Samovolné vypínání noteboku
Napsal: 02 led 2012 15:55
Logfile of random's system information tool 1.09 (written by random/random)
Run by HITTL ROMAN at 2012-01-02 15:37:24
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 160 GB (35%) free of 464 GB
Total RAM: 4091 MB (61% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:37:42, on 2.1.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\HITTL ROMAN.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ˙ţ1
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra button: Unibet - {EF0124FD-AA19-45A0-A233-705CC28AA847} - C:\Microgaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~2\GO36F4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Unknown owner - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9957 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {EAD2053B-E6FD-41E3-B76E-27FF51F0F89F}
"C:\Program Files\Defraggler\df64.exe" C: /ts /user "HITTL ROMAN" /appPath "C:\Program Files\Defraggler" /shutdown
\??\C:\Windows\system32\conhost.exe "-2021340762-183862196312264310061459722024-689452647-1195654129-1567570808-1994854946
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"taskhost.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
WLIDSvcM.exe 2296
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-8f088d54-3a8a-479c-9a9d-f8986533b2d3 -SystemEventPortName:HostProcess-6092138a-dbc9-41d6-9562-cd7a171d6dab -IoCancelEventPortName:HostProcess-3db1f5ce-8dcc-4564-afcf-47dc7de2217d -NonStateChangingEventPortName:HostProcess-6fc8f0b9-75ae-4167-b0fb-0540eedb759a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:fd3b60eb-e28b-409a-a1eb-ec7285cf0c35
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prefetch/ContentPrefetchPrerender1/PrerenderFromOmniboxHeuristic/ConservativeAlgorithm/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_http/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=3108.05425C00.1405186206 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\PROGRA~2\Google\Chrome\APPLIC~1\160912~1.63\gcswf32.dll",BrokerMain browser=chrome
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\16.0.912.63\gcswf32.dll" --lang=cs --channel=3108.058921C0.1721822343 --flash-broker=5104 /prefetch:4
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Users\HITTL ROMAN\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\Defraggler Volume C Task.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://my.daemon-search.com/|http://start.icq.com/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.13, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.25"
prefs.js - "keyword.URL" - "http://www.google.com/search?sourceid=n ... t&hl=cs&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18]
"Description"=Veetle TV Core
"Path"=C:\Program Files (x86)\Veetle\plugins\npVeetle.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18]
"Description"=Veetle TV Player
"Path"=C:\Program Files (x86)\Veetle\Player\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wolfram.com/Mathematica]
"Description"=Wolfram Mathematica Plug-in
"Path"=C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
GoogleDesktopMozilla.dll
GoogleDesktopMozillaStub.js
GoogleDesktopMozillaStub.xpt
C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
googledesktop.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default\extensions\
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~2\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDA57003-0068-4ed2-9D32-4D1EC707D94D}]
Microsoft Web Test Recorder 10.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2010-03-19 61360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePower Management]
C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-06-11 861216]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray]
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-07-29 377504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-07-29 594080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-06-28 265984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
I:\Anime\BitLord\BitLord.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisTecPMMUpdate]
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisUpdate]
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2918656]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2011-12-24 460872]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Default Manager]
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwlDaemon]
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-05-27 349552]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-01 1155928]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSetI]
C:\Windows\PLFSetI.exe [2010-11-20 206208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-21 98304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Startup Protector]
C:\Program Files (x86)\Startup Protector\StartupProtector.exe [2007-07-22 1921024]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SuiteTray]
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-05-27 337264]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wakoopa]
C:\Users\HITTL ROMAN\AppData\Local\Wakoopa\Wakoopa.exe [2011-08-31 1409376]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinArranger]
C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe [2005-10-10 214016]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^HITTL ROMAN^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"msacm.ac3filter"=ac3filter64.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -
