Preventivní kontrola

[Bajt]

Zde log :
Logfile of random's system information tool 1.08 (written by random/random)
Run by Bajt at 2011-06-05 21:41:58
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 110 GB (72%) free of 153 GB
Total RAM: 4095 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:44:30, on 5.6.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil VoIP Plugin.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
C:\ProgramData\Easybits GO\EasyBitsGO.exe
C:\Program Files (x86)\Microsoft Games for Windows - LIVE\Client\GFWLClient.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Bajt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Microsoft Office 2007\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "D:\Programy\Microsoft Office 2007\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [DelReg] C:\Program Files (x86)\MSI\OverclockingCenter\DelReg.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Electronic Arts\EADM\EADMUI.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: starter.txt
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Programy\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programy\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programy\Microsoft Office 2007\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWOW64\skype4com.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10332 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe"
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe" silentrun
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\Microsoft IntelliType Pro\itype.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
WLIDSvcM.exe 2056
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil VoIP Plugin.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe" /SILENT
"C:\ProgramData\Easybits GO\EasyBitsGO.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Microsoft Games for Windows - LIVE\Client\GFWLClient.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=6036.db0ec80.1319526910 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" "Mozilla.Firefox.4.0.1" -omnijar C:\Program Files (x86)\Mozilla Firefox\omni.jar 6036 \\.\pipe\gecko-crash-server-pipe.6036 plugin
"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\Bajt\AppData\Local\Temp\MinecraftSP (gogasos).rar"
"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\Bajt\AppData\Local\Temp\ModLoader.zip"
"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\Bajt\AppData\Local\Temp\TooManyItems2011_05_28.zip"
"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\Bajt\AppData\Roaming\.minecraft\bin\minecraft.jar"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe15_ Global\UsGthrCtrlFltPipeMssGthrPipe15 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\Bajt\Desktop\RSITx64.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\Programy\Microsoft Office 2007\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-04-15 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-05-22 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-04-20 11780712]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-01-12 2918656]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2726728]
"itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2009-06-01 2342800]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"EADM"=C:\Program Files (x86)\Electronic Arts\EADM\EADMUI.exe [2011-04-29 17529856]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-09 336384]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"GrooveMonitor"=D:\Programy\Microsoft Office 2007\Office12\GrooveMonitor.exe [2008-10-25 31072]
"DelReg"=C:\Program Files (x86)\MSI\OverclockingCenter\DelReg.exe [2008-12-04 196608]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-01-07 253672]
"BtTray"=C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe [2009-02-27 278016]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2011-05-25 1951112]

C:\Users\Bajt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
starter.txt

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\Programy\Microsoft Office 2007\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-06-05 21:41:58 ----D---- C:\rsit
2011-06-05 21:41:58 ----D---- C:\Program Files\trend micro
2011-06-05 13:55:20 ----D---- C:\Program Files (x86)\OCCT
2011-06-05 11:33:30 ----D---- C:\Windows\SYSWOW64\xlive
2011-06-05 11:33:30 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2011-06-05 11:33:02 ----SHD---- C:\Config.Msi
2011-06-05 07:46:17 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-05-31 18:11:25 ----D---- C:\Users\Bajt\AppData\Roaming\InstallShield
2011-05-31 18:09:29 ----A---- C:\Windows\tmp2Level.ini
2011-05-31 18:09:29 ----A---- C:\Windows\level.ini
2011-05-31 16:00:02 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2011-05-31 15:57:02 ----D---- C:\Users\Bajt\AppData\Roaming\Hamachi
2011-05-29 11:36:13 ----D---- C:\Users\Bajt\AppData\Roaming\go
2011-05-29 11:36:11 ----D---- C:\ProgramData\Easybits GO
2011-05-28 17:07:00 ----A---- C:\Windows\BsMobileModel.ini
2011-05-28 13:36:43 ----A---- C:\Windows\SYSWOW64\SHORTCUT.INI
2011-05-28 13:36:40 ----A---- C:\Windows\SYSWOW64\REMOTEDEVICE.INI
2011-05-28 13:34:05 ----A---- C:\Windows\SYSWOW64\LOCALSERVICE.INI
2011-05-28 13:34:05 ----A---- C:\Windows\SYSWOW64\LOCALDEVICE.INI
2011-05-28 13:09:14 ----D---- C:\Users\Bajt\AppData\Roaming\DisneyInteractiveStudios
2011-05-28 13:01:49 ----D---- C:\Program Files\WBFS
2011-05-28 11:47:47 ----A---- C:\Windows\SYSWOW64\BSPRINT.INI
2011-05-28 11:46:41 ----D---- C:\Program Files (x86)\IVT Corporation
2011-05-26 19:05:39 ----D---- C:\Users\Bajt\AppData\Roaming\.minecraft
2011-05-26 17:05:57 ----D---- C:\ProgramData\vsosdk
2011-05-26 16:02:47 ----AD---- C:\ProgramData\TEMP
2011-05-26 16:02:26 ----D---- C:\Users\Bajt\AppData\Roaming\AnvSoft
2011-05-26 15:50:20 ----D---- C:\Users\Bajt\AppData\Roaming\Xilisoft
2011-05-26 15:35:25 ----D---- C:\Users\Bajt\AppData\Roaming\Haenlein-Software
2011-05-26 15:35:24 ----D---- C:\Program Files (x86)\DVR-Studio Pro
2011-05-26 15:32:05 ----A---- C:\Windows\SYSWOW64\sipr3260.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\wvc1dmod.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\vp7vfw.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\drv43260.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\drv33260.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\drv23260.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\cook3260.dll
2011-05-26 15:32:03 ----D---- C:\Program Files (x86)\VSO
2011-05-22 14:07:45 ----D---- C:\Users\Bajt\AppData\Roaming\Mobile Atlas Creator
2011-05-22 06:56:54 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-05-22 06:56:54 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-05-22 06:56:54 ----A---- C:\Windows\SYSWOW64\java.exe
2011-05-22 06:56:34 ----D---- C:\Program Files (x86)\Java
2011-05-19 14:02:27 ----D---- C:\Program Files (x86)\AMD APP
2011-05-18 17:45:54 ----D---- C:\.jagex_cache_32
2011-05-17 15:36:40 ----D---- C:\Users\Bajt\AppData\Roaming\minecraft
2011-05-14 20:11:35 ----D---- C:\Users\Bajt\AppData\Roaming\PunkBuster
2011-05-14 20:10:55 ----D---- C:\Program Files (x86)\Ubisoft
2011-05-14 17:56:50 ----A---- C:\Windows\007DVDCopy.INI
2011-05-14 17:56:10 ----A---- C:\Windows\EurekaLog.ini
2011-05-14 17:54:39 ----A---- C:\Windows\SYSWOW64\drivers\PCOUFFIN.SYS
2011-05-14 17:50:57 ----D---- C:\Users\Bajt\AppData\Roaming\Vso
2011-05-14 17:50:57 ----A---- C:\Windows\system32\drivers\pcouffin.sys
2011-05-14 17:50:57 ----A---- C:\Users\Bajt\AppData\Roaming\pcouffin.sys
2011-05-14 17:50:57 ----A---- C:\Users\Bajt\AppData\Roaming\inst.exe
2011-05-14 12:37:29 ----D---- C:\Program Files (x86)\LEGO Software
2011-05-14 12:35:41 ----D---- C:\ProgramData\National Instruments
2011-05-14 12:27:07 ----D---- C:\VXIPNP
2011-05-14 12:27:07 ----D---- C:\Program Files (x86)\National Instruments
2011-05-14 12:15:05 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-05-14 12:15:05 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-05-14 12:14:59 ----A---- C:\Windows\explorer.exe
2011-05-14 12:14:58 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-05-14 12:14:56 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-05-14 12:14:56 ----A---- C:\Windows\system32\XpsPrint.dll
2011-05-14 12:14:42 ----A---- C:\Windows\system32\FntCache.dll
2011-05-14 12:14:41 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-05-14 12:14:41 ----A---- C:\Windows\system32\d2d1.dll
2011-05-14 12:14:40 ----A---- C:\Windows\system32\DWrite.dll
2011-05-14 12:14:39 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-05-14 12:14:11 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-05-14 12:14:11 ----A---- C:\Windows\system32\d3d10_1.dll
2011-05-14 12:12:55 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-05-14 12:12:55 ----A---- C:\Windows\system32\prevhost.exe
2011-05-14 12:09:30 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-05-14 12:09:30 ----A---- C:\Windows\system32\poqexec.exe
2011-05-12 17:11:22 ----D---- C:\Program Files\Adobe
2011-05-12 17:10:03 ----D---- C:\Program Files\Common Files\Adobe
2011-05-11 06:21:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-05-11 06:21:20 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-05-11 06:21:18 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-05-08 19:41:55 ----D---- C:\Users\Bajt\AppData\Roaming\Jpeg Resampler
2011-05-08 19:41:53 ----D---- C:\Program Files (x86)\JpegResampler2010
2011-05-08 12:40:12 ----D---- C:\Program Files\CPUID
2011-05-08 12:40:12 ----A---- C:\Windows\system32\drivers\cpuz135_x64.sys
2011-05-08 09:26:21 ----A---- C:\Windows\ver5.5.14.0.txt
2011-05-08 09:26:21 ----A---- C:\Windows\nvsulib.dll
2011-05-08 09:26:21 ----A---- C:\Windows\nvoclock.sys
2011-05-08 09:26:21 ----A---- C:\Windows\nvoclk64.sys
2011-05-08 09:26:21 ----A---- C:\Windows\Nvgpio.dll
2011-05-08 09:26:21 ----A---- C:\Windows\NVGfxOgl.dll
2011-05-08 09:26:21 ----A---- C:\Windows\NVBenchMarks.dll
2011-05-08 09:26:21 ----A---- C:\Windows\ntuneoem.dll
2011-05-08 09:26:21 ----A---- C:\Windows\NTuneGpu.dll
2011-05-08 09:26:21 ----A---- C:\Windows\msvcr71.dll
2011-05-08 09:26:21 ----A---- C:\Windows\msvcp71.dll
2011-05-08 09:26:21 ----A---- C:\Windows\MFC71.dll
2011-05-08 09:26:21 ----A---- C:\Windows\AutoTuneScript.dll
2011-05-08 09:26:19 ----D---- C:\Program Files (x86)\MSI
2011-05-07 12:29:39 ----D---- C:\Program Files (x86)\Microsoft Works
2011-05-07 12:29:21 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2011-05-07 12:29:03 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-05-07 12:26:59 ----D---- C:\Program Files\Microsoft Office
2011-05-07 12:26:53 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2011-05-07 12:26:21 ----D---- C:\ProgramData\Microsoft Help
2011-05-07 11:00:17 ----D---- C:\Program Files (x86)\Camtech
2011-05-07 09:20:50 ----D---- C:\Users\Bajt\AppData\Roaming\Rovio

