Prosim o kontrolu logu a nejde mi stahovat dekuji
Napsal: 30 srp 2011 18:13
Logfile of random's system information tool 1.09 (written by random/random)
Run by standa at 2011-08-30 19:10:24
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 59 GB (12%) free of 477 GB
Total RAM: 4094 MB (59% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:10:37, on 30.8.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal
Running processes:
C:\Windows\PixArt\PAC207\Monitor.exe
C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10u_ActiveX.exe
C:\Program Files\trend micro\standa.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [BMISR] C:\Program Files (x86)\KYE\WebMate\BM.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3556363727-3427623639-2493269798-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Product - 2011/08/25 15:43:51 (CLKMSVC10_9EC60124) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: QuestScan Service - Unknown owner - C:\ProgramData\QuestScan\questscan181.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7685 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\ProgramData\QuestScan\questscan181.exe" "C:\Program Files (x86)\QuestScan\questscan.dll" atazoyuf vabayoye
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k imgsvc
taskeng.exe {45E52C56-339B-48C3-82EB-A1B101E96A91}
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7da4dc90-8718-49f5-8696-6ebea5c0f241 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-96a226b5-7089-4b95-a6ea-ee4faabcf7bc -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-3c4adc98-ecf2-4e7f-a772-00cb0550bfc3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:fc97dfbe-c40e-4575-8744-b4c42b4fcf05
C:\Windows\Explorer.EXE
taskeng.exe {54DDD443-9078-43E9-B94F-8C59E3733386}
"C:\Program Files\Windows Defender\MSASCui.exe" -hide
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"
"C:\Windows\PixArt\PAC207\Monitor.exe"
"C:\Windows\ehome\ehtray.exe"
"C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe"
C:\Windows\ehome\ehmsas.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\QuestScan\questscan.exe" "C:\Program Files (x86)\QuestScan\questscan.dll" mohavaqan qonugoloda
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe"
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe"
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDCountdown.exe"
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDPOP3.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe"
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10u_ActiveX.exe -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 644 648 656 65536 652
"C:\Users\standa\Desktop\auto\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-05-23 115072]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1584184]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2008-12-26 6962208]
"PAC207_Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
"Launch LCDMon"=C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [2007-04-27 790552]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1555968]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 138240]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2010-05-14 75048]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-12-15 103720]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe [2011-06-07 421160]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LGODDFU]
C:\Program Files (x86)\lg_fwupdate\fwupdate.exe [2011-08-25 557056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2010-04-22 2363392]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MDS_Menu]
C:\Program Files (x86)\CyberLink\MediaShow4\MUITransfer\MUIStartMenu.exe [2009-02-25 218408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl9]
C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [2009-07-06 87336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2008-12-26 1833504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-02-17 218408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut]
C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2008-12-03 218408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut]
C:\Program Files (x86)\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe [2010-06-02 222504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-05-27 85160]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XboxStat]
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"OpwareSE4"=C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"BMISR"=C:\Program Files (x86)\KYE\WebMate\BM.exe []