.txt - open - C:\Windows\NOTEPAD.EXE %1
======List of files/folders created in the last 1 month======
2012-01-02 15:37:24 ----D---- C:\rsit
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\system.sys
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\sys3.sys
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\sys2.sys
2012-01-01 20:16:12 ----D---- C:\Program Files (x86)\Startup Protector
2012-01-01 20:16:12 ----A---- C:\Windows\SYSWOW64\killsp.bat
2012-01-01 12:06:44 ----D---- C:\ProgramData\Friends Games
2011-12-31 21:03:10 ----D---- C:\Windows\pss
2011-12-29 14:51:08 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\dvdcss
2011-12-28 22:55:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Photo DVD Maker
2011-12-28 22:55:02 ----D---- C:\ProgramData\Anvsoft
2011-12-28 22:53:07 ----D---- C:\Program Files (x86)\AnvSoft
2011-12-28 22:41:34 ----D---- C:\Program Files\AnvSoft
2011-12-28 22:11:53 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Vso
2011-12-28 22:11:53 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\pcouffin.sys
2011-12-28 22:11:53 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\inst.exe
2011-12-28 21:54:23 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DCF
2011-12-21 20:42:30 ----A---- C:\Windows\SYSWOW64\RICHED.DLL
2011-12-20 00:42:40 ----A---- C:\Windows\system32\dfboottime.exe
2011-12-20 00:25:42 ----D---- C:\Program Files\Speccy
2011-12-20 00:23:49 ----D---- C:\Program Files\Recuva
2011-12-19 09:16:20 ----A---- C:\Windows\system32\drivers\97667536.sys
2011-12-19 06:45:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Malwarebytes
2011-12-19 06:45:14 ----D---- C:\ProgramData\Malwarebytes
2011-12-19 06:45:10 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-12-19 06:45:10 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-12-18 07:49:50 ----SHD---- C:\Windows\SYSWOW64\%APPDATA%
2011-12-17 18:00:12 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-12-17 18:00:12 ----A---- C:\Windows\system32\tzres.dll
2011-12-17 15:38:58 ----D---- C:\Program Files (x86)\Sifrovani
2011-12-16 08:23:50 ----A---- C:\Windows\system32\GDIPFONTCACHEV1.DAT
2011-12-15 16:21:18 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\bitlord_log.txt
2011-12-15 09:55:06 ----D---- C:\Program Files (x86)\TMbot
2011-12-14 22:33:40 ----D---- C:\ProgramData\Spybot - Search & Destroy
2011-12-14 22:33:40 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2011-12-14 22:15:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TuneUp Software
2011-12-14 22:09:52 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2011-12-14 22:05:00 ----D---- C:\ProgramData\TuneUp Software
2011-12-14 20:38:15 ----RD---- C:\Backup
2011-12-14 20:34:48 ----RD---- C:\Program Files (x86)\Skype
2011-12-14 18:30:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-12-14 18:30:37 ----A---- C:\Windows\system32\mshtmled.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\iertutil.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\ieui.dll
2011-12-14 18:30:34 ----A---- C:\Windows\system32\jsproxy.dll
2011-12-14 18:30:33 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-12-14 18:30:33 ----A---- C:\Windows\system32\wininet.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-12-14 18:30:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-12-14 18:30:28 ----A---- C:\Windows\system32\mshtml.dll
2011-12-14 18:30:27 ----A---- C:\Windows\system32\ieframe.dll
2011-12-14 13:24:50 ----D---- C:\f63502f75a76bf61f7d8ce2d823393
2011-12-14 13:01:07 ----A---- C:\Windows\system32\win32k.sys
2011-12-14 13:01:05 ----A---- C:\Windows\system32\EncDec.dll
2011-12-14 13:01:04 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-12-14 11:00:27 ----D---- C:\b5502a7e1fdc90134be248b8f06a
2011-12-14 10:48:22 ----AH---- C:\msg.vbs
2011-12-14 10:48:16 ----A---- C:\9455.txt
2011-12-14 10:48:16 ----A---- C:\9394.txt
2011-12-14 10:48:16 ----A---- C:\8525.txt
2011-12-14 10:48:16 ----A---- C:\8112.txt
2011-12-14 10:48:16 ----A---- C:\7602.txt
2011-12-14 10:48:16 ----A---- C:\7487.txt
2011-12-14 10:48:16 ----A---- C:\6596.txt
2011-12-14 10:48:16 ----A---- C:\5495.txt
2011-12-14 10:48:16 ----A---- C:\5108.txt
2011-12-14 10:48:16 ----A---- C:\32071.txt
2011-12-14 10:48:16 ----A---- C:\31730.txt
2011-12-14 10:48:16 ----A---- C:\31294.txt
2011-12-14 10:48:16 ----A---- C:\31233.txt
2011-12-14 10:48:16 ----A---- C:\31162.txt
2011-12-14 10:48:16 ----A---- C:\31063.txt
2011-12-14 10:48:16 ----A---- C:\29769.txt
2011-12-14 10:48:16 ----A---- C:\2971.txt
2011-12-14 10:48:16 ----A---- C:\2843.txt
2011-12-14 10:48:16 ----A---- C:\28425.txt
2011-12-14 10:48:16 ----A---- C:\27824.txt
2011-12-14 10:48:16 ----A---- C:\26731.txt
2011-12-14 10:48:16 ----A---- C:\26539.txt
2011-12-14 10:48:16 ----A---- C:\24730.txt
2011-12-14 10:48:16 ----A---- C:\24181.txt
2011-12-14 10:48:16 ----A---- C:\23123.txt
2011-12-14 10:48:16 ----A---- C:\23065.txt
2011-12-14 10:48:16 ----A---- C:\22621.txt
2011-12-14 10:48:16 ----A---- C:\22189.txt
2011-12-14 10:48:16 ----A---- C:\21883.txt
2011-12-14 10:48:16 ----A---- C:\2143.txt
2011-12-14 10:48:16 ----A---- C:\20863.txt
2011-12-14 10:48:16 ----A---- C:\19708.txt
2011-12-14 10:48:16 ----A---- C:\18942.txt
2011-12-14 10:48:16 ----A---- C:\18367.txt
2011-12-14 10:48:16 ----A---- C:\18338.txt
2011-12-14 10:48:16 ----A---- C:\18335.txt
2011-12-14 10:48:16 ----A---- C:\1797.txt
2011-12-14 10:48:16 ----A---- C:\16968.txt
2011-12-14 10:48:16 ----A---- C:\16476.txt
2011-12-14 10:48:16 ----A---- C:\16353.txt