======List of files/folders modified in the last 1 months======

2011-06-05 21:44:30 ----D---- C:\Windows\Temp
2011-06-05 21:44:04 ----D---- C:\Users\Bajt\AppData\Roaming\Skype
2011-06-05 21:41:58 ----RD---- C:\Program Files
2011-06-05 18:08:31 ----A---- C:\Windows\SYSWOW64\bscs.ini
2011-06-05 13:55:20 ----RD---- C:\Program Files (x86)
2011-06-05 13:31:30 ----D---- C:\Windows\SysWOW64
2011-06-05 13:31:26 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-06-05 12:52:09 ----D---- C:\Windows\system32\config
2011-06-05 12:43:41 ----D---- C:\Windows\System32
2011-06-05 12:43:41 ----D---- C:\Windows\inf
2011-06-05 12:43:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-06-05 11:37:48 ----SHD---- C:\Windows\Installer
2011-06-05 11:37:33 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-06-05 11:37:03 ----SHD---- C:\System Volume Information
2011-06-05 11:34:42 ----SD---- C:\Users\Bajt\AppData\Roaming\Microsoft
2011-06-05 07:46:21 ----SD---- C:\ProgramData\Microsoft
2011-06-05 03:41:22 ----D---- C:\ProgramData\Skype Extras
2011-06-05 03:22:51 ----D---- C:\Windows\winsxs
2011-06-05 03:18:12 ----RSD---- C:\Windows\assembly
2011-06-05 03:18:12 ----D---- C:\Windows\Microsoft.NET
2011-06-05 03:09:58 ----RSD---- C:\Windows\Fonts
2011-06-05 03:08:11 ----A---- C:\Windows\win.ini
2011-06-04 10:26:30 ----D---- C:\Windows\SYSWOW64\en-US
2011-06-04 10:26:30 ----D---- C:\Windows\system32\en-US
2011-06-04 10:23:08 ----D---- C:\Windows
2011-06-04 10:23:02 ----D---- C:\Windows\SoftwareDistribution
2011-06-03 23:09:08 ----D---- C:\ProgramData\Electronic Arts
2011-05-31 18:13:16 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-05-31 16:20:09 ----D---- C:\Users\Bajt\AppData\Roaming\vlc
2011-05-31 16:00:03 ----D---- C:\Windows\system32\drivers
2011-05-31 15:40:51 ----D---- C:\Windows\system32\NDF
2011-05-29 11:36:11 ----HD---- C:\ProgramData
2011-05-29 10:00:37 ----D---- C:\Users\Bajt\AppData\Roaming\skypePM
2011-05-28 19:57:05 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2011-05-28 15:09:10 ----D---- C:\Windows\Prefetch
2011-05-28 11:47:24 ----D---- C:\Windows\system32\catroot
2011-05-28 11:47:23 ----D---- C:\Windows\system32\DriverStore
2011-05-28 11:46:44 ----D---- C:\Windows\SYSWOW64\drivers
2011-05-23 20:29:16 ----D---- C:\Windows\system32\LogFiles
2011-05-22 06:57:07 ----D---- C:\Program Files (x86)\Common Files
2011-05-22 06:56:35 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-05-21 09:16:44 ----D---- C:\Windows\system32\Tasks
2011-05-15 13:02:24 ----D---- C:\Windows\rescache
2011-05-15 07:07:36 ----D---- C:\Windows\AppPatch
2011-05-14 22:18:31 ----D---- C:\ProgramData\Ubisoft
2011-05-14 21:12:39 ----D---- C:\Windows\debug
2011-05-14 14:20:13 ----D---- C:\Users\Bajt\AppData\Roaming\Dropbox
2011-05-14 12:35:47 ----D---- C:\Windows\system32\catroot2
2011-05-14 12:23:35 ----D---- C:\Users\Bajt\AppData\Roaming\Adobe
2011-05-14 12:11:03 ----D---- C:\Windows\Logs
2011-05-14 12:07:36 ----D---- C:\ProgramData\Adobe
2011-05-14 11:31:49 ----A---- C:\Windows\MobiTrans.ini
2011-05-12 17:10:03 ----D---- C:\Program Files\Common Files
2011-05-12 17:09:11 ----D---- C:\Program Files (x86)\Adobe
2011-05-12 03:19:58 ----D---- C:\Windows\system32\wdi
2011-05-12 03:01:55 ----A---- C:\Windows\system32\MRT.exe
2011-05-08 08:44:47 ----D---- C:\Windows\system32\drivers\UMDF
2011-05-07 12:29:29 ----D---- C:\Program Files (x86)\MSBuild
2011-05-07 12:29:20 ----D---- C:\Windows\ShellNew