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"BindDirectlyToPropertySetStorage"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======List of files/folders created in the last 1 month======
2011-08-30 19:10:24 ----D---- C:\rsit
2011-08-30 19:10:24 ----D---- C:\Program Files\trend micro
2011-08-29 22:11:36 ----D---- C:\Windows\SYSWOW64\vi-VN
2011-08-29 22:11:36 ----D---- C:\Windows\SYSWOW64\eu-ES
2011-08-29 22:11:36 ----D---- C:\Windows\SYSWOW64\ca-ES
2011-08-29 22:11:36 ----D---- C:\Windows\system32\vi-VN
2011-08-29 22:11:36 ----D---- C:\Windows\system32\eu-ES
2011-08-29 22:11:36 ----D---- C:\Windows\system32\ca-ES
2011-08-29 21:55:33 ----D---- C:\Windows\system32\EventProviders
2011-08-29 08:15:24 ----D---- C:\ProgramData\QuestScan
2011-08-29 08:15:24 ----D---- C:\Program Files (x86)\QuestScan
2011-08-29 08:15:00 ----D---- C:\Program Files (x86)\ShoppingReport2
2011-08-28 20:36:37 ----D---- C:\ProgramData\LightScribe
2011-08-25 16:00:56 ----A---- C:\Windows\lgfwup.txt
2011-08-25 15:54:47 ----A---- C:\Windows\lgfwup.ini
2011-08-25 15:54:43 ----A---- C:\Windows\SYSWOW64\Vb6stkit.dll
2011-08-25 15:54:43 ----A---- C:\Windows\SYSWOW64\VB6KO.DLL
2011-08-25 15:54:43 ----A---- C:\Windows\SYSWOW64\lgfwunis.exe
2011-08-25 15:54:42 ----D---- C:\Program Files (x86)\lg_fwupdate
2011-08-25 15:38:41 ----D---- C:\Users\standa\AppData\Roaming\CyberLink
2011-08-25 15:34:09 ----D---- C:\Program Files (x86)\CyberLink
2011-08-25 15:33:57 ----D---- C:\ProgramData\CyberLink
2011-08-21 22:38:29 ----A---- C:\Windows\system32\drivers\RLVrtAuCbl.sys
2011-08-21 22:37:54 ----D---- C:\Program Files (x86)\Reallusion
2011-08-21 22:33:35 ----A---- C:\Windows\SYSWOW64\Remover.ini
2011-08-21 22:33:35 ----A---- C:\Windows\SYSWOW64\Remove.exe
2011-08-21 22:33:32 ----A---- C:\Windows\SYSWOW64\SP207.ini
2011-08-21 22:33:32 ----A---- C:\Windows\SYSWOW64\P207USD.dll
2011-08-14 08:21:22 ----D---- C:\Users\standa\AppData\Roaming\TomTom
2011-08-13 19:07:07 ----D---- C:\Users\standa\AppData\Roaming\dvdcss
2011-08-11 05:31:47 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-10 13:02:49 ----D---- C:\ProgramData\Blizzard Entertainment
2011-08-07 21:19:03 ----D---- C:\Program Files (x86)\Webteh
======List of files/folders modified in the last 1 month======
2011-08-30 19:10:37 ----D---- C:\Windows\Prefetch
2011-08-30 19:10:34 ----D---- C:\Windows\Temp
2011-08-30 19:10:24 ----RD---- C:\Program Files
2011-08-30 19:07:56 ----D---- C:\Users\standa\AppData\Roaming\Skype
2011-08-30 06:51:00 ----D---- C:\Windows\System32
2011-08-30 06:51:00 ----D---- C:\Windows\inf
2011-08-30 06:51:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-08-30 06:44:25 ----D---- C:\Windows\system32\drivers
2011-08-30 06:42:00 ----D---- C:\Windows\system32\catroot2
2011-08-30 06:42:00 ----D---- C:\Windows\system32\catroot
2011-08-30 06:41:52 ----D---- C:\Windows\winsxs
2011-08-29 22:37:07 ----D---- C:\Windows\Microsoft.NET
2011-08-29 22:36:51 ----RSD---- C:\Windows\assembly
2011-08-29 22:31:13 ----D---- C:\Windows\rescache
2011-08-29 22:18:06 ----D---- C:\Windows
2011-08-29 22:17:49 ----SHD---- C:\Boot
2011-08-29 22:12:11 ----D---- C:\Program Files\Windows Sidebar
2011-08-29 22:12:11 ----D---- C:\Program Files\Windows Media Player
2011-08-29 22:12:11 ----D---- C:\Program Files\Windows Mail
2011-08-29 22:12:11 ----D---- C:\Program Files\Windows Journal
2011-08-29 22:12:11 ----D---- C:\Program Files\Windows Collaboration
2011-08-29 22:12:11 ----D---- C:\Program Files\Movie Maker
2011-08-29 22:12:11 ----D---- C:\Program Files\Internet Explorer
2011-08-29 22:12:10 ----D---- C:\Program Files\Windows Photo Gallery
2011-08-29 22:12:10 ----D---- C:\Program Files\Windows Defender
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Windows Photo Gallery
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Windows Media Player
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Windows Mail
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Windows Calendar
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Internet Explorer
2011-08-29 22:12:09 ----D---- C:\Windows\servicing
2011-08-29 22:12:09 ----D---- C:\Windows\ehome
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\XPSViewer
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\sk-SK
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\lv-LV
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\ko-KR
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\it-IT
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\hr-HR