2011-12-14 10:48:16 ----A---- C:\16045.txt
2011-12-14 10:48:16 ----A---- C:\16040.txt
2011-12-14 10:48:16 ----A---- C:\15590.txt
2011-12-14 10:48:16 ----A---- C:\13476.txt
2011-12-14 10:48:16 ----A---- C:\1307.txt
2011-12-14 10:48:16 ----A---- C:\13005.txt
2011-12-14 10:48:16 ----A---- C:\12831.txt
2011-12-14 10:48:16 ----A---- C:\11573.txt
2011-12-14 10:48:16 ----A---- C:\11402.txt
2011-12-14 10:48:16 ----A---- C:\10172.txt
2011-12-14 01:19:52 ----A---- C:\Windows\SYSWOW64\GPhotos.scr
2011-12-13 21:17:39 ----A---- C:\Windows\system32\csrsrv.dll
2011-12-13 18:18:25 ----D---- C:\ProgramData\PreEmptive Solutions
2011-12-13 17:29:10 ----D---- C:\ProgramData\VS
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-12-13 17:13:17 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-12-13 17:13:17 ----A---- C:\Windows\system32\msls31.dll
2011-12-13 17:13:16 ----A---- C:\Windows\system32\msrating.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\pngfilt.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\occache.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\mshta.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieUnatt.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieakui.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieaksie.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\admparse.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\mshtmler.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedssync.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\imgutil.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iesysprep.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iepeers.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\ieakeng.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtrans.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtmsft.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iesetup.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iernonce.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iedkcs32.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dat
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ie4uinit.exe
2011-12-13 17:13:08 ----A---- C:\Windows\system32\icardie.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\wextract.exe
2011-12-13 17:13:07 ----A---- C:\Windows\system32\webcheck.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\vbscript.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\msfeeds.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\licmgr10.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\inseng.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\iexpress.exe
2011-12-13 16:58:20 ----A---- C:\Windows\SYSWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:20 ----A---- C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:19 ----A---- C:\Windows\system32\SQSRVRES.DLL
2011-12-13 16:54:07 ----D---- C:\Program Files\Microsoft.NET
2011-12-13 16:44:03 ----A---- C:\Windows\system32\shell32.dll
2011-12-13 16:43:54 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-12-10 19:25:08 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2011-12-10 19:25:07 ----D---- C:\Program Files (x86)\Xvid
2011-12-10 19:25:07 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2011-12-10 19:24:54 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2011-12-10 19:24:52 ----D---- C:\Program Files (x86)\ffdshow
2011-12-10 19:24:29 ----D---- C:\Program Files (x86)\Haali
2011-12-10 19:24:18 ----A---- C:\Windows\SYSWOW64\CoreAAC-uninstall.exe
2011-12-10 19:24:03 ----D---- C:\Program Files (x86)\AC3Filter
2011-12-10 19:23:33 ----D---- C:\Program Files (x86)\AviSynth 2.5
2011-12-10 19:22:48 ----D---- C:\Program Files (x86)\Avi2Dvd
2011-12-10 19:06:42 ----D---- C:\ProgramData\DVD Shrink
2011-12-10 19:06:41 ----D---- C:\Program Files (x86)\DVD Shrink
======List of files/folders modified in the last 1 month======
2012-01-02 15:37:39 ----D---- C:\Windows\Temp
2012-01-02 15:37:29 ----D---- C:\Program Files\trend micro
2012-01-02 15:31:32 ----D---- C:\Windows\system32\config
2012-01-02 13:39:12 ----D---- C:\Windows\system32\Tasks
2012-01-02 12:45:57 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Skype
2012-01-02 10:55:09 ----SHD---- C:\System Volume Information
2012-01-01 20:18:07 ----RD---- C:\Program Files (x86)
2012-01-01 20:16:13 ----RASHD---- C:\Windows\SysWOW64
2012-01-01 19:06:34 ----SHD---- C:\Windows\Installer
2012-01-01 19:06:32 ----SHD---- C:\Config.Msi
2012-01-01 19:06:30 ----D---- C:\Program Files (x86)\WebKeySoft
2012-01-01 19:04:18 ----D---- C:\Windows\system32\catroot2
2012-01-01 12:14:30 ----AD---- C:\ProgramData\Temp
2012-01-01 12:06:44 ----HD---- C:\ProgramData
2012-01-01 00:25:06 ----D---- C:\Program Files (x86)\Common Files
2012-01-01 00:18:09 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SoftGrid Client
2011-12-31 22:12:35 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\CodeLite
2011-12-31 21:13:46 ----D---- C:\Windows\System32
2011-12-31 21:13:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-12-31 21:13:45 ----D---- C:\Windows\inf
2011-12-31 21:03:10 ----D---- C:\Windows
2011-12-31 14:28:16 ----D---- C:\Windows\system32\drivers
2011-12-31 12:58:57 ----D---- C:\Windows\Prefetch
2011-12-31 12:55:23 ----D---- C:\Windows\system32\catroot
2011-12-31 12:29:09 ----D---- C:\Windows\system32\drivers\UMDF
2011-12-31 08:26:35 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-12-28 22:41:34 ----RD---- C:\Program Files
2011-12-26 21:38:04 ----HD---- C:\Program Files (x86)\Temp
