VIRY.CZ

http://www.viry.cz/go.php?p=viry&t=novinka&id=2690

dobrý dne předem děkuji za pomoc a vidim že ostaní sem házej nákej log tak se chci zeptat jak se to dělá abych ho sem mohl hodit taky..

Zdravim, pekny den preji a vitam Vas u nas na foru

Prectete si prosim pravidla fora

Dejte log z RSIT dle tohoto navodu http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ondra at 2011-08-31 11:56:32
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 18 GB (10%) free of 188 GB
Total RAM: 4063 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:56:42, on 31.8.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2269050
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.myheritage.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
R3 - URLSearchHook: TenchisTV Toolbar - {ece24dcf-8548-4655-b392-47a388721482} - C:\Program Files (x86)\TenchisTV\tbTenc.dll
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
R3 - URLSearchHook: MHURLSearchHook Class - {1C4AB6A5-595F-4e86-B15F-F93CCE2BBD48} - C:\Program Files (x86)\Family Toolbar\tbhelper.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O2 - BHO: MHTBPos00 - {0C37B053-FD68-456a-82E1-D788EE342E6F} - C:\Program Files (x86)\Family Toolbar\tbcore3.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BrowserPlugin - {1C749E08-6B62-11E0-B6DA-075F4824019B} - C:\Users\Ondra\AppData\Local\GamePlayLabs Plugin\BHO.dll (file missing)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SMART Notebook Download Plugin - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\SMART Notebook\NotebookPlugin.dll
O2 - BHO: DVDVideoSoftTB - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: everyflv - {e3a8aa9e-bc25-caeb-0e8c-f1e0df261042} - (no file)
O2 - BHO: TenchisTV Toolbar - {ece24dcf-8548-4655-b392-47a388721482} - C:\Program Files (x86)\TenchisTV\tbTenc.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
O3 - Toolbar: Family Toolbar - {FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - C:\Program Files (x86)\Family Toolbar\tbcore3.dll
O3 - Toolbar: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O3 - Toolbar: TenchisTV Toolbar - {ece24dcf-8548-4655-b392-47a388721482} - C:\Program Files (x86)\TenchisTV\tbTenc.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [MarketingTools] C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
O4 - HKLM\..\Run: [SHTtray.exe] C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SMART Board Service] C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTBoardService.exe
O4 - HKLM\..\Run: [SMART SNMP Agent] C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTSNMPAgent.exe -e
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [wxpdrv] C:\Windows\services32.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "c:\program files (x86)\steam\steam.exe" -silent
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [MusicManager] "C:\Users\Ondra\AppData\Local\Programs\Google\MusicManager\MusicManager.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: MLB.TV NexDef Plug-in.lnk = Ondra\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to DVD Converter - C:\Users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetodvdconverter.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (file missing)
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files (x86)\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files (x86)\PokerStars.NET\PokerStarsUpdate.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}: NameServer = 94.142.233.120,94.142.233.140
O17 - HKLM\System\CS1\Services\Tcpip\..\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}: NameServer = 94.142.233.120,94.142.233.140
O17 - HKLM\System\CS2\Services\Tcpip\..\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}: NameServer = 94.142.233.120,94.142.233.140
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe (file missing)
O23 - Service: ESET Service (ekrn) - Unknown owner - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe
O23 - Service: GS In-Game Service - ClanServers Hosting LLC - C:\Program Files (x86)\GameTracker\GSInGameService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee ScanAndRepair Svc - McAfee, Inc. - C:\Program Files (x86)\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
O23 - Service: VAIO Media plus Database Manager (SOHDBSvr) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe
O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
O23 - Service: VAIO Media plus Playlist Manager (SOHPlMgr) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
O23 - Service: VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VSNService - Sony Corporation - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: VUAgent - Sony Corporation - C:\Program Files\Sony\VAIO Update 5\VUAgent.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: wxpdrivers - Unknown owner - C:\Windows\update.1\svchost.exe

--
End of file - 19108 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
/QuitInfo:00000000000003C8;00000000000003CC; /AddRef;
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\SysWOW64\svchost.exe -k Akamai
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe" -s DefaultInstance
"C:\Program Files (x86)\GameTracker\GSInGameService.exe"
"C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe"
"C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe"
"C:\Program Files\Sony\VAIO Power Management\SPMService.exe"
C:\Windows\SysWOW64\DllHost.exe /Processid:{78FD0120-D39C-45D8-A9BE-2B802B3C23E5}
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe"
"C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe"
"C:\Program Files\Sony\VAIO Smart Network\VSNService.exe"
/Device:00000061
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\update.1\svchost.exe srv
WLIDSvcM.exe 2236
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe" -RunBySCM
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe" -s DefaultInstance
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-1158b146-8adf-4e3b-91ce-462f6c644b3b -SystemEventPortName:HostProcess-831d5484-4023-4ba0-aa4b-bdc336b801b0 -IoCancelEventPortName:HostProcess-2249bbe2-a859-4e8b-b15d-8959d1f4731c -NonStateChangingEventPortName:HostProcess-7f32acc5-08a0-4b4c-bcb0-aada41f29893 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:39a91210-79c3-4ec7-8713-66645692f52d
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files\Sony\VAIO Update 5\VUAgent.exe"
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=3100.07E66C60.1779323519 /prefetch:3
"C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -restart
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\13.0.782.215\gcswf32.dll" --lang=cs --channel=3100.0D086E00.2128056019 --flash-broker=6524 /prefetch:4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=3100.04EE7C60.638953409 /prefetch:3
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=3100.0AF5F6E0.2090288054 /prefetch:3
"c:\program files\windows defender\MpCmdRun.exe" Scan -ScheduleJob -WinTask -RestrictPrivilegesScan -Reinvoke
/QuitInfo:00000000000005F4;000000000000061C;
/QuitInfo:000000000000060C;0000000000000610; /AddRef;
/loadhooks /Parent:00000000000020F8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=3100.0CE4C420.2041279729 /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe135_ Global\UsGthrCtrlFltPipeMssGthrPipe135 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\Ondra\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2810233194-878912617-1183046435-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2810233194-878912617-1183046435-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-19 43520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{043C5167-00BB-4324-AF7E-62013FAEDACF}]
vShare Plugin - C:\Program Files (x86)\vShare\vshare_toolbar.dll [2010-10-20 481872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]
MHTBPos00 Class - C:\Program Files (x86)\Family Toolbar\tbcore3.dll [2009-05-07 2642432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1C749E08-6B62-11E0-B6DA-075F4824019B}]
BrowserPlugin - C:\Users\Ondra\AppData\Local\GamePlayLabs Plugin\BHO.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-27 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{67BCF957-85FC-4036-8DC4-D4D80E00A77B}]
CIEDownload Object - C:\Program Files (x86)\SMART Technologies\SMART Notebook\NotebookPlugin.dll [2010-01-08 247080]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
DVDVideoSoftTB Toolbar - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\tbuTor.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e3a8aa9e-bc25-caeb-0e8c-f1e0df261042}]
everyflv

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ece24dcf-8548-4655-b392-47a388721482}]
TenchisTV Toolbar - C:\Program Files (x86)\TenchisTV\tbTenc.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-06-02 1018616]
{872b5b88-9db5-4310-bdd0-ac189557e5f5} - DVDVideoSoftTB Toolbar - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll [2011-01-17 175912]
{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - Family Toolbar - C:\Program Files (x86)\Family Toolbar\tbcore3.dll [2009-05-07 2642432]
{043C5167-00BB-4324-AF7E-62013FAEDACF} - vShare Plugin - C:\Program Files (x86)\vShare\vshare_toolbar.dll [2010-10-20 481872]
{ece24dcf-8548-4655-b392-47a388721482} - TenchisTV Toolbar - C:\Program Files (x86)\TenchisTV\tbTenc.dll [2010-12-09 3911776]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\tbuTor.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-07-24 7938080]
"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-07-24 1833504]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2009-08-03 208384]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-05 186904]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-19 171520]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe /hide /waitservice []
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2011-04-02 399736]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Steam"=c:\program files (x86)\steam\steam.exe [2011-08-02 1242448]
"ICQ"=C:\Program Files (x86)\ICQ7.2\ICQ.exe silent loginmode=4 []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2011-01-26 15026056]
"Google Update"=C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-22 136176]
"MusicManager"=C:\Users\Ondra\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [2011-06-15 12817920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameTracker]
C:\Program Files (x86)\GameTracker\GTLite.exe [2010-04-14 3831648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2008-12-03 3882312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2011-08-02 1242448]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"=C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2009-05-26 317288]
"MarketingTools"=C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [2009-11-26 26624]
"SHTtray.exe"=C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [2009-07-28 99624]
"TkBellExe"=C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [2010-03-27 202256]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"SMART Board Service"=C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTBoardService.exe [2010-01-05 3372328]
"SMART SNMP Agent"=C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTSNMPAgent.exe [2010-01-05 1053992]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-04 336384]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"ATICustomerCare"=C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [2010-05-04 311296]
"wxpdrv"=C:\Windows\services32.exe [2011-08-21 1213440]
"tray_ico"= []
"tray_ico1"= []
"tray_ico2"= []
"tray_ico3"= []
"tray_ico4"= []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MLB.TV NexDef Plug-in.lnk - C:\Users\Ondra\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-08-05 258560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux3"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux4"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux5"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 month======