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\et-EE
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\en-US
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\el-GR
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\de-DE
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\da-DK
2011-08-29 22:12:05 ----D---- C:\Windows\SYSWOW64\oobe
2011-08-29 22:12:05 ----D---- C:\Windows\SYSWOW64\migration
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\zh-TW
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\zh-CN
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\wbem
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\uk-UA
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\tr-TR
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\th-TH
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\sv-SE
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\sr-Latn-CS
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\SLUI
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\sl-SI
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\setup
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\ru-RU
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\ro-RO
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\pt-PT
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\pl-PL
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\ja-JP
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\hu-HU
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\he-IL
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\fr-FR
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\fi-FI
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\es-ES
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\cs
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\bg-BG
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\pt-BR
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\nl-NL
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\nb-NO
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\migwiz
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\lt-LT
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\ar-SA
2011-08-29 22:12:03 ----D---- C:\Windows\SysWOW64
2011-08-29 22:11:55 ----D---- C:\Windows\system32\sk-SK
2011-08-29 22:11:55 ----D---- C:\Windows\system32\oobe
2011-08-29 22:11:55 ----D---- C:\Windows\system32\migration
2011-08-29 22:11:55 ----D---- C:\Windows\system32\lv-LV
2011-08-29 22:11:55 ----D---- C:\Windows\system32\ko-KR
2011-08-29 22:11:55 ----D---- C:\Windows\system32\it-IT
2011-08-29 22:11:55 ----D---- C:\Windows\system32\hr-HR
2011-08-29 22:11:55 ----D---- C:\Windows\system32\et-EE
2011-08-29 22:11:55 ----D---- C:\Windows\system32\en-US
2011-08-29 22:11:55 ----D---- C:\Windows\system32\el-GR
2011-08-29 22:11:55 ----D---- C:\Windows\system32\de-DE
2011-08-29 22:11:55 ----D---- C:\Windows\system32\da-DK
2011-08-29 22:11:55 ----D---- C:\Windows\IME
2011-08-29 22:11:54 ----D---- C:\Windows\system32\sv-SE
2011-08-29 22:11:54 ----D---- C:\Windows\system32\setup
2011-08-29 22:11:54 ----D---- C:\Windows\system32\ru-RU
2011-08-29 22:11:54 ----D---- C:\Windows\system32\he-IL
2011-08-29 22:11:54 ----D---- C:\Windows\system32\fr-FR
2011-08-29 22:11:54 ----D---- C:\Windows\system32\fi-FI
2011-08-29 22:11:54 ----D---- C:\Windows\system32\cs-CZ
2011-08-29 22:11:54 ----D---- C:\Windows\system32\cs
2011-08-29 22:11:54 ----D---- C:\Windows\system32\AdvancedInstallers
2011-08-29 22:11:50 ----D---- C:\Windows\system32\SLUI
2011-08-29 22:11:50 ----D---- C:\Windows\system32\pt-PT
2011-08-29 22:11:50 ----D---- C:\Windows\system32\hu-HU
2011-08-29 22:11:49 ----D---- C:\Windows\system32\zh-TW
2011-08-29 22:11:49 ----D---- C:\Windows\system32\zh-CN
2011-08-29 22:11:49 ----D---- C:\Windows\system32\wbem
2011-08-29 22:11:49 ----D---- C:\Windows\system32\uk-UA
2011-08-29 22:11:49 ----D---- C:\Windows\system32\tr-TR
2011-08-29 22:11:49 ----D---- C:\Windows\system32\th-TH
2011-08-29 22:11:49 ----D---- C:\Windows\system32\sr-Latn-CS
2011-08-29 22:11:49 ----D---- C:\Windows\system32\sl-SI
2011-08-29 22:11:49 ----D---- C:\Windows\system32\ro-RO
2011-08-29 22:11:49 ----D---- C:\Windows\system32\pl-PL
2011-08-29 22:11:49 ----D---- C:\Windows\system32\nb-NO
2011-08-29 22:11:49 ----D---- C:\Windows\system32\manifeststore
2011-08-29 22:11:49 ----D---- C:\Windows\system32\ja-JP
2011-08-29 22:11:49 ----D---- C:\Windows\system32\es-ES
2011-08-29 22:11:49 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-08-29 22:11:49 ----D---- C:\Windows\system32\bg-BG