2011-12-26 21:37:56 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-12-26 21:37:48 ----D---- C:\Windows\system32\DriverStore
2011-12-26 21:08:07 ----D---- C:\Windows\system32\NDF
2011-12-25 18:27:05 ----D---- C:\Program Files (x86)\VirtuaGirl HD
2011-12-25 18:26:37 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DAEMON Tools Lite
2011-12-25 18:03:06 ----D---- C:\Program Files (x86)\Google
2011-12-25 15:14:07 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-12-24 07:23:46 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mumble
2011-12-21 19:57:29 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\vlc
2011-12-20 00:21:36 ----D---- C:\Program Files\Defraggler
2011-12-19 09:04:15 ----D---- C:\Windows\SYSWOW64\drivers
2011-12-18 13:42:35 ----D---- C:\SURFCAM
2011-12-18 13:40:23 ----RSD---- C:\Windows\Fonts
2011-12-18 13:00:00 ----SD---- C:\Users\HITTL ROMAN\AppData\Roaming\Microsoft
2011-12-18 10:29:16 ----D---- C:\Windows\Microsoft.NET
2011-12-18 07:43:34 ----RSD---- C:\Windows\assembly
2011-12-18 07:25:21 ----A---- C:\Windows\system32\MRT.exe
2011-12-18 07:24:52 ----D---- C:\Windows\winsxs
2011-12-18 07:24:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-12-18 07:24:34 ----D---- C:\Windows\system32\cs-CZ
2011-12-17 12:00:24 ----D---- C:\Program Files (x86)\Opera
2011-12-17 11:58:00 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Opera
2011-12-16 22:39:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BitLord
2011-12-16 22:32:14 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Aegisub
2011-12-15 12:54:22 ----D---- C:\Program Files (x86)\Trillian
2011-12-15 12:43:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\ICQ
2011-12-14 23:15:00 ----D---- C:\Windows\system32\drivers\etc
2011-12-14 21:49:51 ----D---- C:\Windows\Tasks
2011-12-14 21:49:51 ----D---- C:\Windows\system32\wfp
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Ventrilo
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mp3tag
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\gtk-2.0
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\GHISLER
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Audacity
2011-12-14 21:49:33 ----RD---- C:\Users
2011-12-14 21:49:01 ----D---- C:\Windows\registration
2011-12-14 21:48:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Virtual Mechanics
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Trillian
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sun
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sony
2011-12-14 21:48:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenOffice.org
2011-12-14 21:48:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenCandy
2011-12-14 21:48:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla
2011-12-14 21:48:26 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Autodesk
2011-12-14 21:48:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Adobe
2011-12-14 20:58:45 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Wireshark
2011-12-14 20:58:44 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TS3Client
2011-12-14 20:58:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SolidWorks
2011-12-14 20:58:22 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Notebook Hardware Control
2011-12-14 20:58:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mount&Blade Warband
2011-12-14 20:57:22 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DWGEditor
2011-12-14 20:57:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BatteryBar
2011-12-14 20:34:47 ----D---- C:\ProgramData\Skype
2011-12-14 20:16:52 ----D---- C:\Windows\system32\LogFiles
2011-12-14 19:17:34 ----D---- C:\Program Files (x86)\Internet Explorer
2011-12-14 19:17:33 ----D---- C:\Program Files\Internet Explorer
2011-12-14 19:17:32 ----D---- C:\Windows\SYSWOW64\migration
2011-12-14 19:17:25 ----D---- C:\Windows\system32\migration
2011-12-14 18:40:37 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-12-14 13:09:50 ----D---- C:\Program Files\CCleaner
2011-12-14 12:54:43 ----SHD---- C:\Recovery
2011-12-14 12:54:27 ----D---- C:\Windows\system32\Recovery
2011-12-14 12:54:18 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\WinRAR
2011-12-14 09:11:27 ----D---- C:\ProgramData\boost_interprocess
2011-12-13 21:01:57 ----D---- C:\Windows\SYSWOW64\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\system32\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\PolicyDefinitions
2011-12-13 18:24:51 ----D---- C:\Program Files\MSBuild
2011-12-13 18:24:47 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2011-12-13 17:29:51 ----D---- C:\Program Files (x86)\Microsoft SDKs
2011-12-13 17:17:29 ----D---- C:\Windows\Logs
2011-12-13 16:54:06 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-12-13 16:51:14 ----D---- C:\Program Files\Microsoft SQL Server
2011-12-13 16:51:14 ----D---- C:\Program Files (x86)\Microsoft SQL Server
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 97667536;97667536; C:\Windows\system32\DRIVERS\97667536.sys [2011-12-19 460888]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-01-13 513080]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-11-25 88480]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 125296]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-11-25 46400]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-20 188928]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-11 2229608]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-07-29 28832]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-14 384040]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 23152]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2010-09-14 760168]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2010-09-14 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2010-09-14 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2010-09-14 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 SentinelFilter;SentinelFilter; \??\C:\Windows\syswow64 []