2011-08-31 11:56:34 ----D---- C:\Program Files\trend micro
2011-08-31 11:56:32 ----D---- C:\rsit
2011-08-27 07:05:36 ----D---- C:\Program Files (x86)\2K Games
2011-08-25 15:49:35 ----D---- C:\Program Files\Mafia
2011-08-24 05:00:30 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-08-24 05:00:30 ----A---- C:\Windows\system32\tzres.dll
2011-08-22 09:30:24 ----A---- C:\ProgramData\NTUSER.DAT
2011-08-22 09:29:34 ----D---- C:\Program Files (x86)\McAfeeScanAndRepair
2011-08-21 19:12:48 ----D---- C:\Program Files (x86)\AMD APP
2011-08-21 18:52:30 ----A---- C:\Windows\iecheck_iplist.txt
2011-08-21 18:52:21 ----D---- C:\Windows\ufa
2011-08-21 18:52:21 ----D---- C:\Windows\rpcminer
2011-08-21 18:52:21 ----D---- C:\Windows\phoenix
2011-08-21 18:52:16 ----HD---- C:\Windows\update.7.1
2011-08-21 18:51:57 ----A---- C:\Windows\btc_client_iplist.txt
2011-08-21 18:51:32 ----A---- C:\Windows\unrar.exe
2011-08-21 18:51:25 ----HD---- C:\Windows\update.2
2011-08-21 18:51:05 ----HD---- C:\Windows\update.5.0
2011-08-21 18:50:29 ----A---- C:\Windows\iplist.txt
2011-08-21 18:48:14 ----A---- C:\Windows\front_ip_list.txt
2011-08-21 18:47:52 ----D---- C:\Windows\av_ico
2011-08-21 18:46:04 ----HD---- C:\Windows\update.1
2011-08-21 18:45:55 ----HD---- C:\Windows\update.tray-3-0-lnk
2011-08-21 18:45:55 ----HD---- C:\Windows\update.tray-3-0
2011-08-21 18:35:38 ----A---- C:\Windows\winlog-ids.txt
2011-08-21 18:35:37 ----A---- C:\Windows\winlog-dirs.txt
2011-08-21 18:35:31 ----A---- C:\Windows\services32.exe
2011-08-12 17:57:27 ----A---- C:\Windows\system32\xmllite.dll
2011-08-12 17:57:26 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2011-08-12 17:57:09 ----A---- C:\Windows\system32\kernel32.dll
2011-08-12 17:57:09 ----A---- C:\Windows\system32\conhost.exe
2011-08-12 17:57:08 ----A---- C:\Windows\system32\winsrv.dll
2011-08-12 17:57:07 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-08-12 17:57:07 ----A---- C:\Windows\system32\wow64.dll
2011-08-12 17:57:07 ----A---- C:\Windows\system32\KernelBase.dll
2011-08-12 17:57:06 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-08-12 17:57:06 ----A---- C:\Windows\system32\ntvdm64.dll
2011-08-12 17:57:05 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-08-12 17:57:05 ----A---- C:\Windows\system32\wow64win.dll
2011-08-12 17:57:05 ----A---- C:\Windows\system32\wow64cpu.dll
2011-08-12 17:57:04 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-08-12 17:57:04 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-08-12 17:57:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-12 17:57:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-08-12 17:57:03 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-12 17:57:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-08-12 17:57:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-12 17:57:02 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-12 17:57:02 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-08-12 17:56:59 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-08-12 17:56:59 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-12 17:56:59 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-12 17:56:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-08-12 17:56:58 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-12 17:56:58 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-08-12 17:56:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-12 17:56:57 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-12 17:56:56 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-08-12 17:56:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-08-12 17:56:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-12 17:56:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-08-12 17:56:55 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-12 17:56:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-12 17:56:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-08-12 17:56:54 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-08-12 17:56:54 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-12 17:56:54 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-08-12 17:56:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-08-12 17:56:53 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-08-12 17:56:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-08-12 17:56:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-12 17:56:52 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-08-12 17:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-08-12 17:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-08-12 17:56:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-08-12 17:56:50 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-08-12 17:56:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-12 17:56:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-08-12 17:56:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-08-12 17:56:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-08-12 17:56:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-12 17:56:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-08-12 17:56:45 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-08-12 17:56:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-08-12 17:56:44 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-08-12 17:56:43 ----A---- C:\Windows\SYSWOW64\user.exe
2011-08-12 17:56:43 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-08-12 17:56:38 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-08-12 17:56:38 ----A---- C:\Windows\system32\odbctrac.dll
2011-08-12 17:56:38 ----A---- C:\Windows\system32\odbccu32.dll
2011-08-12 17:56:38 ----A---- C:\Windows\system32\odbccr32.dll
2011-08-12 17:56:38 ----A---- C:\Windows\system32\odbccp32.dll
2011-08-12 17:56:37 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2011-08-12 17:56:37 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2011-08-12 17:56:36 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-08-12 17:56:36 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-08-12 17:56:33 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-12 17:56:29 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-08-12 17:56:15 ----A---- C:\Windows\system32\mshtml.dll
2011-08-12 17:56:10 ----A---- C:\Windows\system32\iertutil.dll
2011-08-12 17:56:09 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-08-12 17:56:03 ----A---- C:\Windows\system32\ieframe.dll
2011-08-12 17:55:50 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-08-12 17:55:47 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-08-12 17:55:43 ----A---- C:\Windows\system32\urlmon.dll
2011-08-12 17:55:42 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-08-12 17:55:41 ----A---- C:\Windows\system32\wininet.dll
2011-08-12 17:55:41 ----A---- C:\Windows\system32\msfeeds.dll
2011-08-12 17:55:39 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-08-12 17:55:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-08-12 17:55:38 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-08-12 17:55:38 ----A---- C:\Windows\system32\url.dll
2011-08-12 17:55:38 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-12 17:55:38 ----A---- C:\Windows\system32\ieui.dll
2011-08-12 17:55:37 ----A---- C:\Windows\SYSWOW64\url.dll
2011-08-12 17:55:37 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-08-12 17:55:36 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-08-12 17:55:36 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-12 17:55:07 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-08-12 17:55:05 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-08-12 17:55:03 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-08-05 12:43:04 ----D---- C:\Windows\system32\SPReview
2011-08-05 12:41:18 ----D---- C:\Windows\system32\EventProviders