2011-08-29 22:11:48 ----D---- C:\Windows\system32\pt-BR
2011-08-29 22:11:48 ----D---- C:\Windows\system32\nl-NL
2011-08-29 22:11:48 ----D---- C:\Windows\system32\migwiz
2011-08-29 22:11:48 ----D---- C:\Windows\system32\lt-LT
2011-08-29 22:11:48 ----D---- C:\Windows\system32\ar-SA
2011-08-29 22:11:42 ----RSD---- C:\Windows\Fonts
2011-08-29 22:11:42 ----D---- C:\Windows\AppPatch
2011-08-29 22:11:36 ----D---- C:\Windows\system32\Boot
2011-08-29 22:10:43 ----D---- C:\Windows\system32\drivers\UMDF
2011-08-29 22:10:14 ----D---- C:\Windows\SYSWOW64\RTCOM
2011-08-29 22:03:43 ----A---- C:\Windows\fonts\GlobalUserInterface.CompositeFont
2011-08-29 21:57:27 ----SHD---- C:\System Volume Information
2011-08-29 21:27:42 ----RD---- C:\Program Files (x86)
2011-08-29 21:22:26 ----HD---- C:\ProgramData
2011-08-29 21:21:51 ----SHD---- C:\Windows\Installer
2011-08-29 21:21:47 ----RD---- C:\Program Files (x86)\Skype
2011-08-29 21:20:36 ----D---- C:\Windows\system32\Tasks
2011-08-29 21:20:31 ----D---- C:\ProgramData\Skype
2011-08-29 20:40:17 ----D---- C:\Windows\system32\Msdtc
2011-08-29 20:39:19 ----D---- C:\Windows\system32\config
2011-08-29 20:38:58 ----D---- C:\Windows\Tasks
2011-08-29 20:38:58 ----D---- C:\Windows\system32\spool
2011-08-29 20:38:58 ----D---- C:\Users\standa\AppData\Roaming\uTorrent
2011-08-29 20:38:57 ----D---- C:\Program Files (x86)\Xvid CZ
2011-08-29 20:38:56 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-08-29 20:38:55 ----D---- C:\Windows\registration
2011-08-29 20:34:08 ----D---- C:\Windows\Logs
2011-08-25 21:32:54 ----D---- C:\Users\standa\AppData\Roaming\vlc
2011-08-25 15:56:50 ----D---- C:\Temp
2011-08-25 15:55:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-08-25 15:55:02 ----AD---- C:\ProgramData\TEMP
2011-08-25 15:43:40 ----D---- C:\Program Files (x86)\Common Files
2011-08-22 15:44:31 ----D---- C:\Windows\system32\WDI
2011-08-21 22:33:32 ----D---- C:\Windows\twain_32
2011-08-21 22:33:31 ----D---- C:\Windows\PixArt
2011-08-21 22:24:51 ----D---- C:\Windows\SYSWOW64\drivers
2011-08-19 10:43:52 ----SD---- C:\Users\standa\AppData\Roaming\Microsoft
2011-08-14 22:03:21 ----D---- C:\ProgramData\CanonIJPLM
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 31400]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 34152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2008-12-26 1590048]
R3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 7040]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 6656]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2011-05-21 13206120]
R3 PAC207;Eye 110; C:\Windows\system32\DRIVERS\PFC027.SYS [2007-10-25 684544]
R3 ReallusionVirtualAudio;Reallusion Virtual Audio; C:\Windows\system32\DRIVERS\RLVrtAuCbl.sys [2007-03-19 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2008-10-03 184320]
R3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 98944]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-05-23 36352]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 108544]
R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-09-10 74960]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 6144]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 273920]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 11008]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 7936]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS_64.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2011-05-10 51712]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 41984]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 46080]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-05-25 37664]
R2 Bonjour Service;Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2011-04-06 349472]
R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2006-11-10 99936]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-04-22 73728]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-05-21 1016936]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-21 2214504]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-07-03 75064]
R2 QuestScan Service;QuestScan Service; C:\ProgramData\QuestScan\questscan181.exe [2011-08-25 40960]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-07-02 244904]
S2 CLKMSVC10_9EC60124;CyberLink Product - 2011/08/25 15:43:51; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [2010-05-14 246256]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2011-06-07 934176]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-19 19968]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