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-07-29 36000]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-07-29 51872]
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-07-29 295072]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-07-29 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-07-29 51872]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-07-29 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-07-29 270496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [2009-07-14 64512]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Messenger\Room\safedrv.sys []
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-12-02 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-12-02 27136]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-12-02 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-12-02 9216]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2010-12-22 154256]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S3 VSPerfDrv100;Performance Tools Driver 10.0; \??\C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-21 202752]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2011-09-22 58345832]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-01-15 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2011-01-15 107832]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 SentinelKeysServer;Sentinel Keys Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [2006-08-22 316992]
R2 SentinelProtectionServer;Sentinel Protection Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [2006-12-21 206400]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2011-09-22 154984]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 42360]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-14 1431888]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-11-20 655624]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-13 1255736]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]
-----------------EOF-----------------
Run by HITTL ROMAN at 2012-01-02 15:37:24
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 160 GB (35%) free of 464 GB
Total RAM: 4091 MB (61% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:37:42, on 2.1.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\HITTL ROMAN.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ˙ţ1
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra button: Unibet - {EF0124FD-AA19-45A0-A233-705CC28AA847} - C:\Microgaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~2\GO36F4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Unknown owner - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9957 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {EAD2053B-E6FD-41E3-B76E-27FF51F0F89F}
"C:\Program Files\Defraggler\df64.exe" C: /ts /user "HITTL ROMAN" /appPath "C:\Program Files\Defraggler" /shutdown
\??\C:\Windows\system32\conhost.exe "-2021340762-183862196312264310061459722024-689452647-1195654129-1567570808-1994854946
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"taskhost.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
WLIDSvcM.exe 2296
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-8f088d54-3a8a-479c-9a9d-f8986533b2d3 -SystemEventPortName:HostProcess-6092138a-dbc9-41d6-9562-cd7a171d6dab -IoCancelEventPortName:HostProcess-3db1f5ce-8dcc-4564-afcf-47dc7de2217d -NonStateChangingEventPortName:HostProcess-6fc8f0b9-75ae-4167-b0fb-0540eedb759a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:fd3b60eb-e28b-409a-a1eb-ec7285cf0c35
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prefetch/ContentPrefetchPrerender1/PrerenderFromOmniboxHeuristic/ConservativeAlgorithm/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_http/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=3108.05425C00.1405186206 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\PROGRA~2\Google\Chrome\APPLIC~1\160912~1.63\gcswf32.dll",BrokerMain browser=chrome
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\16.0.912.63\gcswf32.dll" --lang=cs --channel=3108.058921C0.1721822343 --flash-broker=5104 /prefetch:4
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Users\HITTL ROMAN\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\Defraggler Volume C Task.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://my.daemon-search.com/|http://start.icq.com/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.13, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.25"
prefs.js - "keyword.URL" - "http://www.google.com/search?sourceid=n ... t&hl=cs&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18]
"Description"=Veetle TV Core
"Path"=C:\Program Files (x86)\Veetle\plugins\npVeetle.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18]
"Description"=Veetle TV Player
"Path"=C:\Program Files (x86)\Veetle\Player\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wolfram.com/Mathematica]
"Description"=Wolfram Mathematica Plug-in
"Path"=C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
GoogleDesktopMozilla.dll
GoogleDesktopMozillaStub.js
