Logfile of random's system information tool 1.09 (written by random/random)
Run by Sepos at 2011-12-23 09:18:44
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 81 GB (81%) free of 100 GB
Total RAM: 2047 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:19:19, on 23.12.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\mfevtps.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\McAfee\Common Framework\udaterui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Sepos\Plocha\RSIT.exe
C:\Program Files\trend micro\Sepos.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.sepos.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20111213151206.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupda ... 4727498831
O17 - HKLM\System\CCS\Services\Tcpip\..\{0A5D30A5-C0EE-4E92-82C0-D9D930A2BB38}: NameServer = 192.168.14.1,192.168.13.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0A5D30A5-C0EE-4E92-82C0-D9D930A2BB38}: NameServer = 192.168.14.1,192.168.13.1
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\WINDOWS\system32\mfevtps.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
--
End of file - 6580 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20111213151206.dll [2011-12-13 74312]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-08-20 16384512]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-07-16 61440]
""= []
"Samsung PanelMgr"=C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe [2009-09-11 614400]
"McAfeeUpdaterUI"=C:\Program Files\McAfee\Common Framework\udaterui.exe [2011-01-12 161088]
"ShStatEXE"=C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE [2011-01-12 215360]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-01 153136]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2007-07-18 451872]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^InterVideo WinCinema Manager.lnk]
C:\PROGRA~1\INTERV~1\Common\Bin\WINCIN~1.EXE []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"LightScribeService"=2
"NBService"=3
"Ati HotKey Poller"=2
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-08-01 143360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2008-05-26 304128]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======List of files/folders created in the last 1 month======
2011-12-23 09:18:44 ----D---- C:\rsit
2011-12-23 09:18:44 ----D---- C:\Program Files\trend micro
2011-12-22 15:22:59 ----A---- C:\WINDOWS\system32\drivers\Lbd.sys
2011-12-22 15:22:48 ----D---- C:\Program Files\Lavasoft
2011-12-22 15:22:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2011-12-22 14:31:06 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-12-22 14:31:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-12-22 13:11:51 ----D---- C:\Documents and Settings\Sepos\Data aplikací\Windows Search
2011-12-22 11:23:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2492386$
2011-12-22 11:22:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2011-12-22 11:22:10 ----D---- C:\WINDOWS\ie8updates
2011-12-22 11:20:17 ----HDC---- C:\WINDOWS\ie8
2011-12-22 11:16:18 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2011-12-22 11:16:05 ----D---- C:\Documents and Settings\Sepos\Data aplikací\Windows Desktop Search
2011-12-22 11:15:46 ----D---- C:\WINDOWS\system32\GroupPolicy
2011-12-22 11:15:46 ----D---- C:\Program Files\Windows Desktop Search
2011-12-22 11:15:37 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2011-12-22 11:15:30 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2011-12-20 17:15:21 ----D---- C:\Program Files\Microsoft Works
2011-12-20 17:15:09 ----D---- C:\Program Files\Microsoft Visual Studio
2011-12-20 17:15:08 ----D---- C:\Program Files\Common Files\DESIGNER
2011-12-20 17:12:38 ----D---- C:\WINDOWS\SHELLNEW
2011-12-20 17:12:23 ----D---- C:\Program Files\Microsoft Office
2011-12-20 17:12:01 ----RHD---- C:\MSOCache
2011-12-20 17:00:05 ----D---- C:\Documents and Settings\Sepos\Data aplikací\ElevatedDiagnostics
2011-12-20 16:54:46 ----D---- C:\WINDOWS\system32\windowspowershell
2011-12-20 16:54:40 ----HDC---- C:\WINDOWS\$NtUninstallKB926139-v2$
2011-12-20 16:26:03 ----A---- C:\WINDOWS\imsins.BAK
2011-12-20 16:26:01 ----N---- C:\WINDOWS\system32\spmsg2.dll
2011-12-20 16:25:59 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2011-12-20 15:47:37 ----D---- C:\Program Files\Microsoft.NET
2011-12-14 14:31:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2639417$
2011-12-14 14:31:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2011-12-14 14:30:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2633952$
2011-12-14 14:30:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2011-12-14 14:30:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2011-12-14 14:29:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2011-12-14 14:29:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2011-12-14 08:15:51 ----A---- C:\WINDOWS\system32\ZTAG.DLL