======List of files/folders modified in the last 1 month======

2011-08-31 11:56:41 ----D---- C:\Windows\Temp
2011-08-31 11:56:38 ----D---- C:\Windows\Prefetch
2011-08-31 11:56:34 ----RD---- C:\Program Files
2011-08-31 11:48:39 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2011-08-31 11:05:46 ----D---- C:\ProgramData\Easybits GO
2011-08-31 09:35:43 ----D---- C:\Users\Ondra\AppData\Roaming\go
2011-08-31 01:41:49 ----D---- C:\Windows\system32\config
2011-08-30 22:08:37 ----SHD---- C:\System Volume Information
2011-08-30 18:33:46 ----D---- C:\Windows\SysWOW64
2011-08-30 18:33:42 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-08-30 01:40:40 ----D---- C:\Windows\rescache
2011-08-29 20:14:45 ----D---- C:\Users\Ondra\AppData\Roaming\Mumble
2011-08-29 16:38:15 ----D---- C:\Windows\system32\Tasks
2011-08-28 22:04:37 ----RD---- C:\Program Files (x86)
2011-08-28 21:59:54 ----D---- C:\Windows\system32\drivers
2011-08-28 21:59:54 ----D---- C:\Windows\System32
2011-08-27 21:56:33 ----D---- C:\Users\Ondra\AppData\Roaming\uTorrent
2011-08-26 22:59:57 ----D---- C:\Program Files (x86)\Steam
2011-08-25 21:23:18 ----D---- C:\Windows\inf
2011-08-25 21:23:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-08-25 16:03:54 ----D---- C:\Windows
2011-08-25 12:40:44 ----D---- C:\Windows\Minidump
2011-08-25 03:01:21 ----D---- C:\Windows\winsxs
2011-08-25 03:01:13 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-08-25 03:01:13 ----D---- C:\Windows\system32\cs-CZ
2011-08-24 04:58:17 ----D---- C:\Windows\system32\catroot2
2011-08-24 04:58:17 ----D---- C:\Windows\system32\catroot
2011-08-22 09:32:07 ----D---- C:\Windows\system32\drivers\etc
2011-08-22 09:30:24 ----HD---- C:\ProgramData
2011-08-21 19:12:54 ----SHD---- C:\Windows\Installer
2011-08-15 12:52:40 ----D---- C:\Windows\system32\NDF
2011-08-13 13:17:14 ----RSD---- C:\Windows\assembly
2011-08-13 13:17:14 ----D---- C:\Windows\Microsoft.NET
2011-08-13 03:32:01 ----D---- C:\Windows\AppPatch
2011-08-13 03:32:00 ----D---- C:\Windows\SYSWOW64\migration
2011-08-13 03:32:00 ----D---- C:\Windows\system32\migration
2011-08-13 03:32:00 ----D---- C:\Program Files\Internet Explorer
2011-08-13 03:32:00 ----D---- C:\Program Files (x86)\Internet Explorer
2011-08-13 03:15:53 ----D---- C:\ProgramData\Microsoft Help
2011-08-13 03:11:37 ----A---- C:\Windows\system32\MRT.exe
2011-08-13 03:10:40 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2011-08-09 08:05:36 ----D---- C:\Users\Ondra\AppData\Roaming\vlc
2011-08-08 13:40:59 ----A---- C:\Users\Ondra\AppData\Roaming\myMPQ.ini
2011-08-05 22:11:03 ----D---- C:\Windows\system32\DriverStore
2011-08-05 22:05:15 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-08-05 22:05:15 ----D---- C:\Program Files (x86)\Windows Portable Devices
2011-08-05 22:05:15 ----D---- C:\Program Files (x86)\Windows Mail
2011-08-05 22:05:14 ----D---- C:\Program Files (x86)\Windows Media Player
2011-08-05 22:05:13 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-08-05 22:05:09 ----D---- C:\Program Files\Windows Sidebar
2011-08-05 22:05:09 ----D---- C:\Program Files\Windows Mail
2011-08-05 22:05:09 ----D---- C:\Program Files\DVD Maker
2011-08-05 22:05:08 ----D---- C:\Program Files\Windows Portable Devices
2011-08-05 22:05:08 ----D---- C:\Program Files\Windows Media Player
2011-08-05 22:05:07 ----D---- C:\Program Files\Windows Photo Viewer
2011-08-05 22:05:07 ----D---- C:\Program Files\Windows Journal
2011-08-05 22:05:03 ----D---- C:\Windows\servicing
2011-08-05 22:05:03 ----D---- C:\Program Files\Windows Defender
2011-08-05 22:05:02 ----D---- C:\Windows\ehome
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\oobe
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\ko-KR
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\it-IT
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\en-US
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\el-GR
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\de-DE
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\da-DK
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\sv-SE
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\Setup
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\ru-RU
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\he-IL
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\fr-FR
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\fi-FI
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\cs
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-08-05 22:04:42 ----D---- C:\Windows\SYSWOW64\zh-CN
2011-08-05 22:04:42 ----D---- C:\Windows\SYSWOW64\pt-PT
2011-08-05 22:04:42 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-08-05 22:04:42 ----D---- C:\Windows\SYSWOW64\hu-HU
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\zh-TW
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\wbem
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\tr-TR
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\th-TH
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\sppui
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\ro-RO
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\pl-PL
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\ja-JP
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\es-ES
2011-08-05 22:04:40 ----D---- C:\Windows\SYSWOW64\nl-NL
2011-08-05 22:04:40 ----D---- C:\Windows\SYSWOW64\nb-NO
2011-08-05 22:04:40 ----D---- C:\Windows\SYSWOW64\ar-SA
2011-08-05 22:04:39 ----D---- C:\Windows\SYSWOW64\migwiz
2011-08-05 22:04:39 ----D---- C:\Windows\SYSWOW64\Dism
2011-08-05 22:04:38 ----D---- C:\Windows\SYSWOW64\pt-BR
2011-08-05 22:04:04 ----D---- C:\Windows\system32\da-DK
2011-08-05 22:04:04 ----D---- C:\Windows\PolicyDefinitions
2011-08-05 22:04:03 ----D---- C:\Windows\system32\ko-KR
2011-08-05 22:04:03 ----D---- C:\Windows\system32\it-IT
2011-08-05 22:04:03 ----D---- C:\Windows\system32\en-US
2011-08-05 22:04:03 ----D---- C:\Windows\system32\de-DE
2011-08-05 22:04:02 ----D---- C:\Windows\system32\oobe
2011-08-05 22:04:02 ----D---- C:\Windows\system32\el-GR
2011-08-05 22:04:00 ----D---- C:\Windows\system32\ru-RU
2011-08-05 22:04:00 ----D---- C:\Windows\system32\AdvancedInstallers
2011-08-05 22:03:59 ----D---- C:\Windows\system32\sv-SE
2011-08-05 22:03:59 ----D---- C:\Windows\system32\Setup
2011-08-05 22:03:59 ----D---- C:\Windows\system32\he-IL
2011-08-05 22:03:59 ----D---- C:\Windows\system32\fr-FR
2011-08-05 22:03:58 ----D---- C:\Windows\system32\fi-FI
2011-08-05 22:03:58 ----D---- C:\Windows\system32\cs
2011-08-05 22:03:53 ----D---- C:\Windows\system32\zh-TW
2011-08-05 22:03:53 ----D---- C:\Windows\system32\zh-CN
2011-08-05 22:03:53 ----D---- C:\Windows\system32\pt-PT
2011-08-05 22:03:53 ----D---- C:\Windows\system32\manifeststore
2011-08-05 22:03:53 ----D---- C:\Windows\system32\hu-HU
2011-08-05 22:03:53 ----D---- C:\Windows\system32\es-ES
2011-08-05 22:03:52 ----D---- C:\Windows\system32\sppui
2011-08-05 22:03:52 ----D---- C:\Windows\system32\pl-PL
2011-08-05 22:03:52 ----D---- C:\Windows\system32\ja-JP
2011-08-05 22:03:51 ----D---- C:\Windows\system32\th-TH
2011-08-05 22:03:51 ----D---- C:\Windows\system32\ro-RO
2011-08-05 22:03:50 ----D---- C:\Windows\system32\drivers\pt-BR
2011-08-05 22:03:50 ----D---- C:\Windows\system32\drivers\it-IT
2011-08-05 22:03:50 ----D---- C:\Windows\system32\drivers\he-IL
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\pt-PT
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\pl-PL
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\nl-NL
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\ko-KR
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\hu-HU
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\el-GR
2011-08-05 22:03:48 ----D---- C:\Windows\system32\drivers\tr-TR
2011-08-05 22:03:48 ----D---- C:\Windows\system32\drivers\th-TH
2011-08-05 22:03:48 ----D---- C:\Windows\system32\drivers\sv-SE
2011-08-05 22:03:48 ----D---- C:\Windows\system32\drivers\fr-FR
2011-08-05 22:03:48 ----D---- C:\Windows\system32\drivers\fi-FI
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\zh-TW
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\zh-CN
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\es-ES
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\de-DE
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\ar-SA
2011-08-05 22:03:46 ----D---- C:\Windows\system32\drivers\ru-RU
2011-08-05 22:03:46 ----D---- C:\Windows\system32\drivers\ro-RO
2011-08-05 22:03:46 ----D---- C:\Windows\system32\drivers\nb-NO
2011-08-05 22:03:46 ----D---- C:\Windows\system32\drivers\ja-JP
2011-08-05 22:03:46 ----D---- C:\Windows\system32\drivers\da-DK
2011-08-05 22:03:45 ----D---- C:\Windows\system32\drivers\en-US
2011-08-05 22:03:44 ----D---- C:\Windows\system32\wbem
2011-08-05 22:03:44 ----D---- C:\Windows\system32\tr-TR
2011-08-05 22:03:43 ----D---- C:\Windows\system32\nl-NL
2011-08-05 22:03:43 ----D---- C:\Windows\system32\nb-NO
2011-08-05 22:03:42 ----D---- C:\Windows\system32\migwiz
2011-08-05 22:03:42 ----D---- C:\Windows\system32\ar-SA
2011-08-05 22:03:41 ----D---- C:\Windows\system32\pt-BR
2011-08-05 22:03:41 ----D---- C:\Windows\system32\Dism
2011-08-05 22:03:01 ----RSD---- C:\Windows\Fonts
2011-08-05 22:01:53 ----D---- C:\Windows\system32\Boot
2011-08-05 22:00:44 ----D---- C:\Windows\system32\drivers\UMDF
2011-08-05 13:05:54 ----D---- C:\Windows\Logs
2011-08-05 13:05:51 ----D---- C:\Program Files (x86)\Microsoft Office
2011-08-05 13:01:30 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2011-08-05 13:01:29 ----A---- C:\Windows\system32\msclmd.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-05 408600]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2009-05-20 55280]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2007-02-07 14104]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-06 834544]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-11-16 136584]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 acedrv11;acedrv11; \??\C:\Windows\system32\drivers\acedrv11.sys [2009-01-19 334344]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-11-16 145336]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2009-11-16 169080]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2009-11-16 44944]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimssn64.sys [2009-07-31 86528]
R2 risdptsk;risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [2009-07-31 76288]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2009-08-03 250928]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-27 19968]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-27 6037504]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-30 98344]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2009-07-30 132648]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-07-30 35104]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-30 21160]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2009-06-19 33608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-07-24 1822112]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-05 5435904]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-07-24 201472]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2009-06-11 11392]
R3 SMARTMouseFilterx64;HID-compliant mouse; C:\Windows\system32\DRIVERS\SMARTMouseFilterx64.sys [2009-12-15 12584]
R3 SMARTVHidMiniVistaAmd64;SMART HID Device; C:\Windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [2009-12-15 15784]
R3 SMARTVTabletPCx64;SMART Virtual TabletPC; C:\Windows\system32\DRIVERS\SMARTVTabletPCx64.sys [2009-12-15 18432]
R3 tap0901;tap0901; C:\Windows\system32\DRIVERS\tap0901.sys [2011-06-07 40128]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-07-31 1484800]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-08-05 7345632]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys [2009-08-05 139264]
S3 MSICDSetup;MSICDSetup; \??\G:\CDriver64.sys []
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\nmwcdx64.sys [2007-06-28 173056]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S4 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\Windows\System32\drivers\sfdrv01.sys [2005-08-10 68608]
S4 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [2005-05-16 7168]
S4 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\Windows\System32\drivers\sfvfs02.sys [2005-11-03 89600]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-27 203264]
R2 Bonjour Service;Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-02 864032]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [2007-10-16 81920]
R2 GS In-Game Service;GS In-Game Service; C:\Program Files (x86)\GameTracker\GSInGameService.exe [2010-04-14 1648480]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-05 354840]
R2 ICQ Service;ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-06-02 246520]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-05-01 75136]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2009-07-24 189984]
R2 SOHCImp;VAIO Media plus Content Importer; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-07-28 120104]
R2 SOHDBSvr;VAIO Media plus Database Manager; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-07-28 70952]
R2 SOHDms;VAIO Media plus Digital Media Server; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-07-28 427304]
R2 SOHDs;VAIO Media plus Device Searcher; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-07-28 75048]
R2 SOHPlMgr;VAIO Media plus Playlist Manager; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-07-28 91432]
R2 uCamMonitor;CamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
R2 VAIO Event Service;VAIO Event Service; C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe [2010-05-07 205168]
R2 VAIO Power Management;VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2009-08-23 411496]
R2 VCFw;VAIO Content Folder Watcher; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-07-23 642920]
R2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2009-06-27 468264]
R2 VSNService;VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [2009-08-13 522240]
R2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2009-07-23 206336]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [2007-10-16 2711552]
R3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [2009-07-23 313264]
R3 VUAgent;VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [2011-04-20 1021840]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe []
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-11-26 133104]
S2 Roxio Upnp Server 10;Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-06-26 362992]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe []
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-11-26 133104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 McAfee ScanAndRepair Svc;McAfee ScanAndRepair Svc; C:\Program Files (x86)\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe [2011-04-06 694864]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-06-26 313840]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-08-06 411432]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [2009-07-23 69632]
S3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager; C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-06-27 357672]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface; C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2009-06-18 110888]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-03 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
tady je ten LOG..

Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

• Ukoncete vsechny programy
• Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
• Zvolte moznost 2 a potvrte enterem
• Utilita provede svou cinnost a da log - ten sem vlozte
• Nyni znovu, ale zvolte moznost 3 a pote jeste 4 - logy opet vlozte

RogueKiller V5.3.4 [08/30/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User: Ondra [Admin rights]
Mode: Remove -- Date : 08/31/2011 12:55:46

Bad processes: 1
[HJ NAME] svchost.exe -- c:\windows\update.1\svchost.exe -> KILLED [TermProc]

Registry Entries: 7
[SUSP PATH] HKCU\[...]\Run : MusicManager ("C:\Users\Ondra\AppData\Local\Programs\Google\MusicManager\MusicManager.exe") -> DELETED
[BLACKLIST] HKLM\[...]\services : wxpdrivers (C:\Windows\update.1\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : wxpdrivers (C:\Windows\update.1\svchost.exe srv) -> DELETED
[SUSP PATH] MLB.TV NexDef Plug-in.lnk : C:\Users\Ondra\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe -> DELETED
[HJ] HKLM\[...]\System : EnableLUA (0) -> REPLACED (1)
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

Particular Files / Folders:

HOSTS File:


Finished : << RKreport[1].txt >>
RKreport[1].txt

RogueKiller V5.3.4 [08/30/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User: Ondra [Admin rights]
Mode: HOSTSFix -- Date : 08/31/2011 12:56:47

Bad processes: 0

HOSTS File:


Resetted HOSTS:
127.0.0.1 localhost

Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

RogueKiller V5.3.4 [08/30/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User: Ondra [Admin rights]
Mode: ProxyFix -- Date : 08/31/2011 12:57:23

Bad processes: 0

Registry Entries: 0

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

ComboFix 11-08-31.02 - Ondra 31.08.2011 14:09:20.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4063.1589 [GMT 2:00]
Spuštěný z: c:\users\Ondra\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\FLV Direct Player
c:\program files (x86)\FLV Direct Player\downloading.swf
c:\program files (x86)\FLV Direct Player\FLVPlayer.exe
c:\program files (x86)\FLV Direct Player\player.swf
c:\program files (x86)\FLV Direct Player\preload.swf
c:\program files (x86)\FLV Direct Player\Skin\DirectFLV\Button.bmp
c:\program files (x86)\FLV Direct Player\Skin\DirectFLV\Logo.bmp
c:\program files (x86)\FLV Direct Player\Skin\DirectFLV\skin.xml
c:\program files (x86)\FLV Direct Player\Skin\DirectFLV\SysCloseButton.bmp
c:\program files (x86)\FLV Direct Player\Skin\DirectFLV\SysMaxButton.bmp
c:\program files (x86)\FLV Direct Player\Skin\DirectFLV\SysMinButton.bmp
c:\program files (x86)\FLV Direct Player\Skin\DirectFLV\Window.bmp
c:\program files (x86)\FLV Direct Player\uninstall.exe
c:\program files (x86)\steam\Steam.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\FLV Direct Player
c:\programdata\Microsoft\Windows\Start Menu\Programs\FLV Direct Player\FLV Direct Player.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\FLV Direct Player\Uninstall FLV Direct Player.lnk
c:\programdata\ntuser.dat
c:\users\Ondra\AppData\Roaming\.#
c:\windows\btc_client_iplist.txt
c:\windows\front_ip_list.txt
c:\windows\geoiplist
c:\windows\geoiplist.rar
c:\windows\iecheck_iplist.txt
c:\windows\info1
c:\windows\iplist.txt
c:\windows\loader2.exe_ok
c:\windows\phoenix
c:\windows\phoenix.rar
c:\windows\phoenix\kernels\phatk\__init__.py
c:\windows\phoenix\kernels\phatk\__init__.pyc
c:\windows\phoenix\kernels\phatk\29138e7f0c75bdf599e409d450efe502.elf
c:\windows\phoenix\kernels\phatk\74e298803c4cc4acee55bd08d97a150f.elf
c:\windows\phoenix\kernels\phatk\BFIPatcher.py
c:\windows\phoenix\kernels\phatk\BFIPatcher.pyc
c:\windows\phoenix\kernels\phatk\kernel.cl
c:\windows\phoenix\kernels\poclbm\__init__.py
c:\windows\phoenix\kernels\poclbm\__init__.pyc
c:\windows\phoenix\kernels\poclbm\69df1462c41c2c466756cce78534d1a6.elf
c:\windows\phoenix\kernels\poclbm\BFIPatcher.py
c:\windows\phoenix\kernels\poclbm\BFIPatcher.pyc
c:\windows\phoenix\kernels\poclbm\ddee9fbb1d190c69d48fea8d6ae5c4ef.elf
c:\windows\phoenix\kernels\poclbm\kernel.cl
c:\windows\phoenix\phoenix.exe
c:\windows\proc_list1.log
c:\windows\rpcminer
c:\windows\rpcminer.rar
c:\windows\rpcminer\bitcoinminercuda_10.cubin
c:\windows\rpcminer\bitcoinminercuda_11.cubin
c:\windows\rpcminer\bitcoinminercuda_20.cubin
c:\windows\rpcminer\bitcoinmineropencl.cl
c:\windows\rpcminer\cudart32_32_16.dll
c:\windows\rpcminer\curllib.dll
c:\windows\rpcminer\libeay32.dll
c:\windows\rpcminer\libsasl.dll
c:\windows\rpcminer\openldap.dll
c:\windows\rpcminer\rpcminer-4way.exe
c:\windows\rpcminer\rpcminer-cpu.exe
c:\windows\rpcminer\rpcminer-cuda.exe
c:\windows\rpcminer\rpcminer-opencl.exe
c:\windows\rpcminer\ssleay32.dll
c:\windows\services32.exe
c:\windows\system32\drivers\etc\HSTS~1
c:\windows\SysWow64\comct332.ocx
c:\windows\ufa.rar
c:\windows\update.1
c:\windows\update.1\svchost.exe
c:\windows\update.2
c:\windows\update.5.0
c:\windows\update.7.1
c:\windows\winlog-dirs.txt
c:\windows\winlog-ids.txt
c:\windows\winsetupapi.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-28 do 2011-08-31 )))))))))))))))))))))))))))))))
.
.
2011-08-31 12:23 . 2011-08-31 12:23 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-08-31 09:56 . 2011-08-31 09:56 -------- d-----w- c:\program files\trend micro
2011-08-31 09:56 . 2011-08-31 09:57 -------- d-----w- C:\rsit
2011-08-30 20:08 . 2011-08-12 04:10 8862544 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6C9A9370-54DF-4F97-9480-12A2E5900B3D}\mpengine.dll
2011-08-27 05:05 . 2011-08-27 05:05 -------- d-----w- c:\program files (x86)\2K Games
2011-08-25 13:49 . 2011-08-25 14:05 -------- d-----w- c:\program files\Mafia
2011-08-24 03:00 . 2011-07-09 05:26 2048 ----a-w- c:\windows\system32\tzres.dll
2011-08-24 03:00 . 2011-07-09 04:29 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-08-22 07:29 . 2011-08-25 10:40 -------- d-----w- c:\program files (x86)\McAfeeScanAndRepair
2011-08-21 17:12 . 2011-08-21 17:12 -------- d-----w- c:\program files (x86)\AMD APP
2011-08-21 16:52 . 2011-08-23 07:15 -------- d-----w- c:\windows\ufa
2011-08-21 16:51 . 2011-08-22 07:15 246272 ----a-w- c:\windows\unrar.exe
2011-08-21 16:47 . 2011-08-21 16:47 -------- d-----w- c:\windows\av_ico
2011-08-21 16:45 . 2011-08-21 16:45 -------- d--h--w- c:\windows\update.tray-3-0
2011-08-21 16:45 . 2011-08-21 16:45 -------- d--h--w- c:\windows\update.tray-3-0-lnk
2011-08-12 15:56 . 2011-07-16 05:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-05 10:43 . 2011-08-05 10:43 -------- d-----w- c:\windows\system32\SPReview
2011-08-05 10:41 . 2011-08-05 10:41 -------- d-----w- c:\windows\system32\EventProviders
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-30 16:33 . 2010-03-10 06:16 280736 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-08-30 16:33 . 2010-02-09 15:24 280736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-08-30 16:25 . 2010-02-09 15:24 281544 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2011-08-21 16:07 . 2010-01-09 21:02 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-08-21 16:07 . 2010-01-31 11:30 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-08-12 15:48 . 2010-01-11 17:22 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-08-12 15:48 . 2010-01-09 21:02 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-08-05 11:01 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-08-05 11:01 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-07-28 15:49 . 2011-07-28 15:49 60416 ----a-w- c:\windows\system32\OVDecode64.dll
2011-07-28 15:48 . 2011-07-28 15:48 51200 ----a-w- c:\windows\system32\OpenCL.dll
2011-07-28 15:48 . 2011-07-28 15:48 16552960 ----a-w- c:\windows\system32\amdocl64.dll
2011-07-17 21:54 . 2011-07-17 21:54 59904 ----a-w- c:\windows\SysWow64\OVDecode.dll
2011-07-17 21:53 . 2011-07-17 21:53 51712 ----a-w- c:\windows\SysWow64\OpenCL.dll
2011-07-17 21:53 . 2011-07-17 21:53 12385280 ----a-w- c:\windows\SysWow64\amdocl.dll
2011-07-16 04:26 . 2011-08-12 15:57 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2011-06-16 01:34 . 2011-06-16 01:34 2971648 ----a-w- c:\windows\system32\SlotMaximizerBe.dll
2011-06-16 01:34 . 2011-06-16 01:34 105984 ----a-w- c:\windows\system32\SlotMaximizerAg.dll
2011-06-11 03:07 . 2011-07-13 20:06 3137536 ----a-w- c:\windows\system32\win32k.sys
2011-06-07 12:44 . 2011-06-07 12:44 40128 ----a-w- c:\windows\system32\drivers\tap0901.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files (x86)\DVDVideoSoftTB\prxtbDVDV.dll" [2011-01-17 175912]
"{ece24dcf-8548-4655-b392-47a388721482}"= "c:\program files (x86)\TenchisTV\tbTenc.dll" [2010-12-09 3911776]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{1C4AB6A5-595F-4e86-B15F-F93CCE2BBD48}"= "c:\program files (x86)\Family Toolbar\tbhelper.dll" [2009-05-07 355840]
.
[HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
.
[HKEY_CLASSES_ROOT\clsid\{ece24dcf-8548-4655-b392-47a388721482}]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{1c4ab6a5-595f-4e86-b15f-f93cce2bbd48}]
[HKEY_CLASSES_ROOT\URLSearchHook.MHURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{1EA6B471-CAD2-419a-9539-0586EEFE2D09}]
[HKEY_CLASSES_ROOT\URLSearchHook.MHURLSearchHook]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]
2009-05-07 21:46 2642432 ----a-w- c:\program files (x86)\Family Toolbar\tbcore3.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 ----a-w- c:\program files (x86)\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
2011-01-17 14:54 175912 ----a-w- c:\program files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 11:51 3911776 ----a-w- c:\program files (x86)\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{ece24dcf-8548-4655-b392-47a388721482}]
2010-12-09 11:51 3911776 ----a-w- c:\program files (x86)\TenchisTV\tbTenc.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files (x86)\DVDVideoSoftTB\prxtbDVDV.dll" [2011-01-17 175912]
"{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}"= "c:\program files (x86)\Family Toolbar\tbcore3.dll" [2009-05-07 2642432]
"{ece24dcf-8548-4655-b392-47a388721482}"= "c:\program files (x86)\TenchisTV\tbTenc.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
.
[HKEY_CLASSES_ROOT\clsid\{fd2fd708-1f6f-4b68-b141-c5778f0c19bb}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar]
.
[HKEY_CLASSES_ROOT\clsid\{ece24dcf-8548-4655-b392-47a388721482}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2011-04-02 399736]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-01-26 15026056]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-05-26 317288]
"MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2009-11-26 26624]
"SHTtray.exe"="c:\program files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe" [2009-07-28 99624]
"TkBellExe"="c:\program files (x86)\Common Files\Real\Update_OB\realsched.exe" [2010-03-27 202256]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 402432]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"SMART Board Service"="c:\program files (x86)\SMART Technologies\SMART Product Drivers\SMARTBoardService.exe" [2010-01-05 3372328]
"SMART SNMP Agent"="c:\program files (x86)\SMART Technologies\SMART Product Drivers\SMARTSNMPAgent.exe" [2010-01-05 1053992]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-04 336384]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-2 1079584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableSecureUIAPaths"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2009-07-01 19:49 98304 ----a-w- c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001
"DisableThumbnailCache"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-11-26 133104]
R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-06-26 362992]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-11-26 133104]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]
R3 McAfee ScanAndRepair Svc;McAfee ScanAndRepair Svc;c:\program files (x86)\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe [2011-04-06 694864]
R3 MSICDSetup;MSICDSetup;G:\CDriver64.sys [x]
R3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\nmwcdx64.sys [x]
R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-06-26 313840]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-06-26 357672]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2009-06-18 110888]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [2007-10-16 81920]
S2 GS In-Game Service;GS In-Game Service;c:\program files (x86)\GameTracker\GSInGameService.exe [2010-04-14 1648480]
S2 ICQ Service;ICQ Service;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-06-02 246520]
S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [2009-07-24 189984]
S2 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-07-28 120104]
S2 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-07-28 70952]
S2 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-07-28 427304]
S2 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-07-28 75048]
S2 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-07-28 91432]
S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2009-08-22 411496]
S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-07-22 642920]
S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2009-06-26 468264]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2009-08-13 522240]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [2007-10-16 2711552]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [x]
S3 SMARTMouseFilterx64;HID-compliant mouse;c:\windows\system32\DRIVERS\SMARTMouseFilterx64.sys [x]
S3 SMARTVHidMiniVistaAmd64;SMART HID Device;c:\windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [x]
S3 SMARTVTabletPCx64;SMART Virtual TabletPC;c:\windows\system32\DRIVERS\SMARTVTabletPCx64.sys [x]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update 5\VUAgent.exe [2011-04-20 1021840]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - appdrv01
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'
.
2011-08-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-11-26 16:52]
.
2011-08-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-11-26 16:52]
.
2011-08-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2810233194-878912617-1183046435-1000Core.job
- c:\users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-22 07:36]
.
2011-08-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2810233194-878912617-1183046435-1000UA.job
- c:\users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-22 07:36]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-24 7938080]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-07-24 1833504]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-19 171520]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050
mStart Page = hxxp://search.myheritage.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local;<local>
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube to DVD Converter - c:\users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetodvdconverter.htm
IE: Free YouTube to MP3 Converter - c:\users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files (x86)\PokerStars.NET\PokerStarsUpdate.exe
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 94.142.233.120 94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\140524C616E637B6F613: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\75966496025502441EE616: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\84163707C696B6: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\C45736B697E45647F564255454: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\C45736B697E45647F564255454F53554655425: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\C45736B697E45647F564255454F565953484F444: NameServer = 94.142.233.120,94.142.233.140
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{e3a8aa9e-bc25-caeb-0e8c-f1e0df261042} - (no file)
Wow6432Node-HKCU-Run-Steam - c:\program files (x86)\steam\steam.exe
Wow6432Node-HKCU-Run-ICQ - c:\program files (x86)\ICQ7.2\ICQ.exe
Wow6432Node-HKLM-Run-wxpdrv - c:\windows\services32.exe
Wow6432Node-HKLM-Run-tray_ico - (no file)
Wow6432Node-HKLM-Run-tray_ico1 - (no file)
Wow6432Node-HKLM-Run-tray_ico2 - (no file)
Wow6432Node-HKLM-Run-tray_ico3 - (no file)
Wow6432Node-HKLM-Run-tray_ico4 - (no file)
SafeBoot-mcmscsvc
SafeBoot-MCODS
WebBrowser-{872B5B88-9DB5-4310-BDD0-AC189557E5F5} - (no file)
WebBrowser-{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - (no file)
WebBrowser-{ECE24DCF-8548-4655-B392-47A388721482} - (no file)
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe
HKLM-Run-egui - c:\program files\ESET\ESET Smart Security\egui.exe
AddRemove-Adobe Shockwave Player - c:\windows\System32\Macromed\SHOCKW~1\UNWISE.EXE
AddRemove-Age of Empires II Trial - c:\program files (x86)\Microsoft Games\Age of Empires II Trial\UNINSTAL.EXE
AddRemove-Cossacks EW magyaritás v1.2.1 by Alwares - c:\windows\Cossacks EW magyaritás v1.2.1
AddRemove-Fraps - c:\fraps\uninstall.exe
AddRemove-Mafia Game - c:\windows\system32\MafiaSetup.exe
AddRemove-Mafia II_is1 - c:\program files (x86)\2K Games\Mafia II\unins000.exe
AddRemove-Maxthon3 - c:\program files (x86)\Maxthon3\Bin\Mx3Uninstall.exe
AddRemove-Opera 11.01.1190 - c:\program files (x86)\Opera\Opera.exe
AddRemove-PartyPoker - c:\programs\PartyGaming\PartyPoker\Uninstall.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_moh.exe
AddRemove-Ski Alpin 2006 (Demo)_0001 - d:\games\skialpi\Ski Alpin 2006 (Demo)\setup.exe
AddRemove-Steam App 10180 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 10190 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 440 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 99850 - c:\program files (x86)\Steam\steam.exe
AddRemove-Summer Athletics 2009_is1 - c:\program files (x86)\Summer Athletics 2009\unins000.exe
AddRemove-Uninstall_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\unins000.exe
AddRemove-{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1 - c:\games\World_of_Tanks_closed_Beta\unins000.exe
AddRemove-{C13E90B0-4E1C-11DB-6784-0152EAA218BE} - c:\program files (x86)\Activision\Call of Duty 2\Uninst_Call of Duty(R) 2 Patch 1.3.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-08-31 14:57:59
ComboFix-quarantined-files.txt 2011-08-31 12:57
.
Před spuštěním: Volných bajtů: 34 596 192 256
Po spuštění: Volných bajtů: 36 721 790 976
.
- - End Of File - - 9549F42B81B0CDB57F3DB03440350219