GoogleDesktopMozillaStub.xpt
C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
googledesktop.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default\extensions\
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~2\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDA57003-0068-4ed2-9D32-4D1EC707D94D}]
Microsoft Web Test Recorder 10.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2010-03-19 61360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePower Management]
C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-06-11 861216]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray]
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-07-29 377504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-07-29 594080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-06-28 265984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
I:\Anime\BitLord\BitLord.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisTecPMMUpdate]
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisUpdate]
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2918656]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2011-12-24 460872]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Default Manager]
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwlDaemon]
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-05-27 349552]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-01 1155928]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSetI]
C:\Windows\PLFSetI.exe [2010-11-20 206208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-21 98304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Startup Protector]
C:\Program Files (x86)\Startup Protector\StartupProtector.exe [2007-07-22 1921024]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SuiteTray]
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-05-27 337264]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wakoopa]
C:\Users\HITTL ROMAN\AppData\Local\Wakoopa\Wakoopa.exe [2011-08-31 1409376]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinArranger]
C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe [2005-10-10 214016]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^HITTL ROMAN^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"msacm.ac3filter"=ac3filter64.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -
.txt - open - C:\Windows\NOTEPAD.EXE %1
======List of files/folders created in the last 1 month======
2012-01-02 15:37:24 ----D---- C:\rsit
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\system.sys
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\sys3.sys
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\sys2.sys
2012-01-01 20:16:12 ----D---- C:\Program Files (x86)\Startup Protector
2012-01-01 20:16:12 ----A---- C:\Windows\SYSWOW64\killsp.bat
2012-01-01 12:06:44 ----D---- C:\ProgramData\Friends Games
2011-12-31 21:03:10 ----D---- C:\Windows\pss
2011-12-29 14:51:08 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\dvdcss
2011-12-28 22:55:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Photo DVD Maker
2011-12-28 22:55:02 ----D---- C:\ProgramData\Anvsoft
2011-12-28 22:53:07 ----D---- C:\Program Files (x86)\AnvSoft
2011-12-28 22:41:34 ----D---- C:\Program Files\AnvSoft
2011-12-28 22:11:53 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Vso
2011-12-28 22:11:53 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\pcouffin.sys
2011-12-28 22:11:53 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\inst.exe
2011-12-28 21:54:23 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DCF
2011-12-21 20:42:30 ----A---- C:\Windows\SYSWOW64\RICHED.DLL
2011-12-20 00:42:40 ----A---- C:\Windows\system32\dfboottime.exe
2011-12-20 00:25:42 ----D---- C:\Program Files\Speccy
2011-12-20 00:23:49 ----D---- C:\Program Files\Recuva
2011-12-19 09:16:20 ----A---- C:\Windows\system32\drivers\97667536.sys
2011-12-19 06:45:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Malwarebytes
2011-12-19 06:45:14 ----D---- C:\ProgramData\Malwarebytes
2011-12-19 06:45:10 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-12-19 06:45:10 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-12-18 07:49:50 ----SHD---- C:\Windows\SYSWOW64\%APPDATA%
2011-12-17 18:00:12 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-12-17 18:00:12 ----A---- C:\Windows\system32\tzres.dll
2011-12-17 15:38:58 ----D---- C:\Program Files (x86)\Sifrovani
2011-12-16 08:23:50 ----A---- C:\Windows\system32\GDIPFONTCACHEV1.DAT
2011-12-15 16:21:18 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\bitlord_log.txt
2011-12-15 09:55:06 ----D---- C:\Program Files (x86)\TMbot
2011-12-14 22:33:40 ----D---- C:\ProgramData\Spybot - Search & Destroy
2011-12-14 22:33:40 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2011-12-14 22:15:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TuneUp Software
2011-12-14 22:09:52 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2011-12-14 22:05:00 ----D---- C:\ProgramData\TuneUp Software
2011-12-14 20:38:15 ----RD---- C:\Backup
2011-12-14 20:34:48 ----RD---- C:\Program Files (x86)\Skype
2011-12-14 18:30:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-12-14 18:30:37 ----A---- C:\Windows\system32\mshtmled.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\iertutil.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\ieui.dll
2011-12-14 18:30:34 ----A---- C:\Windows\system32\jsproxy.dll