-----------------EOF-----------------
Run by standa at 2011-08-30 19:10:24
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 59 GB (12%) free of 477 GB
Total RAM: 4094 MB (59% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:10:37, on 30.8.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal
Running processes:
C:\Windows\PixArt\PAC207\Monitor.exe
C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10u_ActiveX.exe
C:\Program Files\trend micro\standa.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [BMISR] C:\Program Files (x86)\KYE\WebMate\BM.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3556363727-3427623639-2493269798-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Product - 2011/08/25 15:43:51 (CLKMSVC10_9EC60124) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: QuestScan Service - Unknown owner - C:\ProgramData\QuestScan\questscan181.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7685 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\ProgramData\QuestScan\questscan181.exe" "C:\Program Files (x86)\QuestScan\questscan.dll" atazoyuf vabayoye
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k imgsvc
taskeng.exe {45E52C56-339B-48C3-82EB-A1B101E96A91}
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7da4dc90-8718-49f5-8696-6ebea5c0f241 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-96a226b5-7089-4b95-a6ea-ee4faabcf7bc -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-3c4adc98-ecf2-4e7f-a772-00cb0550bfc3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:fc97dfbe-c40e-4575-8744-b4c42b4fcf05
C:\Windows\Explorer.EXE
taskeng.exe {54DDD443-9078-43E9-B94F-8C59E3733386}
"C:\Program Files\Windows Defender\MSASCui.exe" -hide
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"
"C:\Windows\PixArt\PAC207\Monitor.exe"
"C:\Windows\ehome\ehtray.exe"
"C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe"
C:\Windows\ehome\ehmsas.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\QuestScan\questscan.exe" "C:\Program Files (x86)\QuestScan\questscan.dll" mohavaqan qonugoloda
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe"
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe"
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDCountdown.exe"
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDPOP3.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe"
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10u_ActiveX.exe -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 644 648 656 65536 652
"C:\Users\standa\Desktop\auto\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-05-23 115072]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1584184]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2008-12-26 6962208]
"PAC207_Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
"Launch LCDMon"=C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [2007-04-27 790552]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1555968]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 138240]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2010-05-14 75048]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-12-15 103720]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe [2011-06-07 421160]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LGODDFU]
C:\Program Files (x86)\lg_fwupdate\fwupdate.exe [2011-08-25 557056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2010-04-22 2363392]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MDS_Menu]
C:\Program Files (x86)\CyberLink\MediaShow4\MUITransfer\MUIStartMenu.exe [2009-02-25 218408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl9]
C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [2009-07-06 87336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2008-12-26 1833504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-02-17 218408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut]
C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2008-12-03 218408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut]
C:\Program Files (x86)\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe [2010-06-02 222504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-05-27 85160]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XboxStat]
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"OpwareSE4"=C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"BMISR"=C:\Program Files (x86)\KYE\WebMate\BM.exe []