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BtHidBus;Bluetooth HID Bus Service; C:\Windows\System32\Drivers\BtHidBus.sys [2009-01-07 24840]
R0 hotcore3;hc3ServiceName; C:\Windows\system32\DRIVERS\hotcore3.sys [2011-01-21 37456]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-04-20 254528]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 Uim_IM;Universal Image Mounter Plugin; C:\Windows\System32\Drivers\Uim_IMx64.sys [2011-01-21 528464]
R1 UimBus;Universal Image Mounter Controller; C:\Windows\system32\DRIVERS\uimx64.sys [2011-01-21 53840]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-12-21 170640]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-12-21 50624]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-20 9319936]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-04-20 306176]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
R3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys [2009-01-03 47880]
R3 btnetBUs;Bluetooth PAN Bus Service; C:\Windows\System32\Drivers\btnetBus.sys [2008-12-07 35848]
R3 dc3d;MS Hardware Device Detection Driver (USB); C:\Windows\system32\DRIVERS\dc3d.sys [2010-07-21 51600]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-12-21 34144]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-04-20 2753512]
R3 IvtBtBUs;IVT Bluetooth Bus Service; C:\Windows\System32\Drivers\IvtBtBus.sys [2008-07-02 31624]
R3 NuidFltr;NUID filter driver; C:\Windows\system32\DRIVERS\NuidFltr.sys [2010-07-21 23952]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-04-20 428136]
R3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys [2008-01-21 17032]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys [2009-01-08 42888]
R3 VHidMinidrv;Bluetooth HID Device Service; C:\Windows\system32\drivers\VHIDMini.sys [2008-12-22 20872]
R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-08-21 79976]
S2 cpuz135;cpuz135; \??\C:\Windows\system32\drivers\cpuz135_x64.sys [2010-11-09 21992]
S3 AODDriver4.0;AODDriver4.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys []
S3 cpuz134;cpuz134; \??\C:\Users\Bajt\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 DualCoreCenter;DualCoreCenter; \??\C:\Program Files (x86)\MSI\OverclockingCenter\NTGLM7X64.sys [2010-04-12 44344]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2011-05-14 82816]
S3 Point64;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point64.sys [2010-07-21 45456]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RushTopDevice_J;RushTopDevice_J; \??\C:\Program Files (x86)\MSI\OverclockingCenter\RushJ64.sys [2009-03-05 33080]
S3 RushTopDevice2;RushTopDevice2; \??\C:\Program Files (x86)\MSI\OverclockingCenter\RushTop64.sys [2008-12-19 75576]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-04-20 203776]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-09 365568]
R2 AMD Reservation Manager;AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [2009-02-27 850432]
R2 BsMobileCS;BsMobileCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-01-12 810144]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-05-25 2275720]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-05-28 75136]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-15 2280312]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe [2009-02-27 191488]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2011-01-12 42360]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Programy\Microsoft Office 2007\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-04-21 1255736]

-----------------EOF-----------------


A ještě mám jeden problém, po startu se samovolně spouští nějáký program Origin, který jsem vůbec neinstaloval.

Děkuji

[chodnik74]

Dobrý večer
hned na to mrknu

[chodnik74]

Aktualizujte IE 9 + všechny dostupné aktualizace systému
Odinstalujte Easybits GO(vteřil se novým skype)
vložte mi sem obsah souboru C:\Users\Bajt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\starter.txt
Vložte mi sem obsah souboru info.txt ,který najdete v C:\rsit\

[Bajt]

Obsah souboru info.txt :
info.txt logfile of random's system information tool 1.08 2011-06-05 21:44:32