2011-12-14 18:30:33 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-12-14 18:30:33 ----A---- C:\Windows\system32\wininet.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-12-14 18:30:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-12-14 18:30:28 ----A---- C:\Windows\system32\mshtml.dll
2011-12-14 18:30:27 ----A---- C:\Windows\system32\ieframe.dll
2011-12-14 13:24:50 ----D---- C:\f63502f75a76bf61f7d8ce2d823393
2011-12-14 13:01:07 ----A---- C:\Windows\system32\win32k.sys
2011-12-14 13:01:05 ----A---- C:\Windows\system32\EncDec.dll
2011-12-14 13:01:04 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-12-14 11:00:27 ----D---- C:\b5502a7e1fdc90134be248b8f06a
2011-12-14 10:48:22 ----AH---- C:\msg.vbs
2011-12-14 10:48:16 ----A---- C:\9455.txt
2011-12-14 10:48:16 ----A---- C:\9394.txt
2011-12-14 10:48:16 ----A---- C:\8525.txt
2011-12-14 10:48:16 ----A---- C:\8112.txt
2011-12-14 10:48:16 ----A---- C:\7602.txt
2011-12-14 10:48:16 ----A---- C:\7487.txt
2011-12-14 10:48:16 ----A---- C:\6596.txt
2011-12-14 10:48:16 ----A---- C:\5495.txt
2011-12-14 10:48:16 ----A---- C:\5108.txt
2011-12-14 10:48:16 ----A---- C:\32071.txt
2011-12-14 10:48:16 ----A---- C:\31730.txt
2011-12-14 10:48:16 ----A---- C:\31294.txt
2011-12-14 10:48:16 ----A---- C:\31233.txt
2011-12-14 10:48:16 ----A---- C:\31162.txt
2011-12-14 10:48:16 ----A---- C:\31063.txt
2011-12-14 10:48:16 ----A---- C:\29769.txt
2011-12-14 10:48:16 ----A---- C:\2971.txt
2011-12-14 10:48:16 ----A---- C:\2843.txt
2011-12-14 10:48:16 ----A---- C:\28425.txt
2011-12-14 10:48:16 ----A---- C:\27824.txt
2011-12-14 10:48:16 ----A---- C:\26731.txt
2011-12-14 10:48:16 ----A---- C:\26539.txt
2011-12-14 10:48:16 ----A---- C:\24730.txt
2011-12-14 10:48:16 ----A---- C:\24181.txt
2011-12-14 10:48:16 ----A---- C:\23123.txt
2011-12-14 10:48:16 ----A---- C:\23065.txt
2011-12-14 10:48:16 ----A---- C:\22621.txt
2011-12-14 10:48:16 ----A---- C:\22189.txt
2011-12-14 10:48:16 ----A---- C:\21883.txt
2011-12-14 10:48:16 ----A---- C:\2143.txt
2011-12-14 10:48:16 ----A---- C:\20863.txt
2011-12-14 10:48:16 ----A---- C:\19708.txt
2011-12-14 10:48:16 ----A---- C:\18942.txt
2011-12-14 10:48:16 ----A---- C:\18367.txt
2011-12-14 10:48:16 ----A---- C:\18338.txt
2011-12-14 10:48:16 ----A---- C:\18335.txt
2011-12-14 10:48:16 ----A---- C:\1797.txt
2011-12-14 10:48:16 ----A---- C:\16968.txt
2011-12-14 10:48:16 ----A---- C:\16476.txt
2011-12-14 10:48:16 ----A---- C:\16353.txt
2011-12-14 10:48:16 ----A---- C:\16045.txt
2011-12-14 10:48:16 ----A---- C:\16040.txt
2011-12-14 10:48:16 ----A---- C:\15590.txt
2011-12-14 10:48:16 ----A---- C:\13476.txt
2011-12-14 10:48:16 ----A---- C:\1307.txt
2011-12-14 10:48:16 ----A---- C:\13005.txt
2011-12-14 10:48:16 ----A---- C:\12831.txt
2011-12-14 10:48:16 ----A---- C:\11573.txt
2011-12-14 10:48:16 ----A---- C:\11402.txt
2011-12-14 10:48:16 ----A---- C:\10172.txt
2011-12-14 01:19:52 ----A---- C:\Windows\SYSWOW64\GPhotos.scr
2011-12-13 21:17:39 ----A---- C:\Windows\system32\csrsrv.dll
2011-12-13 18:18:25 ----D---- C:\ProgramData\PreEmptive Solutions
2011-12-13 17:29:10 ----D---- C:\ProgramData\VS
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-12-13 17:13:17 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-12-13 17:13:17 ----A---- C:\Windows\system32\msls31.dll
2011-12-13 17:13:16 ----A---- C:\Windows\system32\msrating.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\pngfilt.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\occache.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\mshta.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieUnatt.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieakui.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieaksie.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\admparse.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\mshtmler.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedssync.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\imgutil.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iesysprep.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iepeers.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\ieakeng.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtrans.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtmsft.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iesetup.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iernonce.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iedkcs32.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dat
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ie4uinit.exe
2011-12-13 17:13:08 ----A---- C:\Windows\system32\icardie.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\wextract.exe
2011-12-13 17:13:07 ----A---- C:\Windows\system32\webcheck.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\vbscript.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\msfeeds.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\licmgr10.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\inseng.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\iexpress.exe
2011-12-13 16:58:20 ----A---- C:\Windows\SYSWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:20 ----A---- C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:19 ----A---- C:\Windows\system32\SQSRVRES.DLL
2011-12-13 16:54:07 ----D---- C:\Program Files\Microsoft.NET
2011-12-13 16:44:03 ----A---- C:\Windows\system32\shell32.dll
2011-12-13 16:43:54 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-12-10 19:25:08 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2011-12-10 19:25:07 ----D---- C:\Program Files (x86)\Xvid