2011-12-14 08:15:51 ----A---- C:\WINDOWS\system32\ZSPOOL.DLL
2011-12-14 08:15:51 ----A---- C:\WINDOWS\system32\ZSHP1018.EXE
2011-12-14 08:15:51 ----A---- C:\WINDOWS\system32\ZLhp1018.DLL
2011-12-14 08:15:51 ----A---- C:\WINDOWS\system32\ZIMF.DLL
2011-12-13 16:20:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2641690$
2011-12-13 16:19:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2011-12-13 16:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2011-12-13 16:16:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2011-12-13 16:14:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2567053$
2011-12-13 16:14:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2011-12-13 16:13:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-12-13 16:13:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-12-13 16:13:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-12-13 16:12:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-12-13 16:12:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-12-13 16:11:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-12-13 16:11:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-12-13 16:11:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2011-12-13 16:11:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2011-12-13 16:11:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2011-12-13 16:11:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2011-12-13 16:11:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-12-13 16:11:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2011-12-13 16:11:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2011-12-13 16:11:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2508272$
2011-12-13 16:11:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2011-12-13 16:11:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-12-13 16:11:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2011-12-13 16:10:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2011-12-13 16:10:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-12-13 16:10:47 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-12-13 16:10:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-12-13 16:10:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-12-13 16:10:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-12-13 16:10:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-12-13 16:10:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-12-13 16:10:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-12-13 16:10:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-12-13 16:10:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-12-13 16:07:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2011-12-13 16:07:48 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-12-13 16:07:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2011-12-13 16:07:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-12-13 16:07:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-12-13 16:07:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2011-12-13 16:07:24 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2011-12-13 16:07:18 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-12-13 15:15:46 ----D---- C:\Documents and Settings\Sepos\Data aplikací\TeamViewer
2011-12-13 15:12:30 ----D---- C:\Documents and Settings\Sepos\Data aplikací\McAfee
2011-12-13 15:12:06 ----A---- C:\WINDOWS\system32\MfeOtlkAddin.dll
2011-12-13 15:12:06 ----A---- C:\WINDOWS\system32\MFEOtlk.dll
2011-12-13 15:12:05 ----A---- C:\WINDOWS\system32\drivers\mferkdet.sys
2011-12-13 15:12:05 ----A---- C:\WINDOWS\system32\drivers\mfeclnk.sys
2011-12-13 15:12:05 ----A---- C:\WINDOWS\system32\drivers\mfebopk.sys
2011-12-13 15:12:05 ----A---- C:\WINDOWS\system32\drivers\mfeapfk.sys
2011-12-13 15:12:04 ----A---- C:\WINDOWS\system32\drivers\mfeavfk.sys
2011-12-13 15:12:03 ----A---- C:\WINDOWS\system32\drivers\mfehidk.sys
2011-12-13 15:12:02 ----A---- C:\WINDOWS\system32\mfevtps.exe
2011-12-13 15:12:02 ----A---- C:\WINDOWS\system32\drivers\mfetdi2k.sys
2011-12-13 15:11:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2011-12-13 15:11:24 ----D---- C:\Program Files\McAfee
2011-12-13 15:11:24 ----D---- C:\Program Files\Common Files\McAfee
======List of files/folders modified in the last 1 month======
2011-12-23 09:18:44 ----RD---- C:\Program Files
2011-12-23 09:18:43 ----D---- C:\WINDOWS\Prefetch
2011-12-23 09:08:38 ----D---- C:\WINDOWS\Temp
2011-12-23 09:07:32 ----D---- C:\WINDOWS\system32\CatRoot2
2011-12-23 09:07:27 ----SD---- C:\WINDOWS\Tasks
2011-12-22 16:18:07 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-12-22 16:06:32 ----D---- C:\WINDOWS
2011-12-22 15:50:31 ----A---- C:\WINDOWS\wincmd.ini
2011-12-22 15:23:03 ----SHD---- C:\WINDOWS\Installer
2011-12-22 15:23:01 ----HD---- C:\WINDOWS\inf
2011-12-22 15:23:01 ----D---- C:\WINDOWS\system32\drivers