======Uninstall list======

Update for Microsoft Office 2007 (KB2508958)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}
-->MsiExec /X{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
Adobe AIR-->C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Community Help-->msiexec /qb /x {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Community Help-->MsiExec.exe /I{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10p_ActiveX.exe -maintain activex
Adobe Flash Player 10 ActiveX-->MsiExec.exe /X{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}
Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10q_Plugin.exe -maintain plugin
Adobe Flash Professional CS5-->C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\PDApp.exe --appletID="DWA_UI" --appletVersion="1.0" --mode="Uninstall" --mediaSignature="{CFC9F871-7C40-40B6-BE4A-B98A5B309716}"
Adobe Photoshop CS5-->C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\PDApp.exe --appletID="DWA_UI" --appletVersion="1.0" --mode="Uninstall" --mediaSignature="{15FEDA5F-141C-4127-8D7E-B962D1742728}"
Adobe Reader X (10.0.1) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AA0000000001}
AMD APP SDK Runtime-->MsiExec.exe /I{503F672D-6C84-448A-8F8F-4BC35AC83441}
AMD Drag and Drop Transcoding-->MsiExec.exe /X{8A61B820-598D-05B2-5F8D-7388E15AE2DB}
Ashampoo Burning Studio Elements 10.0.4-->"D:\Programy\Ashampoo Burning Studio Elements\unins000.exe"
Assassin's Creed Brotherhood-->"C:\Program Files (x86)\InstallShield Installation Information\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}\setup.exe" -runfromtemp -l0x0005 -removeonly
ATI Catalyst Install Manager-->msiexec /q/x{4044201A-8576-2999-1166-96C5593F3CFF} REBOOT=ReallySuppress
Battlefield: Bad Company™ 2-->MsiExec.exe /X{3AC8457C-0385-4BEA-A959-E095F05D6D67}
Bluesoleil 6.4.249.0-->MsiExec.exe /X{23A2D29F-4E89-42F8-A30B-6BB8A192926B}
Canon Inkjet Printer Driver Add-On Module-->C:\Program Files\Common Files\Canon\IJ\InboxPrnV100\SETUP.EXE -R
Canon iP4200-->"C:\Windows\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4200\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4200 /L0x0005
Canon My Printer-->C:\Program Files\Canon\MyPrinter\uninst.exe uninst.ini uinstrsc.dll
Canon Utilities Easy-PhotoPrint-->C:\Program Files (x86)\Canon\Easy-PhotoPrint\uninst.exe uninst.ini
Catalyst Control Center - Branding-->MsiExec.exe /I{19A492A0-888F-44A0-9B21-D91700763F62}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
ConvertXtoDVD 4.1.4.338-->"C:\Program Files (x86)\VSO\ConvertX\4\unins000.exe"
CPUID CPU-Z 1.57.1-->"C:\Program Files\CPUID\CPU-Z\unins000.exe"
CPUID HWMonitor 1.17-->"C:\Program Files\CPUID\HWMonitor\unins000.exe"
DAEMON Tools Lite-->C:\Program Files (x86)\DAEMON Tools Lite\uninst.exe
DiRT 3 version 1.0-->"D:\Hry\DiRT 3\unins000.exe"
DiRT 3-->MsiExec.exe /I{434D0FA0-1558-4D8E-AC3D-BD1000008200} ARPNOREPAIR=\"1\"
DiRT2-->"C:\Program Files (x86)\InstallShield Installation Information\{52D1D62C-FEAB-4580-849E-1DB624BADBBD}\setup.exe" -runfromtemp -l0x0009 -removeonly
EA Download Manager-->C:\Program Files (x86)\Electronic Arts\EADM\EADMUninstall.exe
FlatOut Ultimate Carnage-->D:\Hry\FlatOut Ultimate Carnage\Uninstall.exe
FormatFactory 2.50-->C:\Program Files (x86)\FreeTime\FormatFactory\uninst.exe
Grand Theft Auto IV-->"C:\Program Files (x86)\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -runfromtemp -l0x0009 -removeonly
Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8301}
Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8302}
Java(TM) 6 Update 25-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216025FF}
Jpeg Resampler Vs 6+-->"C:\Program Files (x86)\JpegResampler2010\unins000.exe"
Kodu Game Lab-->MsiExec.exe /I{6DD1D809-EE6F-49EE-B3A4-D406C75AEC49}
LEGO MINDSTORMS NXT - English Language Pack-->MsiExec.exe /X{AE658318-4090-4AFF-9E27-1BBD978F8BBF}
LEGO MINDSTORMS NXT Driver for x64-->MsiExec.exe /I{54B94792-8FD4-460E-998E-3F8A8598AC02}
LEGO MINDSTORMS NXT Driver-->MsiExec.exe /I{088C8B98-3D9F-4CBD-B37B-A32D9580C4EE}
LEGO MINDSTORMS NXT Dynamic Block Update-->MsiExec.exe /I{A14625FE-ED6E-4268-B709-9FF6AF2240BF}
LEGO MINDSTORMS NXT Software v1.0-->MsiExec.exe /X{A1D8E398-E403-4CB6-9B07-FF912A35D7FF}
LEGO® Pirates of the Caribbean The Video Game-->MsiExec.exe /X{64958DA4-79D3-43FD-AF06-720DAD044F9E}
LogMeIn Hamachi-->C:\Windows\SysWOW64\\msiexec.exe /i {EEF985E8-8B36-4230-B174-117A2381C17F} REMOVE=ALL
LogMeIn Hamachi-->MsiExec.exe /I{EEF985E8-8B36-4230-B174-117A2381C17F}
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{F2508213-9989-4E85-A078-72BE483917EF}
Microsoft Games for Windows Marketplace-->MsiExec.exe /X{4CB0307C-565E-4441-86BE-0DF2E4FB828C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {E64BA721-2310-4B55-BE5A-2925F9706192}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-002A-0405-1000-0000000FF1CE} /uninstall {E12F9D31-4025-4BC6-B1B2-AB262C5580B0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0405-0000-0000000FF1CE} /uninstall {E12F9D31-4025-4BC6-B1B2-AB262C5580B0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00BA-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0405-0000-0000000FF1CE} /uninstall {294B4278-CF7B-40B9-86A1-2D3FF0C2C524}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-041B-0000-0000000FF1CE} /uninstall {10EC59E5-9BCE-4884-BB1A-E28627220232}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Czech) 2007-->MsiExec.exe /X{90120000-002A-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319-->MsiExec.exe /X{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319-->MsiExec.exe /X{196BB40D-1578-3D01-B289-BEFC77A11A1E}
Microsoft Xbox 360 Accessories 1.2-->MsiExec.exe /X{D9C50188-12D5-4D3E-8F00-682346C2AA5F}
Microsoft XNA Framework Redistributable 3.1-->MsiExec.exe /I{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}
Microsoft_VC80_ATL_x86_x64-->MsiExec.exe /I{925D058B-564A-443A-B4B2-7E90C6432E55}
Microsoft_VC80_ATL_x86-->MsiExec.exe /I{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
Microsoft_VC80_CRT_x86_x64-->MsiExec.exe /I{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}
Microsoft_VC80_CRT_x86-->MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
Microsoft_VC80_MFC_x86_x64-->MsiExec.exe /I{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}
Microsoft_VC80_MFC_x86-->MsiExec.exe /I{D1A19B02-817E-4296-A45B-07853FD74D57}
Microsoft_VC80_MFCLOC_x86_x64-->MsiExec.exe /I{1E9FC118-651D-4934-97BE-E53CAE5C7D45}
Microsoft_VC80_MFCLOC_x86-->MsiExec.exe /I{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
Microsoft_VC90_ATL_x86_x64-->MsiExec.exe /I{8557397C-A42D-486F-97B3-A2CBC2372593}
Microsoft_VC90_ATL_x86-->MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
Microsoft_VC90_CRT_x86_x64-->MsiExec.exe /I{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}
Microsoft_VC90_CRT_x86-->MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403}
Microsoft_VC90_MFC_x86_x64-->MsiExec.exe /I{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}
Microsoft_VC90_MFC_x86-->MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
Mozilla Firefox 4.0.1 (x86 cs)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
Need For Speed™ World-->"D:\Hry\Need For Speed World\unins000.exe"
NVIDIA PhysX-->MsiExec.exe /X{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
OCCT Perestroika 3.1.0-->"C:\Program Files (x86)\OCCT\unins000.exe"
OpenAL-->"C:\Program Files (x86)\OpenAL\OpenALwEAX.exe" /U
OverclockingCenter-->"C:\Program Files (x86)\MSI\OverclockingCenter\unins000.exe"
Paragon Backup & Recovery™ 2011 (Advanced) Free-->MsiExec.exe /I{C268B5E1-A5DA-11DF-A289-005056C00008}
Password Reveal Pro-->C:\PROGRA~2\Camtech\PASSWO~1\UNWISE.EXE C:\PROGRA~2\Camtech\PASSWO~1\INSTALL.LOG
PDF Settings CS5-->MsiExec.exe /I{A78FE97A-C0C8-49CE-89D0-EDD524A17392}
Portal 2-->"D:\Hry\Portal 2\unins000.exe"
PSPad editor-->"C:\Program Files (x86)\PSPad editor\Uninst\unins000.exe"
PunkBuster Services-->D:\Hry\Battlefield - Play4free\pbsvc_p4f.exe -u
Rapture3D 2.3.22 Game-->"C:\Program Files (x86)\BRS\unins000.exe"
Realtek Ethernet Controller Driver-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly
Recuva-->"C:\Program Files\Recuva\uninst.exe"
Rockstar Games Social Club-->"C:\Program Files (x86)\InstallShield Installation Information\{08B3869E-D282-424C-9AFC-870E04A4BA14}\setup.exe" -runfromtemp -l0x0009 -removeonly
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {F66C3466-1FDB-347C-B3AE-FB6C50627B10} /parameterfolder Client
SHIFT 2 UNLEASHED™-->MsiExec.exe /X{E8C37E27-5205-4C8A-BECB-B00533045AAE}
Skype Toolbars-->MsiExec.exe /I{B6CF2967-C81E-40C0-9815-C05774FEF120}
Skype™ 5.3-->MsiExec.exe /X{5335DADB-34BA-4AE8-A519-648D78498846}
TeamViewer 6-->C:\Program Files (x86)\TeamViewer\Version6\uninstall.exe
Tom Clancy's Rainbow Six Vegas-->C:\Program Files (x86)\InstallShield Installation Information\{5731C0A8-B266-451A-8D3F-8066AA21836F}\setup.exe -runfromtemp -l0x0009 -removeonly
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
Ubisoft Game Launcher-->"C:\Program Files (x86)\InstallShield Installation Information\{888F1505-C2B3-4FDE-835D-36353EBD4754}\setup.exe" -runfromtemp -l0x0409 -removeonly
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Outlook 2007 Junk Email Filter (KB2536413)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {95DF5260-331D-4FFD-A2D5-C64164751945}
VLC media player 1.1.9-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
WBFS Manager 3.0-->C:\Program Files\WBFS\WBFS Manager 3.0\uninstall.exe
Windows Live ID Sign-in Assistant-->MsiExec.exe /X{9B48B0AC-C813-4174-9042-476A887592C7}
WinRAR-->C:\Program Files\WinRAR\uninstall.exe
WMV9/VC-1 Video Playback-->MsiExec.exe /X{40B91513-A7B9-94AB-5353-926FB1C07334}

======System event log======

Computer Name: Bajt-PC
Event Code: 62464
Message: UVD Information
Record Number: 2458
Source Name: amdkmdag
Time Written: 20110421183228.101842-000
Event Type: Informace
User:

Computer Name: Bajt-PC
Event Code: 62464
Message: UVD Information
Record Number: 2457
Source Name: amdkmdag
Time Written: 20110421183225.836712-000
Event Type: Informace
User:

Computer Name: Bajt-PC
Event Code: 62464
Message: UVD Information
Record Number: 2456
Source Name: amdkmdag
Time Written: 20110421183225.836712-000
Event Type: Informace
User:

Computer Name: Bajt-PC
Event Code: 62464
Message: UVD Information
Record Number: 2455
Source Name: amdkmdag
Time Written: 20110421183225.836712-000
Event Type: Informace
User:

Computer Name: Bajt-PC
Event Code: 62464
Message: UVD Information
Record Number: 2454
Source Name: amdkmdag
Time Written: 20110421183225.836712-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247E29-32
Event Code: 1001
Message: Chybný blok , typ 0
Název události: PnPDriverNotFound
Reakce: Není k dispozici
ID souboru CAB: 0

Podpis problému:
P1: x64
P2: USB\VID_046D&PID_092F&REV_0000
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Připojené soubory:
C:\Windows\Temp\DMI4E0F.tmp.log.xml

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_2632b9195882fbecceecd55aabe70a3a81250d3_cab_05ed4ef9

Symbol analýzy:
Opětovné hledání řešení: 0
ID hlášení: 7697c222-6b8c-11e0-a61d-edf68a4c7aef
Stav hlášení: 6
Record Number: 5
Source Name: Windows Error Reporting
Time Written: 20110420202626.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20110420202621.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20110420202614.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20110420202607.909315-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247E29-32
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20110420202608.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: 37L4247E29-32
Event Code: 4735
Message: Byla změněna zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247E29-32$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Změněné atributy:
Název účtu SAM: -
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20110420202543.760473-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4731
Message: Byla vytvořena zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247E29-32$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Nová skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Atributy:
Název účtu SAM: Backup Operators
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20110420202543.760473-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.

Počet prvků: 0
ID zásady: 0x31d06
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20110420202543.276872-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0

Typ přihlášení: 0

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x4
Název procesu:

Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20110420202539.907267-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4608
Message: Spouští se systém Windows.

Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20110420202539.735666-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%CommonProgramFiles%\Microsoft Shared\Windows Live;C:\Program Files (x86)\AMD APP\bin\x86_64;C:\Program Files (x86)\AMD APP\bin\x86;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\VXIPNP\WinNT\Bin;C:\Program Files (x86)\IVT Corporation\BlueSoleil\Mobile;C:\Windows\system32\wbem
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=3
"PROCESSOR_LEVEL"=16
"PROCESSOR_IDENTIFIER"=AMD64 Family 16 Model 5 Stepping 3, AuthenticAMD
"PROCESSOR_REVISION"=0503
"RGSCLauncher"=C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club
"RGSC"=C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\1_0_0_0
"VXIPNPPATH"=C:\VXIPNP\
"AMDAPPSDKROOT"=C:\Program Files (x86)\AMD APP\

-----------------EOF-----------------

Ten soubor starter byl můj malý pokus, ten nic nedělá.(Po startu ukázal "Ahoj!")

[chodnik74]

i ty jeden sem si říkal,co bude obsahem souboru
Skype Toolbars odinstalovat
Adobe Photoshop CS5,Ashampoo Burning Studio Elements 10.0.4...hry..atd atd..šak vy víte..Nelegální software..crackama,keygenama a nelegálním SW si nataháte do systému havěť a otevíráte tak vrátka hackerům a havěti tak BUBUBU a bacha na to


Pohledáme ten Origin
Stáhneme a spustíme SystemLook

http://jpshortstuff.247fixes.com/SystemLook.exe

Do okna vložíme následující script a stiskneme tlačítko Look

Kód: Vybrat vše

:folderfind
*origin*

:filefind
*origin*

Po dokončení se nám otevře log,který mi zkopírujte sem

[Bajt]

Obsah logu :
SystemLook 04.09.10 by jpshortstuff
Log created at 06:03 on 06/06/2011 by Bajt
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

========== folderfind ==========

Searching for "*origin*"
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin d------ [15:08 12/05/2011]

========== filefind ==========

Searching for "*origin*"
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\open_original_form.gif --a---- 806 bytes [19:02 15/11/2010] [19:02 15/11/2010] 35097F16241DDA2FACF3BFCEC4621A15
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\bin\origin.swf --a---- 3821 bytes [08:52 26/02/2010] [08:52 26/02/2010] 86187F684E2D806C9BD37455F6703D5E
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_bg_BG.dat --a---- 3740 bytes [08:52 26/02/2010] [08:52 26/02/2010] F6EBF5CA2F632025A763BE3A78292320
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_cs_CZ.dat --a---- 3456 bytes [08:52 26/02/2010] [08:52 26/02/2010] CD7B1D748FBD800C9D4447912DEE466E
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_da_DK.dat --a---- 3640 bytes [08:52 26/02/2010] [08:52 26/02/2010] 774D55D3FA80D97E421FA8861B684A07
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_de_DE.dat --a---- 3938 bytes [08:52 26/02/2010] [08:52 26/02/2010] EB22F55A0480E638037DA4DA4EF69B68
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_en_US.dat --a---- 3576 bytes [08:52 26/02/2010] [08:52 26/02/2010] 64972F6AA0C3FD06D71AA4D0D4927780
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_es_ES.dat --a---- 3750 bytes [08:52 26/02/2010] [08:52 26/02/2010] 7BF2049E7A3D3D25C27A70B2DD7AF0A9
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_et_EE.dat --a---- 3482 bytes [08:52 26/02/2010] [08:52 26/02/2010] CC5F5F53301E33B34ECC54F143428F29
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_fi_FI.dat --a---- 3432 bytes [08:52 26/02/2010] [08:52 26/02/2010] E2AF56D443BC35860EDB8DB8F1276C52
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_fr_FR.dat --a---- 3884 bytes [08:52 26/02/2010] [08:52 26/02/2010] 62645E8BC96C9B510B9F40FF840889B9
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_hr_HR.dat --a---- 3490 bytes [08:52 26/02/2010] [08:52 26/02/2010] 334FBB4DB9FBF56B71FBB16B02CE310F
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_hu_HU.dat --a---- 3742 bytes [08:52 26/02/2010] [08:52 26/02/2010] A654405D42F9C5273ED4D6EB5AB59264
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_it_IT.dat --a---- 3758 bytes [08:52 26/02/2010] [08:52 26/02/2010] F13D3E931AE546AA4D8658026C1C983B
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_ja_JP.dat --a---- 2724 bytes [08:52 26/02/2010] [08:52 26/02/2010] C78BF0D91AC63F41FD2F4C13658CE948
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_ko_KR.dat --a---- 2866 bytes [08:52 26/02/2010] [08:52 26/02/2010] 6C307A82446DC2782AA90FBD14C017BC
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_lt_LT.dat --a---- 3660 bytes [08:52 26/02/2010] [08:52 26/02/2010] 5D5109FED2C956F76C681697F034CE49
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_lv_LV.dat --a---- 3606 bytes [08:52 26/02/2010] [08:52 26/02/2010] F2453FDC2806B73891F273CDC051A480
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_nb_NO.dat --a---- 3590 bytes [08:52 26/02/2010] [08:52 26/02/2010] FFA37164DBC84747A0463BE946346431
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_nl_NL.dat --a---- 3860 bytes [08:52 26/02/2010] [08:52 26/02/2010] 66B41B864ED29F3B49CEFCF3934EE32B
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_pl_PL.dat --a---- 3734 bytes [08:52 26/02/2010] [08:52 26/02/2010] 157C13DE3FA0838478C594458DA1FEEC
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_pt_BR.dat --a---- 3576 bytes [08:52 26/02/2010] [08:52 26/02/2010] C874FDBCC9D0D3B50D15402AEE604D7A
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_ro_RO.dat --a---- 3696 bytes [08:52 26/02/2010] [08:52 26/02/2010] FC4D894D084699B2032E9A48461DC458
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_ru_RU.dat --a---- 3550 bytes [08:52 26/02/2010] [08:52 26/02/2010] ACD310CDD0893A35214F3C9F876B9470
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_sk_SK.dat --a---- 3544 bytes [08:52 26/02/2010] [08:52 26/02/2010] 4F02FD940141B106486E957F67D38061
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_sl_SI.dat --a---- 3380 bytes [08:52 26/02/2010] [08:52 26/02/2010] 86D5D85B0011AB352D1EE0234599C0AC
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_sv_SE.dat --a---- 3500 bytes [08:52 26/02/2010] [08:52 26/02/2010] 93BEED5F686CE3130C5FE617264BB409
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_tr_TR.dat --a---- 3462 bytes [08:52 26/02/2010] [08:52 26/02/2010] 4E2D171B4BEABEFDED3984A38604A215
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_uk_UA.dat --a---- 3678 bytes [08:52 26/02/2010] [08:52 26/02/2010] 64AF8FFE4567CB9A6DE9894235E310C7
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_zh_CN.dat --a---- 2644 bytes [08:52 26/02/2010] [08:52 26/02/2010] 2C5E8790941434749E7512A7B4E1BDC5
C:\Program Files (x86)\Common Files\Adobe\XMP\Custom File Info Panels\3.0\panels\origin\loc\origin_zh_TW.dat --a---- 2632 bytes [08:52 26/02/2010] [08:52 26/02/2010] 470BFC6D95D7D35442562E0A0912E0F7
C:\Program Files (x86)\VSO\ConvertX\4\lang\CX4_original.ini --a---- 448628 bytes [13:32 26/05/2011] [13:10 21/10/2010] 53E0F983BFB2050F9BD0D8C4CE2926B2
C:\Users\Bajt\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8NUEIMND\gamesonline.uk.msn.com_gameshellpage.aspxcode=118925300&origin=pgame_ol_u[1].jpg --a---- 13814 bytes [21:28 03/06/2011] [21:28 03/06/2011] DABEF02965A1B88D4DC620C021D0D6FA
C:\Users\Bajt\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VQS6HMJL\gamesonline.uk.msn.com_gameshellpage.aspxcode=118925300&origin=pgame_ol_u[1].jpg --a---- 13814 bytes [09:37 29/05/2011] [09:37 29/05/2011] DABEF02965A1B88D4DC620C021D0D6FA
C:\Users\Bajt\AppData\Local\Temp\OriginLauncher210351.exe --a---- 35853384 bytes [12:34 04/06/2011] [12:34 04/06/2011] 9EBFF6DCB52E94B9DB5A5C428407DE96
C:\Users\Bajt\AppData\Local\Temp\OriginLauncher211069.exe --a---- 35853384 bytes [09:46 05/06/2011] [09:46 05/06/2011] 9EBFF6DCB52E94B9DB5A5C428407DE96
C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ORIGIN.EFTX -ra---- 40941 bytes [18:06 26/10/2006] [18:06 26/10/2006] 0B4B91D5F12E50C767168273F7092BF6
C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ORIGIN.THMX -ra---- 87038 bytes [18:06 26/10/2006] [18:06 26/10/2006] 44AB0F209164A49768E13C6B27AA7542