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  Folder::
  c:\windows\ufa
  c:\windows\av_ico
  c:\windows\update.tray-3-0
  c:\windows\update.tray-3-0-lnk
  c:\program files (x86)\uTorrentBar
  c:\program files (x86)\Family Toolbar
  c:\program files (x86)\ICQ6Toolbar
  C:\Program Files (x86)\DAEMON Tools Toolbar
  c:\Program Files (x86)\Common Files\Akamai
  
  File::
  c:\windows\unrar.exe
  c:\program files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
  c:\program files (x86)\TenchisTV\tbTenc.dll
  C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2810233194-878912617-1183046435-1000Core.job
  C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2810233194-878912617-1183046435-1000UA.job
  
  Registry::
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
  "{872b5b88-9db5-4310-bdd0-ac189557e5f5}"=-
  "{ece24dcf-8548-4655-b392-47a388721482}"=-
  "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"=-
  "{1C4AB6A5-595F-4e86-B15F-F93CCE2BBD48}"=-
  [-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]
  [-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
  [-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
  [-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
  [-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{ece24dcf-8548-4655-b392-47a388721482}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
  "{872b5b88-9db5-4310-bdd0-ac189557e5f5}"=-
  "{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}"=-
  "{ece24dcf-8548-4655-b392-47a388721482}"=-
  "{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
  "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"=-
  [-HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
  [-HKEY_CLASSES_ROOT\clsid\{fd2fd708-1f6f-4b68-b141-c5778f0c19bb}]
  [-HKEY_CLASSES_ROOT\MHToolbar.MHToolbar.3]
  [-HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
  [-HKEY_CLASSES_ROOT\MHToolbar.MHToolbar]
  [-HKEY_CLASSES_ROOT\clsid\{ece24dcf-8548-4655-b392-47a388721482}]
  [-HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
  [-HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "uTorrent"=-
  "DAEMON Tools Lite"=-
  "Skype"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  "TkBellExe"=-
  "AdobeCS5ServiceManager"=-
  "Adobe Reader Speed Launcher"=-
  "Adobe ARM"=-
  "QuickTime Task"=-
  "SunJavaUpdateSched"=-
  [HKEY_LOCAL_MACHINE\software\microsoft\security center]
  "FirewallOverride"=dword:00000000
  "DisableThumbnailCache"=dword:00000000
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "SunJavaUpdateSched"=-
  "AdobeAAMUpdater-1.0"=-
  
  Driver::
  gupdate
  gupdatem
  ICQ Servic
  eappdrv01
  Akamai
  
  NetSvc::
  Akamai
  
  DDS::
  uStart Page = hxxp://search.conduit.com?SearchSource= ... =CT2269050
  mStart Page = hxxp://search.myheritage.co
  
  RegLock::
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

hm tak jsme v prdeli.. mačkal jsme F8 ale nic se nedělo a tedko když například klinu na google chrom ntak mi to napíše:pokus použít neplatnou operaci na klíč registru.který je označen pro odstranění. ted jsme vážne zoufalej!

Restart PC a pomuze to, pak znovu bude potreba aplikovat skript, jelikoz se tim F8 minul ucinkem

jasně takže mám udělat zase ot samý akorát zmáčknout F8?