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"BindDirectlyToPropertySetStorage"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======List of files/folders created in the last 1 month======
2011-08-30 19:10:24 ----D---- C:\rsit
2011-08-30 19:10:24 ----D---- C:\Program Files\trend micro
2011-08-29 22:11:36 ----D---- C:\Windows\SYSWOW64\vi-VN
2011-08-29 22:11:36 ----D---- C:\Windows\SYSWOW64\eu-ES
2011-08-29 22:11:36 ----D---- C:\Windows\SYSWOW64\ca-ES
2011-08-29 22:11:36 ----D---- C:\Windows\system32\vi-VN
2011-08-29 22:11:36 ----D---- C:\Windows\system32\eu-ES
2011-08-29 22:11:36 ----D---- C:\Windows\system32\ca-ES
2011-08-29 21:55:33 ----D---- C:\Windows\system32\EventProviders
2011-08-29 08:15:24 ----D---- C:\ProgramData\QuestScan
2011-08-29 08:15:24 ----D---- C:\Program Files (x86)\QuestScan
2011-08-29 08:15:00 ----D---- C:\Program Files (x86)\ShoppingReport2
2011-08-28 20:36:37 ----D---- C:\ProgramData\LightScribe
2011-08-25 16:00:56 ----A---- C:\Windows\lgfwup.txt
2011-08-25 15:54:47 ----A---- C:\Windows\lgfwup.ini
2011-08-25 15:54:43 ----A---- C:\Windows\SYSWOW64\Vb6stkit.dll
2011-08-25 15:54:43 ----A---- C:\Windows\SYSWOW64\VB6KO.DLL
2011-08-25 15:54:43 ----A---- C:\Windows\SYSWOW64\lgfwunis.exe
2011-08-25 15:54:42 ----D---- C:\Program Files (x86)\lg_fwupdate
2011-08-25 15:38:41 ----D---- C:\Users\standa\AppData\Roaming\CyberLink
2011-08-25 15:34:09 ----D---- C:\Program Files (x86)\CyberLink
2011-08-25 15:33:57 ----D---- C:\ProgramData\CyberLink
2011-08-21 22:38:29 ----A---- C:\Windows\system32\drivers\RLVrtAuCbl.sys
2011-08-21 22:37:54 ----D---- C:\Program Files (x86)\Reallusion
2011-08-21 22:33:35 ----A---- C:\Windows\SYSWOW64\Remover.ini
2011-08-21 22:33:35 ----A---- C:\Windows\SYSWOW64\Remove.exe
2011-08-21 22:33:32 ----A---- C:\Windows\SYSWOW64\SP207.ini
2011-08-21 22:33:32 ----A---- C:\Windows\SYSWOW64\P207USD.dll
2011-08-14 08:21:22 ----D---- C:\Users\standa\AppData\Roaming\TomTom
2011-08-13 19:07:07 ----D---- C:\Users\standa\AppData\Roaming\dvdcss
2011-08-11 05:31:47 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-10 13:02:49 ----D---- C:\ProgramData\Blizzard Entertainment
2011-08-07 21:19:03 ----D---- C:\Program Files (x86)\Webteh
======List of files/folders modified in the last 1 month======
2011-08-30 19:10:37 ----D---- C:\Windows\Prefetch
2011-08-30 19:10:34 ----D---- C:\Windows\Temp
2011-08-30 19:10:24 ----RD---- C:\Program Files
2011-08-30 19:07:56 ----D---- C:\Users\standa\AppData\Roaming\Skype
2011-08-30 06:51:00 ----D---- C:\Windows\System32
2011-08-30 06:51:00 ----D---- C:\Windows\inf
2011-08-30 06:51:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-08-30 06:44:25 ----D---- C:\Windows\system32\drivers
2011-08-30 06:42:00 ----D---- C:\Windows\system32\catroot2
2011-08-30 06:42:00 ----D---- C:\Windows\system32\catroot
2011-08-30 06:41:52 ----D---- C:\Windows\winsxs
2011-08-29 22:37:07 ----D---- C:\Windows\Microsoft.NET
2011-08-29 22:36:51 ----RSD---- C:\Windows\assembly
2011-08-29 22:31:13 ----D---- C:\Windows\rescache
2011-08-29 22:18:06 ----D---- C:\Windows
2011-08-29 22:17:49 ----SHD---- C:\Boot
2011-08-29 22:12:11 ----D---- C:\Program Files\Windows Sidebar
2011-08-29 22:12:11 ----D---- C:\Program Files\Windows Media Player
2011-08-29 22:12:11 ----D---- C:\Program Files\Windows Mail
2011-08-29 22:12:11 ----D---- C:\Program Files\Windows Journal
2011-08-29 22:12:11 ----D---- C:\Program Files\Windows Collaboration
2011-08-29 22:12:11 ----D---- C:\Program Files\Movie Maker
2011-08-29 22:12:11 ----D---- C:\Program Files\Internet Explorer
2011-08-29 22:12:10 ----D---- C:\Program Files\Windows Photo Gallery
2011-08-29 22:12:10 ----D---- C:\Program Files\Windows Defender
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Windows Photo Gallery
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Windows Media Player
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Windows Mail
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Windows Calendar
2011-08-29 22:12:10 ----D---- C:\Program Files (x86)\Internet Explorer
2011-08-29 22:12:09 ----D---- C:\Windows\servicing
2011-08-29 22:12:09 ----D---- C:\Windows\ehome
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\XPSViewer
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\sk-SK
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\lv-LV
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\ko-KR
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\it-IT
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\hr-HR
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\et-EE