-= EOF =-

Pozor ! Program Ashampoo Burning Studio Elements 10.0.4 mám originální a většinu her také !

[chodnik74]

Vypadá to na nějaký panel od Adobe asi
poprosím screen toho programu Origin...

[Bajt]

OK, zde posílám screen.

[chodnik74]

hledám hledám..nikde nic...Tahle instalace na vás vyběhne při každém startu? Zkuste ji nainstalovat,poté nový log z RSIT my už zjistíme co je zač

[Bajt]

Tak už vím, co je to zač


Měl jsem nainstalovaný EA Download Manager se kterým jsem kupoval Battlefieldy a on se přejmenoval

[chodnik74]

Výborně Jak se PC chová?

[chodnik74]

Hoďte mi tu log z RSIT na kontrolu

[Bajt]

Bezproblémově

Zde log:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Bajt at 2011-06-07 06:45:26
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 111 GB (73%) free of 153 GB
Total RAM: 4095 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:45:28, on 7.6.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\Bajt\AppData\Local\Temp\OriginLauncher205702.exe
C:\Users\Bajt\AppData\Local\Temp\Setup.exe
C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil VoIP Plugin.exe
D:\Programy\Microsoft Office 2007\Office12\WINWORD.EXE
C:\Program Files\trend micro\Bajt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Microsoft Office 2007\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "D:\Programy\Microsoft Office 2007\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [DelReg] C:\Program Files (x86)\MSI\OverclockingCenter\DelReg.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Electronic Arts\EADM\EADMUI.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: starter.txt
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Programy\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programy\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programy\Microsoft Office 2007\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWOW64\skype4com.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10464 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe"
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe" silentrun
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
WLIDSvcM.exe 2072
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\Microsoft IntelliType Pro\itype.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-6cc50acd-78d3-486c-99e0-fbeecf81089f -SystemEventPortName:HostProcess-f48d0e10-02a1-493b-a07b-9a0c2a0d6062 -IoCancelEventPortName:HostProcess-ec7f6e94-ae12-4cb1-88e2-2e0dfe32609f -NonStateChangingEventPortName:HostProcess-d1b7ec49-5c6b-410c-9ce4-7c2b6ded86f9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c9ecf92a-aba6-4a94-9d9a-bcb6eb1607e6
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files\CCleaner\CCleaner64.exe"
"C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Bajt\Desktop\114-black_eyed_peas-just_cant_get_enough-caheso.mp3"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe" /SILENT
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4780.88e0fa0.708087565 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" "Mozilla.Firefox.4.0.1" -omnijar C:\Program Files (x86)\Mozilla Firefox\omni.jar 4780 \\.\pipe\gecko-crash-server-pipe.4780 plugin
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Bajt\AppData\Local\Temp\OriginLauncher205702.exe" /update
"C:\Users\Bajt\AppData\Local\Temp\Setup.exe" /update
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil VoIP Plugin.exe"
"D:\Programy\Microsoft Office 2007\Office12\WINWORD.EXE"
C:\Windows\splwow64.exe 12288
"C:\Users\Bajt\Desktop\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\Programy\Microsoft Office 2007\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-04-15 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-05-22 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-04-20 11780712]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-01-12 2918656]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2726728]
"itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2009-06-01 2342800]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"EADM"=C:\Program Files (x86)\Electronic Arts\EADM\EADMUI.exe [2011-04-29 17529856]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-09 336384]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"GrooveMonitor"=D:\Programy\Microsoft Office 2007\Office12\GrooveMonitor.exe [2008-10-25 31072]
"DelReg"=C:\Program Files (x86)\MSI\OverclockingCenter\DelReg.exe [2008-12-04 196608]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-01-07 253672]
"BtTray"=C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe [2009-02-27 278016]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2011-05-25 1951112]