Jeste jinak to udelame - podivejte se ci mate tento log c:\combofix.txt a vlozte mi jej sem

ComboFix 11-08-31.04 - Ondra 31.08.2011 17:09:10.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4063.1737 [GMT 2:00]
Spuštěný z: c:\users\Ondra\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Ondra\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\program files (x86)\DVDVideoSoftTB\prxtbDVDV.dll"
"c:\program files (x86)\TenchisTV\tbTenc.dll"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2810233194-878912617-1183046435-1000Core.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2810233194-878912617-1183046435-1000UA.job"
"c:\windows\unrar.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Common Files\Akamai
c:\program files (x86)\Common Files\Akamai\AdminTool.exe
c:\program files (x86)\Common Files\Akamai\appregistry.dat
c:\program files (x86)\Common Files\Akamai\client.ini
c:\program files (x86)\Common Files\Akamai\client.ini.json
c:\program files (x86)\Common Files\Akamai\ControlPanel.exe
c:\program files (x86)\Common Files\Akamai\CplTasks.xml
c:\program files (x86)\Common Files\Akamai\data.dat
c:\program files (x86)\Common Files\Akamai\euc_state.json
c:\program files (x86)\Common Files\Akamai\guid.ini
c:\program files (x86)\Common Files\Akamai\installer.txt
c:\program files (x86)\Common Files\Akamai\Languages\csy.dll
c:\program files (x86)\Common Files\Akamai\Languages\dan.dll
c:\program files (x86)\Common Files\Akamai\Languages\deu.dll
c:\program files (x86)\Common Files\Akamai\Languages\esp.dll
c:\program files (x86)\Common Files\Akamai\Languages\fin.dll
c:\program files (x86)\Common Files\Akamai\Languages\fra.dll
c:\program files (x86)\Common Files\Akamai\Languages\chs.dll
c:\program files (x86)\Common Files\Akamai\Languages\cht.dll
c:\program files (x86)\Common Files\Akamai\Languages\ita.dll
c:\program files (x86)\Common Files\Akamai\Languages\jpn.dll
c:\program files (x86)\Common Files\Akamai\Languages\kor.dll
c:\program files (x86)\Common Files\Akamai\Languages\nld.dll
c:\program files (x86)\Common Files\Akamai\Languages\nor.dll
c:\program files (x86)\Common Files\Akamai\Languages\plk.dll
c:\program files (x86)\Common Files\Akamai\Languages\ptb.dll
c:\program files (x86)\Common Files\Akamai\Languages\ptg.dll
c:\program files (x86)\Common Files\Akamai\Languages\rus.dll
c:\program files (x86)\Common Files\Akamai\Languages\sve.dll
c:\program files (x86)\Common Files\Akamai\Languages\trk.dll
c:\program files (x86)\Common Files\Akamai\Logs\debug.log
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110824_163925.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110824_173925.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110824_183925.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110824_193926.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110824_203926.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110824_213926.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110824_223927.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110824_233928.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_003929.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_013929.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_023929.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_033930.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_043931.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_053932.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_063933.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_073934.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_083934.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_093934.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_103935.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_104107.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_114107.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_124107.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_134108.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_144109.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_154110.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_164110.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_174110.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_184111.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_194112.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_204113.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_214113.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_224114.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110825_234115.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_004115.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_014115.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_024116.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_034116.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_044117.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_054117.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_064118.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_074118.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_084119.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_094119.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_104120.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_114120.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_124121.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_134122.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_160849.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_170850.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_180851.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_190852.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_200852.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_210853.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_220854.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110826_230854.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_000855.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_010856.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_020857.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_030857.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_040858.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_050858.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_060858.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_070858.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_080858.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_090859.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_100900.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_110901.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_162632.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_172633.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_182633.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_192634.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_202635.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_212636.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_222637.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110827_232637.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_002637.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_012638.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_022639.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_032639.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_042640.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_052640.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_062641.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_072642.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_082642.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_092643.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_102643.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_112643.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_122644.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_132645.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_142645.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_152645.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_162646.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_172646.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_182646.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_192646.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110828_202646.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_045345.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_055342.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_065342.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_075342.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_085343.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_095344.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_105344.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_115344.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_125345.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_135345.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_145346.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_155346.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_165347.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_175348.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_185348.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_195349.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_205350.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_215350.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_225350.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110829_235351.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_005351.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_015352.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_025352.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_035352.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_045353.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_055354.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_065354.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_075355.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_085356.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_095356.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_105357.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_115358.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_125358.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_135359.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_145359.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_155400.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_165401.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_175401.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_185401.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_195401.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_205402.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_215403.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_225403.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110830_235403.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_005404.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_015404.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_025405.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_035406.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_045406.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_055407.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_065408.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_075409.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_085410.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_095410.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_105411.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_115411.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_120656.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_130657.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_140657.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_150539.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_150633.sent
c:\program files (x86)\Common Files\Akamai\Logs\debug.log.110831_150730.upload
c:\program files (x86)\Common Files\Akamai\netsession_win_2da1ebd.dll
c:\program files (x86)\Common Files\Akamai\readme.txt
c:\program files (x86)\Common Files\Akamai\root.pem
c:\program files (x86)\Common Files\Akamai\rswinui.exe
c:\program files (x86)\Common Files\Akamai\uninstall.exe
c:\program files (x86)\Common Files\Akamai\user.dat
c:\program files (x86)\Common Files\Akamai\vcredist_x86.exe
c:\program files (x86)\DAEMON Tools Toolbar
c:\program files (x86)\DAEMON Tools Toolbar\_DTLite.xml
c:\program files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
c:\program files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll
c:\program files (x86)\DAEMON Tools Toolbar\Resources\about.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\AboutWindow.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\accept.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\as.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\as.png
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_buy.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_download.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_feedback.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_forum.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_home.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_lite.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astroburn_site.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astroLite_16.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\az.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\b1.png