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\en-US
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\el-GR
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\de-DE
2011-08-29 22:12:06 ----D---- C:\Windows\SYSWOW64\da-DK
2011-08-29 22:12:05 ----D---- C:\Windows\SYSWOW64\oobe
2011-08-29 22:12:05 ----D---- C:\Windows\SYSWOW64\migration
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\zh-TW
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\zh-CN
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\wbem
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\uk-UA
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\tr-TR
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\th-TH
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\sv-SE
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\sr-Latn-CS
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\SLUI
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\sl-SI
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\setup
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\ru-RU
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\ro-RO
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\pt-PT
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\pl-PL
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\ja-JP
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\hu-HU
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\he-IL
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\fr-FR
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\fi-FI
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\es-ES
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\cs
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\bg-BG
2011-08-29 22:12:04 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\pt-BR
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\nl-NL
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\nb-NO
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\migwiz
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\lt-LT
2011-08-29 22:12:03 ----D---- C:\Windows\SYSWOW64\ar-SA
2011-08-29 22:12:03 ----D---- C:\Windows\SysWOW64
2011-08-29 22:11:55 ----D---- C:\Windows\system32\sk-SK
2011-08-29 22:11:55 ----D---- C:\Windows\system32\oobe
2011-08-29 22:11:55 ----D---- C:\Windows\system32\migration
2011-08-29 22:11:55 ----D---- C:\Windows\system32\lv-LV
2011-08-29 22:11:55 ----D---- C:\Windows\system32\ko-KR
2011-08-29 22:11:55 ----D---- C:\Windows\system32\it-IT
2011-08-29 22:11:55 ----D---- C:\Windows\system32\hr-HR
2011-08-29 22:11:55 ----D---- C:\Windows\system32\et-EE
2011-08-29 22:11:55 ----D---- C:\Windows\system32\en-US
2011-08-29 22:11:55 ----D---- C:\Windows\system32\el-GR
2011-08-29 22:11:55 ----D---- C:\Windows\system32\de-DE
2011-08-29 22:11:55 ----D---- C:\Windows\system32\da-DK
2011-08-29 22:11:55 ----D---- C:\Windows\IME
2011-08-29 22:11:54 ----D---- C:\Windows\system32\sv-SE
2011-08-29 22:11:54 ----D---- C:\Windows\system32\setup
2011-08-29 22:11:54 ----D---- C:\Windows\system32\ru-RU
2011-08-29 22:11:54 ----D---- C:\Windows\system32\he-IL
2011-08-29 22:11:54 ----D---- C:\Windows\system32\fr-FR
2011-08-29 22:11:54 ----D---- C:\Windows\system32\fi-FI
2011-08-29 22:11:54 ----D---- C:\Windows\system32\cs-CZ
2011-08-29 22:11:54 ----D---- C:\Windows\system32\cs
2011-08-29 22:11:54 ----D---- C:\Windows\system32\AdvancedInstallers
2011-08-29 22:11:50 ----D---- C:\Windows\system32\SLUI
2011-08-29 22:11:50 ----D---- C:\Windows\system32\pt-PT
2011-08-29 22:11:50 ----D---- C:\Windows\system32\hu-HU
2011-08-29 22:11:49 ----D---- C:\Windows\system32\zh-TW
2011-08-29 22:11:49 ----D---- C:\Windows\system32\zh-CN
2011-08-29 22:11:49 ----D---- C:\Windows\system32\wbem
2011-08-29 22:11:49 ----D---- C:\Windows\system32\uk-UA
2011-08-29 22:11:49 ----D---- C:\Windows\system32\tr-TR
2011-08-29 22:11:49 ----D---- C:\Windows\system32\th-TH
2011-08-29 22:11:49 ----D---- C:\Windows\system32\sr-Latn-CS
2011-08-29 22:11:49 ----D---- C:\Windows\system32\sl-SI
2011-08-29 22:11:49 ----D---- C:\Windows\system32\ro-RO
2011-08-29 22:11:49 ----D---- C:\Windows\system32\pl-PL
2011-08-29 22:11:49 ----D---- C:\Windows\system32\nb-NO
2011-08-29 22:11:49 ----D---- C:\Windows\system32\manifeststore
2011-08-29 22:11:49 ----D---- C:\Windows\system32\ja-JP
2011-08-29 22:11:49 ----D---- C:\Windows\system32\es-ES
2011-08-29 22:11:49 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-08-29 22:11:49 ----D---- C:\Windows\system32\bg-BG
2011-08-29 22:11:48 ----D---- C:\Windows\system32\pt-BR