C:\Users\Bajt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
starter.txt

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\Programy\Microsoft Office 2007\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-06-05 21:41:58 ----D---- C:\rsit
2011-06-05 21:41:58 ----D---- C:\Program Files\trend micro
2011-06-05 13:55:20 ----D---- C:\Program Files (x86)\OCCT
2011-06-05 11:33:30 ----D---- C:\Windows\SYSWOW64\xlive
2011-06-05 11:33:30 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2011-06-05 07:46:17 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-05-31 18:11:25 ----D---- C:\Users\Bajt\AppData\Roaming\InstallShield
2011-05-31 18:09:29 ----A---- C:\Windows\tmp2Level.ini
2011-05-31 18:09:29 ----A---- C:\Windows\level.ini
2011-05-31 16:00:02 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2011-05-31 15:57:02 ----D---- C:\Users\Bajt\AppData\Roaming\Hamachi
2011-05-29 11:36:13 ----D---- C:\Users\Bajt\AppData\Roaming\go
2011-05-29 11:36:11 ----D---- C:\ProgramData\Easybits GO
2011-05-28 17:07:00 ----A---- C:\Windows\BsMobileModel.ini
2011-05-28 13:36:43 ----A---- C:\Windows\SYSWOW64\SHORTCUT.INI
2011-05-28 13:36:40 ----A---- C:\Windows\SYSWOW64\REMOTEDEVICE.INI
2011-05-28 13:34:05 ----A---- C:\Windows\SYSWOW64\LOCALSERVICE.INI
2011-05-28 13:34:05 ----A---- C:\Windows\SYSWOW64\LOCALDEVICE.INI
2011-05-28 13:09:14 ----D---- C:\Users\Bajt\AppData\Roaming\DisneyInteractiveStudios
2011-05-28 13:01:49 ----D---- C:\Program Files\WBFS
2011-05-28 11:47:47 ----A---- C:\Windows\SYSWOW64\BSPRINT.INI
2011-05-28 11:46:41 ----D---- C:\Program Files (x86)\IVT Corporation
2011-05-26 19:05:39 ----D---- C:\Users\Bajt\AppData\Roaming\.minecraft
2011-05-26 17:05:57 ----D---- C:\ProgramData\vsosdk
2011-05-26 16:02:47 ----AD---- C:\ProgramData\TEMP
2011-05-26 16:02:26 ----D---- C:\Users\Bajt\AppData\Roaming\AnvSoft
2011-05-26 15:50:20 ----D---- C:\Users\Bajt\AppData\Roaming\Xilisoft
2011-05-26 15:35:25 ----D---- C:\Users\Bajt\AppData\Roaming\Haenlein-Software
2011-05-26 15:35:24 ----D---- C:\Program Files (x86)\DVR-Studio Pro
2011-05-26 15:32:05 ----A---- C:\Windows\SYSWOW64\sipr3260.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\wvc1dmod.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\vp7vfw.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\drv43260.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\drv33260.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\drv23260.dll
2011-05-26 15:32:04 ----A---- C:\Windows\SYSWOW64\cook3260.dll
2011-05-26 15:32:03 ----D---- C:\Program Files (x86)\VSO
2011-05-22 14:07:45 ----D---- C:\Users\Bajt\AppData\Roaming\Mobile Atlas Creator
2011-05-22 06:56:54 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-05-22 06:56:54 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-05-22 06:56:54 ----A---- C:\Windows\SYSWOW64\java.exe
2011-05-22 06:56:34 ----D---- C:\Program Files (x86)\Java
2011-05-19 14:02:27 ----D---- C:\Program Files (x86)\AMD APP
2011-05-18 17:45:54 ----D---- C:\.jagex_cache_32
2011-05-17 15:36:40 ----D---- C:\Users\Bajt\AppData\Roaming\minecraft
2011-05-14 20:11:35 ----D---- C:\Users\Bajt\AppData\Roaming\PunkBuster
2011-05-14 20:10:55 ----D---- C:\Program Files (x86)\Ubisoft
2011-05-14 17:56:50 ----A---- C:\Windows\007DVDCopy.INI
2011-05-14 17:56:10 ----A---- C:\Windows\EurekaLog.ini
2011-05-14 17:54:39 ----A---- C:\Windows\SYSWOW64\drivers\PCOUFFIN.SYS
2011-05-14 17:50:57 ----D---- C:\Users\Bajt\AppData\Roaming\Vso
2011-05-14 17:50:57 ----A---- C:\Windows\system32\drivers\pcouffin.sys
2011-05-14 17:50:57 ----A---- C:\Users\Bajt\AppData\Roaming\pcouffin.sys
2011-05-14 17:50:57 ----A---- C:\Users\Bajt\AppData\Roaming\inst.exe
2011-05-14 12:37:29 ----D---- C:\Program Files (x86)\LEGO Software
2011-05-14 12:35:41 ----D---- C:\ProgramData\National Instruments
2011-05-14 12:27:07 ----D---- C:\VXIPNP
2011-05-14 12:27:07 ----D---- C:\Program Files (x86)\National Instruments
2011-05-14 12:15:05 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-05-14 12:15:05 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-05-14 12:14:59 ----A---- C:\Windows\explorer.exe
2011-05-14 12:14:58 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-05-14 12:14:56 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-05-14 12:14:56 ----A---- C:\Windows\system32\XpsPrint.dll
2011-05-14 12:14:42 ----A---- C:\Windows\system32\FntCache.dll
2011-05-14 12:14:41 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-05-14 12:14:41 ----A---- C:\Windows\system32\d2d1.dll
2011-05-14 12:14:40 ----A---- C:\Windows\system32\DWrite.dll
2011-05-14 12:14:39 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-05-14 12:14:11 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-05-14 12:14:11 ----A---- C:\Windows\system32\d3d10_1.dll
2011-05-14 12:12:55 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-05-14 12:12:55 ----A---- C:\Windows\system32\prevhost.exe
2011-05-14 12:09:30 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-05-14 12:09:30 ----A---- C:\Windows\system32\poqexec.exe
2011-05-12 17:11:22 ----D---- C:\Program Files\Adobe
2011-05-12 17:10:03 ----D---- C:\Program Files\Common Files\Adobe
2011-05-11 06:21:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-05-11 06:21:20 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-05-11 06:21:18 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-05-08 19:41:55 ----D---- C:\Users\Bajt\AppData\Roaming\Jpeg Resampler
2011-05-08 19:41:53 ----D---- C:\Program Files (x86)\JpegResampler2010
2011-05-08 12:40:12 ----D---- C:\Program Files\CPUID
2011-05-08 12:40:12 ----A---- C:\Windows\system32\drivers\cpuz135_x64.sys
2011-05-08 09:26:21 ----A---- C:\Windows\ver5.5.14.0.txt
2011-05-08 09:26:21 ----A---- C:\Windows\nvsulib.dll
2011-05-08 09:26:21 ----A---- C:\Windows\nvoclock.sys
2011-05-08 09:26:21 ----A---- C:\Windows\nvoclk64.sys
2011-05-08 09:26:21 ----A---- C:\Windows\Nvgpio.dll
2011-05-08 09:26:21 ----A---- C:\Windows\NVGfxOgl.dll
2011-05-08 09:26:21 ----A---- C:\Windows\NVBenchMarks.dll
2011-05-08 09:26:21 ----A---- C:\Windows\ntuneoem.dll
2011-05-08 09:26:21 ----A---- C:\Windows\NTuneGpu.dll
2011-05-08 09:26:21 ----A---- C:\Windows\msvcr71.dll
2011-05-08 09:26:21 ----A---- C:\Windows\msvcp71.dll
2011-05-08 09:26:21 ----A---- C:\Windows\MFC71.dll
2011-05-08 09:26:21 ----A---- C:\Windows\AutoTuneScript.dll
2011-05-08 09:26:19 ----D---- C:\Program Files (x86)\MSI