2011-12-22 15:22:59 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-12-22 15:22:52 ----D---- C:\WINDOWS\WinSxS
2011-12-22 11:48:21 ----D---- C:\WINDOWS\Microsoft.NET
2011-12-22 11:48:20 ----RSD---- C:\WINDOWS\assembly
2011-12-22 11:38:38 ----D---- C:\WINDOWS\system32
2011-12-22 11:38:10 ----D---- C:\WINDOWS\system32\cs-cz
2011-12-22 11:38:10 ----D---- C:\WINDOWS\AppPatch
2011-12-22 11:38:09 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-12-22 11:38:09 ----D---- C:\WINDOWS\Media
2011-12-22 11:38:09 ----D---- C:\WINDOWS\Help
2011-12-22 11:38:09 ----D---- C:\Program Files\Internet Explorer
2011-12-22 11:30:45 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-12-22 11:23:07 ----HD---- C:\WINDOWS\$hf_mig$
2011-12-22 11:18:17 ----D---- C:\WINDOWS\Debug
2011-12-22 11:16:21 ----D---- C:\WINDOWS\security
2011-12-22 11:15:53 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-12-22 11:15:46 ----D---- C:\WINDOWS\system32\wbem
2011-12-21 14:05:38 ----A---- C:\LOGNOTE.TXT
2011-12-20 17:15:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-12-20 17:15:21 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-12-20 17:15:08 ----D---- C:\Program Files\Common Files
2011-12-20 17:14:44 ----RD---- C:\WINDOWS\Fonts
2011-12-20 17:12:48 ----A---- C:\WINDOWS\win.ini
2011-12-20 17:12:47 ----D---- C:\Program Files\Common Files\System
2011-12-20 16:54:49 ----D---- C:\WINDOWS\system32\config
2011-12-20 16:40:54 ----SD---- C:\Documents and Settings\Sepos\Data aplikací\Microsoft
2011-12-20 16:36:28 ----D---- C:\WINDOWS\system32\en-US
2011-12-20 16:25:45 ----D---- C:\WINDOWS\system32\XPSViewer
2011-12-20 16:25:25 ----D---- C:\WINDOWS\system32\mui
2011-12-20 16:10:51 ----D---- C:\WINDOWS\Minidump
2011-12-20 16:10:26 ----D---- C:\Program Files\CCleaner
2011-12-19 05:26:19 ----D---- C:\Program Files\SamsungPrinterLiveUpdate
2011-12-14 14:31:48 ----D---- C:\WINDOWS\ie7updates
2011-12-14 14:30:19 ----A---- C:\WINDOWS\system32\MRT.exe
2011-12-13 16:10:01 ----D---- C:\Program Files\Outlook Express
2011-12-13 15:56:51 ----D---- C:\WINDOWS\system32\CatRoot
2011-11-30 06:37:08 ----A---- C:\WINDOWS\printbar.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 Lbd;Lbd; C:\WINDOWS\system32\DRIVERS\Lbd.sys [2011-12-12 64512]
R0 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2011-12-13 436728]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 mfetdi2k;McAfee Inc. mfetdi2k; C:\WINDOWS\system32\drivers\mfetdi2k.sys [2011-12-13 88544]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-08-01 3266560]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-08-28 4609024]
R3 mfeapfk;McAfee Inc. mfeapfk; C:\WINDOWS\system32\drivers\mfeapfk.sys [2011-12-13 116104]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\WINDOWS\system32\drivers\mfeavfk.sys [2011-12-13 171296]
R3 mfebopk;McAfee Inc. mfebopk; C:\WINDOWS\system32\drivers\mfebopk.sys [2011-12-13 58456]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-03-22 83968]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 DgiVecp;DgiVecp; \??\C:\WINDOWS\system32\Drivers\DgiVecp.sys []
S2 SSPORT;SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 Lavasoft Kernexplorer;Lavasoft helper driver; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys []
S3 mfeavfk01;McAfee Inc.; C:\WINDOWS\system32\drivers\mfeavfk01.sys []
S3 mferkdet;McAfee Inc. mferkdet; C:\WINDOWS\system32\drivers\mferkdet.sys [2011-12-13 85152]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSICPL;MSICPL; \??\F:\install4\MSICPL.sys []
S3 NTACCESS;NTACCESS; \??\F:\NTACCESS.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-04-14 94592]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\F:\NTGLM7X.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe [2009-07-22 81920]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2011-12-12 2152688]
R2 McAfeeFramework;McAfee Framework Service; C:\Program Files\McAfee\Common Framework\FrameworkService.exe [2011-01-12 120128]
R2 McShield;McAfee McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [2011-12-13 159320]
R2 McTaskManager;McAfee Task Manager; C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe [2011-01-12 209760]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 mfevtp;McAfee Validation Trust Protection Service; C:\WINDOWS\system32\mfevtps.exe [2011-12-13 145936]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe [2009-07-22 2736128]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-07-31 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-01 271920]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-08-01 573440]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 InterBaseGuardian;InterBase Guardian; C:\Program Files\Borland\InterBase\bin\ibguard.exe [2001-01-05 22016]
S4 InterBaseServer;InterBase Server; C:\Program Files\Borland\InterBase\bin\ibserver.exe [2001-01-05 1701888]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-07-25 79136]
S4 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------