BitAnalyzer
2011-05-25 18:42:20 ----D---- C:\Program Files (x86)\AutoHideIP
2011-05-25 18:42:18 ----D---- C:\Program Files (x86)\Audacity 1.3 Beta
2011-05-25 18:42:10 ----D---- C:\Program Files (x86)\Adobe
2011-05-25 18:42:04 ----D---- C:\Program Files\Zoner
2011-05-25 18:42:04 ----D---- C:\Program Files\Wireshark
2011-05-25 18:42:03 ----D---- C:\Program Files\WinRAR
2011-05-25 18:42:00 ----D---- C:\Program Files\VS Revo Group
2011-05-25 18:41:56 ----D---- C:\Program Files\Sony
2011-05-25 18:41:56 ----D---- C:\Program Files\Opera
2011-05-25 18:41:50 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 4
2011-05-25 18:41:48 ----D---- C:\Program Files\Microsoft Synchronization Services
2011-05-25 18:41:48 ----D---- C:\Program Files\Microsoft Sync Framework
2011-05-25 18:41:48 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2011-05-25 18:41:47 ----D---- C:\Program Files\Microsoft Office
2011-05-25 18:41:13 ----D---- C:\Program Files\Microsoft Analysis Services
2011-05-25 18:41:12 ----D---- C:\Program Files\ESET
2011-05-25 18:41:12 ----D---- C:\Program Files\EPSON
2011-05-25 18:41:11 ----D---- C:\Program Files\Defraggler
2011-05-25 18:41:09 ----D---- C:\Program Files\COMODO
2011-05-25 18:41:08 ----D---- C:\Program Files\Common Files\System
2011-05-25 18:41:08 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-05-25 18:41:03 ----D---- C:\Program Files\Common Files\DESIGNER
2011-05-25 18:41:03 ----D---- C:\Program Files\Common Files
2011-05-25 18:41:03 ----D---- C:\Program Files\CCleaner
2011-05-25 18:41:02 ----D---- C:\Windows\Tasks
2011-05-25 18:37:23 ----D---- C:\Windows\system32\sysprep
2011-05-25 18:37:18 ----D---- C:\Windows\debug
2011-05-25 18:35:45 ----D---- C:\Windows\system32\drivers\UMDF
2011-05-25 18:34:13 ----D---- C:\Windows\CSC
2011-05-22 17:45:05 ----A---- C:\Windows\system32\guard64.dll
2011-05-22 17:45:04 ----A---- C:\Windows\SYSWOW64\guard32.dll
2011-05-08 15:26:46 ----D---- C:\Users\Eagle\AppData\Roaming\DAEMON Tools Lite

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [2006-06-14 14192]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2011-05-22 252344]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2011-05-22 41712]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-05-25 254528]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2011-05-25 92688]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 168544]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-07-29 171152]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-07-29 50624]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2010-07-07 50696]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-07-29 33632]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35344]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-05-22 2506472]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2010-08-12 810144]
R2 LicCtrlService;LicCtrl Service; C:\Windows\runservice.exe [2011-03-12 2560]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-04-07 1012328]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe [2011-05-20 948775]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-07 378472]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-03 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-08-12 42360]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-03 136176]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2010-06-25 117264]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-03-27 403240]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;Služba Technologie aktivace Windows; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-05-25 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Re: fltmgr.sys způsobuje BSOD

Napsal: 27 kvě 2011 22:01
od Rudy
Log vypadá čistý. Co se týká ComodoIS, máte v něm zapnut pouze firewall? V opačném případě by mohlo jít o kolizi rez. štítů.

Re: fltmgr.sys způsobuje BSOD

Napsal: 27 kvě 2011 22:50
od LosEagle
Ano pouze firewall ikdyž já jej většinou vypínám, protože často pracuji se sítí a nebaví mě pořád dokola přidávat vyjímky. Jako antivir používám ESET :).

Re: fltmgr.sys způsobuje BSOD

Napsal: 28 kvě 2011 11:12
od Rudy
Koukám, že eset máte také komplexní balík, což znamená, že rovněž obsahuje firewall. Obávám se, že váš problém způsobují kolize rez štítů. K tomu ještě máte spyware terminatora, což, je další rezident. Dopručuji vše povypínat a nechat běžet je ESS. Po testu uvidíte sám, zda se problém znovu objeví.

Re: fltmgr.sys způsobuje BSOD

Napsal: 28 kvě 2011 12:20
od LosEagle
No Firewall mám u ESS vyplý a používám ten od Comoda, nicméně Spyware Terminator mi skutečně běží. Nechám tedy zaplé pouze ESS a dám vědět, když mi to zase spadne.

Děkuji za radu

Re: fltmgr.sys způsobuje BSOD

Napsal: 28 kvě 2011 12:41
od Rudy
Zatím není zač!