======List of files/folders modified in the last 1 months======

2011-06-07 06:45:28 ----D---- C:\Windows\Temp
2011-06-07 06:40:58 ----D---- C:\Users\Bajt\AppData\Roaming\Skype
2011-06-07 05:56:37 ----D---- C:\Windows\system32\config
2011-06-07 05:56:31 ----A---- C:\Windows\SYSWOW64\bscs.ini
2011-06-06 21:01:25 ----D---- C:\Windows
2011-06-06 07:10:29 ----D---- C:\Windows\System32
2011-06-06 07:10:29 ----D---- C:\Windows\inf
2011-06-06 07:10:29 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-06-06 06:09:45 ----SHD---- C:\System Volume Information
2011-06-06 06:03:26 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-06-06 06:03:20 ----SHD---- C:\Windows\Installer
2011-06-06 06:03:19 ----D---- C:\ProgramData\Microsoft Help
2011-06-06 06:01:37 ----RSD---- C:\Windows\assembly
2011-06-05 22:09:10 ----D---- C:\Windows\SysWOW64
2011-06-05 21:41:58 ----RD---- C:\Program Files
2011-06-05 13:55:20 ----RD---- C:\Program Files (x86)
2011-06-05 13:31:26 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-06-05 11:37:33 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-06-05 11:34:42 ----SD---- C:\Users\Bajt\AppData\Roaming\Microsoft
2011-06-05 07:46:21 ----SD---- C:\ProgramData\Microsoft
2011-06-05 03:41:22 ----D---- C:\ProgramData\Skype Extras
2011-06-05 03:22:51 ----D---- C:\Windows\winsxs
2011-06-05 03:18:12 ----D---- C:\Windows\Microsoft.NET
2011-06-05 03:09:58 ----RSD---- C:\Windows\Fonts
2011-06-05 03:09:36 ----D---- C:\Program Files (x86)\Microsoft Works
2011-06-05 03:08:11 ----A---- C:\Windows\win.ini
2011-06-04 10:26:30 ----D---- C:\Windows\SYSWOW64\en-US
2011-06-04 10:26:30 ----D---- C:\Windows\system32\en-US
2011-06-04 10:26:21 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-06-04 10:23:02 ----D---- C:\Windows\SoftwareDistribution
2011-06-03 23:09:08 ----D---- C:\ProgramData\Electronic Arts
2011-05-31 18:13:16 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-05-31 16:20:09 ----D---- C:\Users\Bajt\AppData\Roaming\vlc
2011-05-31 16:00:03 ----D---- C:\Windows\system32\drivers
2011-05-31 15:40:51 ----D---- C:\Windows\system32\NDF
2011-05-29 11:36:11 ----HD---- C:\ProgramData
2011-05-29 10:00:37 ----D---- C:\Users\Bajt\AppData\Roaming\skypePM
2011-05-28 19:57:05 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2011-05-28 15:09:10 ----D---- C:\Windows\Prefetch
2011-05-28 11:47:24 ----D---- C:\Windows\system32\catroot
2011-05-28 11:47:23 ----D---- C:\Windows\system32\DriverStore
2011-05-28 11:46:44 ----D---- C:\Windows\SYSWOW64\drivers
2011-05-23 20:29:16 ----D---- C:\Windows\system32\LogFiles
2011-05-22 06:57:07 ----D---- C:\Program Files (x86)\Common Files
2011-05-22 06:56:35 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-05-21 09:16:44 ----D---- C:\Windows\system32\Tasks
2011-05-15 13:02:24 ----D---- C:\Windows\rescache
2011-05-15 07:07:36 ----D---- C:\Windows\AppPatch
2011-05-14 22:18:31 ----D---- C:\ProgramData\Ubisoft
2011-05-14 21:12:39 ----D---- C:\Windows\debug
2011-05-14 14:20:13 ----D---- C:\Users\Bajt\AppData\Roaming\Dropbox
2011-05-14 12:35:47 ----D---- C:\Windows\system32\catroot2
2011-05-14 12:23:35 ----D---- C:\Users\Bajt\AppData\Roaming\Adobe
2011-05-14 12:11:03 ----D---- C:\Windows\Logs
2011-05-14 12:07:36 ----D---- C:\ProgramData\Adobe
2011-05-14 11:31:49 ----A---- C:\Windows\MobiTrans.ini
2011-05-12 17:10:03 ----D---- C:\Program Files\Common Files
2011-05-12 17:09:11 ----D---- C:\Program Files (x86)\Adobe
2011-05-12 03:19:58 ----D---- C:\Windows\system32\wdi
2011-05-12 03:01:55 ----A---- C:\Windows\system32\MRT.exe
2011-05-08 08:44:47 ----D---- C:\Windows\system32\drivers\UMDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BtHidBus;Bluetooth HID Bus Service; C:\Windows\System32\Drivers\BtHidBus.sys [2009-01-07 24840]
R0 hotcore3;hc3ServiceName; C:\Windows\system32\DRIVERS\hotcore3.sys [2011-01-21 37456]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-04-20 254528]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 Uim_IM;Universal Image Mounter Plugin; C:\Windows\System32\Drivers\Uim_IMx64.sys [2011-01-21 528464]
R1 UimBus;Universal Image Mounter Controller; C:\Windows\system32\DRIVERS\uimx64.sys [2011-01-21 53840]
R2 cpuz135;cpuz135; \??\C:\Windows\system32\drivers\cpuz135_x64.sys [2010-11-09 21992]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-12-21 170640]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-12-21 50624]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-20 9319936]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-04-20 306176]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
R3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys [2009-01-03 47880]
R3 btnetBUs;Bluetooth PAN Bus Service; C:\Windows\System32\Drivers\btnetBus.sys [2008-12-07 35848]
R3 dc3d;MS Hardware Device Detection Driver (USB); C:\Windows\system32\DRIVERS\dc3d.sys [2010-07-21 51600]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-12-21 34144]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-04-20 2753512]
R3 IvtBtBUs;IVT Bluetooth Bus Service; C:\Windows\System32\Drivers\IvtBtBus.sys [2008-07-02 31624]
R3 NuidFltr;NUID filter driver; C:\Windows\system32\DRIVERS\NuidFltr.sys [2010-07-21 23952]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-04-20 428136]
R3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys [2008-01-21 17032]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys [2009-01-08 42888]
R3 VHidMinidrv;Bluetooth HID Device Service; C:\Windows\system32\drivers\VHIDMini.sys [2008-12-22 20872]
R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-08-21 79976]
S3 AODDriver4.0;AODDriver4.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys []
S3 cpuz134;cpuz134; \??\C:\Users\Bajt\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 DualCoreCenter;DualCoreCenter; \??\C:\Program Files (x86)\MSI\OverclockingCenter\NTGLM7X64.sys [2010-04-12 44344]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2011-05-14 82816]
S3 Point64;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point64.sys [2010-07-21 45456]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RushTopDevice_J;RushTopDevice_J; \??\C:\Program Files (x86)\MSI\OverclockingCenter\RushJ64.sys [2009-03-05 33080]
S3 RushTopDevice2;RushTopDevice2; \??\C:\Program Files (x86)\MSI\OverclockingCenter\RushTop64.sys [2008-12-19 75576]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-04-20 203776]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-09 365568]
R2 AMD Reservation Manager;AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [2009-02-27 850432]
R2 BsMobileCS;BsMobileCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-01-12 810144]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-05-25 2275720]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-05-28 75136]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-15 2280312]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe [2009-02-27 191488]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2011-01-12 42360]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Programy\Microsoft Office 2007\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-04-21 1255736]

-----------------EOF-----------------

[chodnik74]

Log je v naprostém pořádku

Pokud budete chtít,mohu vám povypínat zbytečné programy a služby po startu počítače

• Urychlíme tím start systému
• Uvolníme místo v RAM paměti
• Nebude nás nic rušit a vytěžovat PC při práci
  Zde potřebuji vědět,zda na některých programech po startu trváte(například někdo má schválně spuštěné po startu ICQ,skype..nějaký prezentační program atd..)

[Bajt]

Já osobně používám hibernaci, takže mě start některých programů netrápí, ale jinak, jaké programy byste při startu povypínal ?


Díky za vše !