2011-08-29 22:11:48 ----D---- C:\Windows\system32\nl-NL
2011-08-29 22:11:48 ----D---- C:\Windows\system32\migwiz
2011-08-29 22:11:48 ----D---- C:\Windows\system32\lt-LT
2011-08-29 22:11:48 ----D---- C:\Windows\system32\ar-SA
2011-08-29 22:11:42 ----RSD---- C:\Windows\Fonts
2011-08-29 22:11:42 ----D---- C:\Windows\AppPatch
2011-08-29 22:11:36 ----D---- C:\Windows\system32\Boot
2011-08-29 22:10:43 ----D---- C:\Windows\system32\drivers\UMDF
2011-08-29 22:10:14 ----D---- C:\Windows\SYSWOW64\RTCOM
2011-08-29 22:03:43 ----A---- C:\Windows\fonts\GlobalUserInterface.CompositeFont
2011-08-29 21:57:27 ----SHD---- C:\System Volume Information
2011-08-29 21:27:42 ----RD---- C:\Program Files (x86)
2011-08-29 21:22:26 ----HD---- C:\ProgramData
2011-08-29 21:21:51 ----SHD---- C:\Windows\Installer
2011-08-29 21:21:47 ----RD---- C:\Program Files (x86)\Skype
2011-08-29 21:20:36 ----D---- C:\Windows\system32\Tasks
2011-08-29 21:20:31 ----D---- C:\ProgramData\Skype
2011-08-29 20:40:17 ----D---- C:\Windows\system32\Msdtc
2011-08-29 20:39:19 ----D---- C:\Windows\system32\config
2011-08-29 20:38:58 ----D---- C:\Windows\Tasks
2011-08-29 20:38:58 ----D---- C:\Windows\system32\spool
2011-08-29 20:38:58 ----D---- C:\Users\standa\AppData\Roaming\uTorrent
2011-08-29 20:38:57 ----D---- C:\Program Files (x86)\Xvid CZ
2011-08-29 20:38:56 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-08-29 20:38:55 ----D---- C:\Windows\registration
2011-08-29 20:34:08 ----D---- C:\Windows\Logs
2011-08-25 21:32:54 ----D---- C:\Users\standa\AppData\Roaming\vlc
2011-08-25 15:56:50 ----D---- C:\Temp
2011-08-25 15:55:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-08-25 15:55:02 ----AD---- C:\ProgramData\TEMP
2011-08-25 15:43:40 ----D---- C:\Program Files (x86)\Common Files
2011-08-22 15:44:31 ----D---- C:\Windows\system32\WDI
2011-08-21 22:33:32 ----D---- C:\Windows\twain_32
2011-08-21 22:33:31 ----D---- C:\Windows\PixArt
2011-08-21 22:24:51 ----D---- C:\Windows\SYSWOW64\drivers
2011-08-19 10:43:52 ----SD---- C:\Users\standa\AppData\Roaming\Microsoft
2011-08-14 22:03:21 ----D---- C:\ProgramData\CanonIJPLM
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 31400]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 34152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2008-12-26 1590048]
R3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 7040]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 6656]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2011-05-21 13206120]
R3 PAC207;Eye 110; C:\Windows\system32\DRIVERS\PFC027.SYS [2007-10-25 684544]
R3 ReallusionVirtualAudio;Reallusion Virtual Audio; C:\Windows\system32\DRIVERS\RLVrtAuCbl.sys [2007-03-19 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2008-10-03 184320]
R3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 98944]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-05-23 36352]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 108544]
R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-09-10 74960]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 6144]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 273920]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 11008]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 7936]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS_64.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2011-05-10 51712]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 41984]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 46080]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-05-25 37664]
R2 Bonjour Service;Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2011-04-06 349472]
R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2006-11-10 99936]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-04-22 73728]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-05-21 1016936]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-21 2214504]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-07-03 75064]
R2 QuestScan Service;QuestScan Service; C:\ProgramData\QuestScan\questscan181.exe [2011-08-25 40960]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-07-02 244904]
S2 CLKMSVC10_9EC60124;CyberLink Product - 2011/08/25 15:43:51; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [2010-05-14 246256]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2011-06-07 934176]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-19 19968]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
-----------------EOF-----------------