c:\program files (x86)\DAEMON Tools Toolbar\Resources\burn_files.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\burn_image.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\burn_imgs.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\BurnImage.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\buy.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Config.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\d.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\d2.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\daemon.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\daemon_search.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\daemon_search_site.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dot_disabled.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dot_enabled.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dot_on_over.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\download.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ds.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dsearch.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt-home.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_about.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_buy.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_download.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_faq.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_feedback.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_forum.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_line.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_lite.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_manual.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_pro.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\DTPro.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dtt16.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dtt32.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Dwnl.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\emulation.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\faq.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\favicon.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\features.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\feedback.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\forum.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameCentrix.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameCentrixCristals.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameCentrixDownload.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameCentrixPlayOnline.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameCentrixTop.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameS.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\games_search.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\games_search_SA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameSA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\gct16.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\gd.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\genre.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\globe.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GrabImage.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\hb.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\hb.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\help.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\hide.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\home.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\image_search.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\image_search_SA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ImageS.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ImageSA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ip.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\lang.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\lingvo.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\m.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mail.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mail_disable.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mail_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mail_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mail_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mailc.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mailc_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mailc_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mailc_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\manual.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\map.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\MenuTr.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mount.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mount_n_drive.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\next.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\next_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\next_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\next_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\none.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\none_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\op.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\play.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\play.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\play_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\play_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\play_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\pragma.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\prev.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\prev_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\prev_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\prev_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\prod.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Radio.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioBg.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioBg.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDown.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDown.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioE.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioG.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioL.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioLM.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioM.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioN.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioR.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioR.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioRM.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioRU.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioW.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\rbcheck.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\rbtxt.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\refresh.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\refresh_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\refresh_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\refresh_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Rss.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Rss1.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RssA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RssA1.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\rssClose.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\rssL.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\rssOpen.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RssRefresh.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\s2.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\show.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\size.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\size_lr.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\size_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\size_rl.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\skins.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\soft24.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\soft24_SA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\spt.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\stop.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\stop.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\stop_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\stop_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\stop_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\style.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\SupportRequest.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\timer.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\TitleIcon.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\toolbar.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\trans.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Trash.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Trash_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Trash_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Trash_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\u.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\unmount-all.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_back.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_dott.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_mute.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_mute_check.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtClose.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtText.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\web_resources.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\web_search.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\web_search_SA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\WebS.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\WebSa.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi0.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi1.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi10.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi11.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi12.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi13.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi14.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi2.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi3.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi4.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi5.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi6.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi7.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi8.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi9.ico
c:\program files (x86)\DAEMON Tools Toolbar\uninst.exe
c:\program files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
c:\program files (x86)\Family Toolbar
c:\program files (x86)\Family Toolbar\about.gif
c:\program files (x86)\Family Toolbar\about.html
c:\program files (x86)\Family Toolbar\active.html
c:\program files (x86)\Family Toolbar\addPhotos.gif
c:\program files (x86)\Family Toolbar\alerts.gif
c:\program files (x86)\Family Toolbar\anniversary.gif
c:\program files (x86)\Family Toolbar\AR.gif
c:\program files (x86)\Family Toolbar\banner.html
c:\program files (x86)\Family Toolbar\basis.xml
c:\program files (x86)\Family Toolbar\BG.gif
c:\program files (x86)\Family Toolbar\birthday.gif
c:\program files (x86)\Family Toolbar\buyFamilyGifts.gif
c:\program files (x86)\Family Toolbar\calendar.gif
c:\program files (x86)\Family Toolbar\clearhist.exe
c:\program files (x86)\Family Toolbar\clearSearchHistory.gif
c:\program files (x86)\Family Toolbar\collage.gif
c:\program files (x86)\Family Toolbar\createFamilySite.gif
c:\program files (x86)\Family Toolbar\CS.gif
c:\program files (x86)\Family Toolbar\DA.gif
c:\program files (x86)\Family Toolbar\dbghelp.dll
c:\program files (x86)\Family Toolbar\DE.gif
c:\program files (x86)\Family Toolbar\EL.gif
c:\program files (x86)\Family Toolbar\EN.gif
c:\program files (x86)\Family Toolbar\ES.gif
c:\program files (x86)\Family Toolbar\Family_Toolbar.dll
c:\program files (x86)\Family Toolbar\family_toolbar.xpi
c:\program files (x86)\Family Toolbar\familyTree.gif
c:\program files (x86)\Family Toolbar\femaleOnline.gif
c:\program files (x86)\Family Toolbar\femaleOnlineAway.gif
c:\program files (x86)\Family Toolbar\FI.gif
c:\program files (x86)\Family Toolbar\FR.gif
c:\program files (x86)\Family Toolbar\HE.gif
c:\program files (x86)\Family Toolbar\HR.gif
c:\program files (x86)\Family Toolbar\HU.gif
c:\program files (x86)\Family Toolbar\chat.html
c:\program files (x86)\Family Toolbar\icons.bmp
c:\program files (x86)\Family Toolbar\inboxOff.gif
c:\program files (x86)\Family Toolbar\inboxOn.gif
c:\program files (x86)\Family Toolbar\info.txt
c:\program files (x86)\Family Toolbar\inviteFamily.gif
c:\program files (x86)\Family Toolbar\IT.gif
c:\program files (x86)\Family Toolbar\logoff.gif
c:\program files (x86)\Family Toolbar\logOnToMH.gif
c:\program files (x86)\Family Toolbar\LT.gif
c:\program files (x86)\Family Toolbar\maleOnline.gif
c:\program files (x86)\Family Toolbar\maleOnlineAway.gif
c:\program files (x86)\Family Toolbar\MHlogo.gif
c:\program files (x86)\Family Toolbar\morph.gif
c:\program files (x86)\Family Toolbar\NL.gif
c:\program files (x86)\Family Toolbar\NO.gif
c:\program files (x86)\Family Toolbar\off.exe
c:\program files (x86)\Family Toolbar\online.gif
c:\program files (x86)\Family Toolbar\PB.gif
c:\program files (x86)\Family Toolbar\photos.gif
c:\program files (x86)\Family Toolbar\PL.gif
c:\program files (x86)\Family Toolbar\privacy.gif
c:\program files (x86)\Family Toolbar\PT.gif
c:\program files (x86)\Family Toolbar\reload.gif
c:\program files (x86)\Family Toolbar\RO.gif
c:\program files (x86)\Family Toolbar\RU.gif
c:\program files (x86)\Family Toolbar\search.gif
c:\program files (x86)\Family Toolbar\site.gif
c:\program files (x86)\Family Toolbar\sites.gif
c:\program files (x86)\Family Toolbar\SK.gif
c:\program files (x86)\Family Toolbar\SR.gif
c:\program files (x86)\Family Toolbar\stub.xml
c:\program files (x86)\Family Toolbar\SV.gif
c:\program files (x86)\Family Toolbar\tagPeople.gif
c:\program files (x86)\Family Toolbar\TB_AR.gif
c:\program files (x86)\Family Toolbar\TB_BG.gif
c:\program files (x86)\Family Toolbar\TB_CS.gif
c:\program files (x86)\Family Toolbar\TB_DA.gif
c:\program files (x86)\Family Toolbar\TB_DE.gif
c:\program files (x86)\Family Toolbar\TB_EL.gif
c:\program files (x86)\Family Toolbar\TB_EN.gif
c:\program files (x86)\Family Toolbar\TB_ES.gif
c:\program files (x86)\Family Toolbar\TB_FI.gif
c:\program files (x86)\Family Toolbar\TB_FR.gif
c:\program files (x86)\Family Toolbar\TB_HE.gif
c:\program files (x86)\Family Toolbar\TB_HR.gif
c:\program files (x86)\Family Toolbar\TB_HU.gif
c:\program files (x86)\Family Toolbar\TB_IT.gif
c:\program files (x86)\Family Toolbar\TB_LT.gif
c:\program files (x86)\Family Toolbar\TB_NL.gif
c:\program files (x86)\Family Toolbar\TB_NO.gif
c:\program files (x86)\Family Toolbar\TB_PB.gif
c:\program files (x86)\Family Toolbar\TB_PL.gif
c:\program files (x86)\Family Toolbar\TB_PT.gif
c:\program files (x86)\Family Toolbar\TB_RO.gif
c:\program files (x86)\Family Toolbar\TB_RU.gif
c:\program files (x86)\Family Toolbar\TB_SK.gif
c:\program files (x86)\Family Toolbar\TB_SR.gif
c:\program files (x86)\Family Toolbar\TB_SV.gif
c:\program files (x86)\Family Toolbar\TB_TR.gif
c:\program files (x86)\Family Toolbar\TB_UK.gif
c:\program files (x86)\Family Toolbar\tbcore3.dll
c:\program files (x86)\Family Toolbar\tbhelper.dll
c:\program files (x86)\Family Toolbar\tbs_include_script_000391.js
c:\program files (x86)\Family Toolbar\tbs_include_script_000733.js
c:\program files (x86)\Family Toolbar\tbs_include_script_000784.js
c:\program files (x86)\Family Toolbar\tbs_include_script_001134.js
c:\program files (x86)\Family Toolbar\tbs_include_script_002287.js
c:\program files (x86)\Family Toolbar\tbs_include_script_002346.js
c:\program files (x86)\Family Toolbar\tbs_include_script_002789.js
c:\program files (x86)\Family Toolbar\tbs_include_script_002833.js
c:\program files (x86)\Family Toolbar\tbs_include_script_003080.js
c:\program files (x86)\Family Toolbar\tbs_include_script_003083.js
c:\program files (x86)\Family Toolbar\tbs_include_script_004456.js
c:\program files (x86)\Family Toolbar\tbs_include_script_004711.js
c:\program files (x86)\Family Toolbar\tbs_include_script_004823.js
c:\program files (x86)\Family Toolbar\tbs_include_script_004824.js
c:\program files (x86)\Family Toolbar\tbs_include_script_005792.js
c:\program files (x86)\Family Toolbar\tbs_include_script_006838.js
c:\program files (x86)\Family Toolbar\tbs_include_script_007158.js
c:\program files (x86)\Family Toolbar\tbs_include_script_007564.js
c:\program files (x86)\Family Toolbar\tbs_include_script_007690.js
c:\program files (x86)\Family Toolbar\tbs_include_script_007803.js
c:\program files (x86)\Family Toolbar\tbs_include_script_008357.js
c:\program files (x86)\Family Toolbar\tbs_include_script_008502.js
c:\program files (x86)\Family Toolbar\tbs_include_script_009578.js
c:\program files (x86)\Family Toolbar\tbs_include_script_009807.js
c:\program files (x86)\Family Toolbar\tbs_include_script_011492.js
c:\program files (x86)\Family Toolbar\tbs_include_script_011550.js
c:\program files (x86)\Family Toolbar\tbs_include_script_011614.js
c:\program files (x86)\Family Toolbar\tbs_include_script_011637.js
c:\program files (x86)\Family Toolbar\tbs_include_script_012671.js
c:\program files (x86)\Family Toolbar\tbs_include_script_013916.js
c:\program files (x86)\Family Toolbar\tbs_include_script_014484.js
c:\program files (x86)\Family Toolbar\tbs_include_script_014583.js
c:\program files (x86)\Family Toolbar\tbs_include_script_014799.js
c:\program files (x86)\Family Toolbar\tbs_include_script_015508.js
c:\program files (x86)\Family Toolbar\tbs_include_script_015800.js
c:\program files (x86)\Family Toolbar\tbs_include_script_016179.js
c:\program files (x86)\Family Toolbar\tbs_include_script_016289.js
c:\program files (x86)\Family Toolbar\tbs_include_script_016678.js
c:\program files (x86)\Family Toolbar\tbs_include_script_017022.js
c:\program files (x86)\Family Toolbar\tbs_include_script_017427.js
c:\program files (x86)\Family Toolbar\tbs_include_script_018243.js
c:\program files (x86)\Family Toolbar\tbs_include_script_018279.js
c:\program files (x86)\Family Toolbar\tbs_include_script_018505.js
c:\program files (x86)\Family Toolbar\tbs_include_script_020098.js
c:\program files (x86)\Family Toolbar\tbs_include_script_020109.js
c:\program files (x86)\Family Toolbar\tbs_include_script_020129.js
c:\program files (x86)\Family Toolbar\tbs_include_script_020859.js
c:\program files (x86)\Family Toolbar\tbs_include_script_022495.js
c:\program files (x86)\Family Toolbar\tbs_include_script_023942.js
c:\program files (x86)\Family Toolbar\tbs_include_script_025757.js
c:\program files (x86)\Family Toolbar\tbs_include_script_025787.js
c:\program files (x86)\Family Toolbar\tbs_include_script_026799.js
c:\program files (x86)\Family Toolbar\tbs_include_script_026954.js
c:\program files (x86)\Family Toolbar\tbs_include_script_027482.js
c:\program files (x86)\Family Toolbar\tbs_include_script_027696.js
c:\program files (x86)\Family Toolbar\tbs_include_script_028246.js
c:\program files (x86)\Family Toolbar\tbs_include_script_028279.js
c:\program files (x86)\Family Toolbar\tbs_include_script_029390.js
c:\program files (x86)\Family Toolbar\tbs_include_script_030206.js
c:\program files (x86)\Family Toolbar\tbs_include_script_030277.js
c:\program files (x86)\Family Toolbar\tbs_include_script_030359.js
c:\program files (x86)\Family Toolbar\tbs_include_script_030760.js
c:\program files (x86)\Family Toolbar\tbs_include_script_030814.js
c:\program files (x86)\Family Toolbar\tbs_include_script_031331.js
c:\program files (x86)\Family Toolbar\tbs_include_script_031332.js
c:\program files (x86)\Family Toolbar\tbs_include_script_031711.js
c:\program files (x86)\Family Toolbar\tbs_include_script_032188.js
c:\program files (x86)\Family Toolbar\tbs_include_script_032423.js
c:\program files (x86)\Family Toolbar\tbs_include_script_032495.js
c:\program files (x86)\Family Toolbar\tellAFriend.gif
c:\program files (x86)\Family Toolbar\toolbarSetting.gif
c:\program files (x86)\Family Toolbar\TR.gif
c:\program files (x86)\Family Toolbar\UK.gif
c:\program files (x86)\Family Toolbar\uninstall.exe
c:\program files (x86)\Family Toolbar\uninstall.gif
c:\program files (x86)\Family Toolbar\update.exe
c:\program files (x86)\Family Toolbar\updateToolbar.gif
c:\program files (x86)\Family Toolbar\userSite.gif
c:\program files (x86)\Family Toolbar\version.txt
c:\program files (x86)\Family Toolbar\whatsNew.gif
c:\program files (x86)\ICQ6Toolbar
c:\program files (x86)\ICQ6Toolbar\config.xml
c:\program files (x86)\ICQ6Toolbar\Icons.bmp
c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe
c:\program files (x86)\ICQ6Toolbar\icq6Toolbar.ico
c:\program files (x86)\ICQ6Toolbar\ICQToolBar.dll
c:\program files (x86)\ICQ6Toolbar\ICQUnToolbar.exe
c:\program files (x86)\ICQ6Toolbar\logo_small.gif
c:\program files (x86)\ICQ6Toolbar\ServiceStarter.exe
c:\program files (x86)\ICQ6Toolbar\short.wav
c:\program files (x86)\ICQ6Toolbar\Version.txt
c:\program files (x86)\TenchisTV\tbTenc.dll
c:\program files (x86)\uTorrentBar
c:\program files (x86)\uTorrentBar\GottenAppsContextMenu.xml
c:\program files (x86)\uTorrentBar\INSTALL.LOG
c:\program files (x86)\uTorrentBar\OtherAppsContextMenu.xml
c:\program files (x86)\uTorrentBar\SharedAppsContextMenu.xml
c:\program files (x86)\uTorrentBar\tbuTor.dll
c:\program files (x86)\uTorrentBar\toolbar.cfg
c:\program files (x86)\uTorrentBar\ToolbarContextMenu.xml
c:\program files (x86)\uTorrentBar\UNWISE.EXE
c:\program files (x86)\uTorrentBar\uTorrentBarToolbarHelper.exe
c:\windows\av_ico
c:\windows\av_ico\ico_NOD_SS_START.ico
c:\windows\av_ico\ico_NOD_SYSINSP.ico
c:\windows\av_ico\ico_NOD_SYSRESC.ico
c:\windows\av_ico\ico_NOD_TXT.ico
c:\windows\av_ico\ico_NOD_UNINSTALL.ico
c:\windows\tasks\GoogleUpdateTaskMachineCore.job
c:\windows\tasks\GoogleUpdateTaskMachineUA.job
c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2810233194-878912617-1183046435-1000Core.job
c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2810233194-878912617-1183046435-1000UA.job
c:\windows\ufa
c:\windows\unrar.exe
c:\windows\update.tray-3-0-lnk
c:\windows\update.tray-3-0-lnk\svchost.exe
c:\windows\update.tray-3-0
c:\windows\update.tray-3-0\svchost.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_Akamai
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_ICQ Service
-------\Service_ICQ Service
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-28 do 2011-08-31 )))))))))))))))))))))))))))))))
.
.
2011-08-31 09:56 . 2011-08-31 09:56 -------- d-----w- c:\program files\trend micro
2011-08-31 09:56 . 2011-08-31 09:57 -------- d-----w- C:\rsit
2011-08-30 20:08 . 2011-08-12 04:10 8862544 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6C9A9370-54DF-4F97-9480-12A2E5900B3D}\mpengine.dll
2011-08-27 05:05 . 2011-08-27 05:05 -------- d-----w- c:\program files (x86)\2K Games
2011-08-25 13:49 . 2011-08-25 14:05 -------- d-----w- c:\program files\Mafia
2011-08-24 03:00 . 2011-07-09 05:26 2048 ----a-w- c:\windows\system32\tzres.dll
2011-08-24 03:00 . 2011-07-09 04:29 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-08-22 07:29 . 2011-08-25 10:40 -------- d-----w- c:\program files (x86)\McAfeeScanAndRepair
2011-08-21 17:12 . 2011-08-21 17:12 -------- d-----w- c:\program files (x86)\AMD APP
2011-08-12 15:56 . 2011-07-16 05:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-05 10:43 . 2011-08-05 10:43 -------- d-----w- c:\windows\system32\SPReview
2011-08-05 10:41 . 2011-08-05 10:41 -------- d-----w- c:\windows\system32\EventProviders
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-30 16:33 . 2010-03-10 06:16 280736 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-08-30 16:33 . 2010-02-09 15:24 280736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-08-30 16:25 . 2010-02-09 15:24 281544 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2011-08-21 16:07 . 2010-01-09 21:02 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-08-21 16:07 . 2010-01-31 11:30 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-08-12 15:48 . 2010-01-11 17:22 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-08-12 15:48 . 2010-01-09 21:02 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-08-05 11:01 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-08-05 11:01 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-07-28 15:49 . 2011-07-28 15:49 60416 ----a-w- c:\windows\system32\OVDecode64.dll
2011-07-28 15:48 . 2011-07-28 15:48 51200 ----a-w- c:\windows\system32\OpenCL.dll
2011-07-28 15:48 . 2011-07-28 15:48 16552960 ----a-w- c:\windows\system32\amdocl64.dll
2011-07-17 21:54 . 2011-07-17 21:54 59904 ----a-w- c:\windows\SysWow64\OVDecode.dll
2011-07-17 21:53 . 2011-07-17 21:53 51712 ----a-w- c:\windows\SysWow64\OpenCL.dll
2011-07-17 21:53 . 2011-07-17 21:53 12385280 ----a-w- c:\windows\SysWow64\amdocl.dll
2011-07-16 04:26 . 2011-08-12 15:57 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2011-06-16 01:34 . 2011-06-16 01:34 2971648 ----a-w- c:\windows\system32\SlotMaximizerBe.dll
2011-06-16 01:34 . 2011-06-16 01:34 105984 ----a-w- c:\windows\system32\SlotMaximizerAg.dll
2011-06-11 03:07 . 2011-07-13 20:06 3137536 ----a-w- c:\windows\system32\win32k.sys
2011-06-07 12:44 . 2011-06-07 12:44 40128 ----a-w- c:\windows\system32\drivers\tap0901.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2011-08-31_12.25.04 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2011-08-25 10:42 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-08-31 16:16 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-08-25 10:42 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-08-31 16:16 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-08-18 21:45 . 2011-08-31 16:18 70942 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-08-25 10:45 49312 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-08-31 16:18 49312 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2009-11-26 09:46 . 2011-08-31 16:18 19226 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2810233194-878912617-1183046435-1000_UserData.bin
+ 2009-12-01 08:00 . 2011-08-31 16:17 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-01 08:00 . 2011-08-31 12:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-12-01 08:00 . 2011-08-31 16:17 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-12-01 08:00 . 2011-08-31 12:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-08-18 23:18 . 2011-08-21 17:56 3683 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat
+ 2009-08-18 23:18 . 2011-08-31 16:15 3683 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat
- 2011-08-21 17:56 . 2011-08-25 10:40 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-08-31 16:15 . 2011-08-31 16:15 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-08-31 16:15 . 2011-08-31 16:15 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-08-21 17:56 . 2011-08-25 10:40 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 04:54 . 2011-08-25 10:42 671744 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-08-31 16:16 671744 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 05:01 . 2011-08-31 16:15 479592 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-08-21 17:56 479592 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-08-21 17:56 . 2011-08-31 16:15 801344 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2810233194-878912617-1183046435-1000-12288.dat
- 2009-12-24 22:32 . 2011-08-21 17:56 2132784 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2009-12-24 22:32 . 2011-08-31 16:15 2132784 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-05-26 317288]
"MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2009-11-26 26624]
"SHTtray.exe"="c:\program files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe" [2009-07-28 99624]
"SMART Board Service"="c:\program files (x86)\SMART Technologies\SMART Product Drivers\SMARTBoardService.exe" [2010-01-05 3372328]
"SMART SNMP Agent"="c:\program files (x86)\SMART Technologies\SMART Product Drivers\SMARTSNMPAgent.exe" [2010-01-05 1053992]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-04 336384]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-2 1079584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableSecureUIAPaths"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2009-07-01 19:49 98304 ----a-w- c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-06-26 362992]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]
R3 McAfee ScanAndRepair Svc;McAfee ScanAndRepair Svc;c:\program files (x86)\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe [2011-04-06 694864]
R3 MSICDSetup;MSICDSetup;G:\CDriver64.sys [x]
R3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\nmwcdx64.sys [x]
R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-06-26 313840]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-06-26 357672]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2009-06-18 110888]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [2007-10-16 81920]
S2 GS In-Game Service;GS In-Game Service;c:\program files (x86)\GameTracker\GSInGameService.exe [2010-04-14 1648480]
S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [2009-07-24 189984]
S2 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-07-28 120104]
S2 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-07-28 70952]
S2 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-07-28 427304]
S2 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-07-28 75048]
S2 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-07-28 91432]
S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2009-08-22 411496]
S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-07-22 642920]
S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2009-06-26 468264]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2009-08-13 522240]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [2007-10-16 2711552]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [x]
S3 SMARTMouseFilterx64;HID-compliant mouse;c:\windows\system32\DRIVERS\SMARTMouseFilterx64.sys [x]
S3 SMARTVHidMiniVistaAmd64;SMART HID Device;c:\windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [x]
S3 SMARTVTabletPCx64;SMART Virtual TabletPC;c:\windows\system32\DRIVERS\SMARTVTabletPCx64.sys [x]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update 5\VUAgent.exe [2011-04-20 1021840]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-24 7938080]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-07-24 1833504]
"Apoint"="c:\program files (x86)\Apoint\Apoint.exe" [BU]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-19 171520]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [BU]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"combofix"="c:\combofix\CF3155.3XE" [2010-11-20 345088]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local;<local>
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube to DVD Converter - c:\users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetodvdconverter.htm
IE: Free YouTube to MP3 Converter - c:\users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files (x86)\PokerStars.NET\PokerStarsUpdate.exe
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 94.142.233.120 94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\140524C616E637B6F613: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\75966496025502441EE616: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\84163707C696B6: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\C45736B697E45647F564255454: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\C45736B697E45647F564255454F53554655425: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\C45736B697E45647F564255454F565953484F444: NameServer = 94.142.233.120,94.142.233.140
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{e3a8aa9e-bc25-caeb-0e8c-f1e0df261042} - (no file)
WebBrowser-{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - (no file)
AddRemove-Akamai - c:\program files (x86)\Common Files\Akamai\uninstall.exe
AddRemove-DAEMON Tools Toolbar - c:\program files (x86)\DAEMON Tools Toolbar\uninst.exe
AddRemove-ICQToolbar - c:\program files (x86)\ICQ6Toolbar\ICQUnToolbar.exe
AddRemove-uTorrentBar Toolbar - c:\progra~2\UTORRE~1\UNWISE.EXE
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Sony\VAIO Event Service\VESMgr.exe
c:\windows\SysWOW64\DllHost.exe
c:\program files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
c:\program files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
.
**************************************************************************
.
Celkový čas: 2011-08-31 18:36:45 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-08-31 16:36
ComboFix2.txt 2011-08-31 12:58
.
Před spuštěním: Volných bajtů: 36 317 908 992
Po spuštění: Volných bajtů: 35 851 902 976
.
- - End Of File - - 2129A3EE83A6D91E1BB4F03FA679753D