2011-12-10 19:25:07 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2011-12-10 19:24:54 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2011-12-10 19:24:52 ----D---- C:\Program Files (x86)\ffdshow
2011-12-10 19:24:29 ----D---- C:\Program Files (x86)\Haali
2011-12-10 19:24:18 ----A---- C:\Windows\SYSWOW64\CoreAAC-uninstall.exe
2011-12-10 19:24:03 ----D---- C:\Program Files (x86)\AC3Filter
2011-12-10 19:23:33 ----D---- C:\Program Files (x86)\AviSynth 2.5
2011-12-10 19:22:48 ----D---- C:\Program Files (x86)\Avi2Dvd
2011-12-10 19:06:42 ----D---- C:\ProgramData\DVD Shrink
2011-12-10 19:06:41 ----D---- C:\Program Files (x86)\DVD Shrink
======List of files/folders modified in the last 1 month======
2012-01-02 15:37:39 ----D---- C:\Windows\Temp
2012-01-02 15:37:29 ----D---- C:\Program Files\trend micro
2012-01-02 15:31:32 ----D---- C:\Windows\system32\config
2012-01-02 13:39:12 ----D---- C:\Windows\system32\Tasks
2012-01-02 12:45:57 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Skype
2012-01-02 10:55:09 ----SHD---- C:\System Volume Information
2012-01-01 20:18:07 ----RD---- C:\Program Files (x86)
2012-01-01 20:16:13 ----RASHD---- C:\Windows\SysWOW64
2012-01-01 19:06:34 ----SHD---- C:\Windows\Installer
2012-01-01 19:06:32 ----SHD---- C:\Config.Msi
2012-01-01 19:06:30 ----D---- C:\Program Files (x86)\WebKeySoft
2012-01-01 19:04:18 ----D---- C:\Windows\system32\catroot2
2012-01-01 12:14:30 ----AD---- C:\ProgramData\Temp
2012-01-01 12:06:44 ----HD---- C:\ProgramData
2012-01-01 00:25:06 ----D---- C:\Program Files (x86)\Common Files
2012-01-01 00:18:09 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SoftGrid Client
2011-12-31 22:12:35 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\CodeLite
2011-12-31 21:13:46 ----D---- C:\Windows\System32
2011-12-31 21:13:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-12-31 21:13:45 ----D---- C:\Windows\inf
2011-12-31 21:03:10 ----D---- C:\Windows
2011-12-31 14:28:16 ----D---- C:\Windows\system32\drivers
2011-12-31 12:58:57 ----D---- C:\Windows\Prefetch
2011-12-31 12:55:23 ----D---- C:\Windows\system32\catroot
2011-12-31 12:29:09 ----D---- C:\Windows\system32\drivers\UMDF
2011-12-31 08:26:35 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-12-28 22:41:34 ----RD---- C:\Program Files
2011-12-26 21:38:04 ----HD---- C:\Program Files (x86)\Temp
2011-12-26 21:37:56 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-12-26 21:37:48 ----D---- C:\Windows\system32\DriverStore
2011-12-26 21:08:07 ----D---- C:\Windows\system32\NDF
2011-12-25 18:27:05 ----D---- C:\Program Files (x86)\VirtuaGirl HD
2011-12-25 18:26:37 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DAEMON Tools Lite
2011-12-25 18:03:06 ----D---- C:\Program Files (x86)\Google
2011-12-25 15:14:07 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-12-24 07:23:46 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mumble
2011-12-21 19:57:29 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\vlc
2011-12-20 00:21:36 ----D---- C:\Program Files\Defraggler
2011-12-19 09:04:15 ----D---- C:\Windows\SYSWOW64\drivers
2011-12-18 13:42:35 ----D---- C:\SURFCAM
2011-12-18 13:40:23 ----RSD---- C:\Windows\Fonts
2011-12-18 13:00:00 ----SD---- C:\Users\HITTL ROMAN\AppData\Roaming\Microsoft
2011-12-18 10:29:16 ----D---- C:\Windows\Microsoft.NET
2011-12-18 07:43:34 ----RSD---- C:\Windows\assembly
2011-12-18 07:25:21 ----A---- C:\Windows\system32\MRT.exe
2011-12-18 07:24:52 ----D---- C:\Windows\winsxs
2011-12-18 07:24:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-12-18 07:24:34 ----D---- C:\Windows\system32\cs-CZ
2011-12-17 12:00:24 ----D---- C:\Program Files (x86)\Opera
2011-12-17 11:58:00 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Opera
2011-12-16 22:39:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BitLord
2011-12-16 22:32:14 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Aegisub
2011-12-15 12:54:22 ----D---- C:\Program Files (x86)\Trillian
2011-12-15 12:43:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\ICQ
2011-12-14 23:15:00 ----D---- C:\Windows\system32\drivers\etc
2011-12-14 21:49:51 ----D---- C:\Windows\Tasks
2011-12-14 21:49:51 ----D---- C:\Windows\system32\wfp
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Ventrilo
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mp3tag
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\gtk-2.0
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\GHISLER
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Audacity
2011-12-14 21:49:33 ----RD---- C:\Users
2011-12-14 21:49:01 ----D---- C:\Windows\registration
2011-12-14 21:48:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Virtual Mechanics
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Trillian
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sun
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sony
2011-12-14 21:48:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenOffice.org
2011-12-14 21:48:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenCandy
2011-12-14 21:48:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla
2011-12-14 21:48:26 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Autodesk
2011-12-14 21:48:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Adobe
2011-12-14 20:58:45 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Wireshark
2011-12-14 20:58:44 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TS3Client
2011-12-14 20:58:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SolidWorks
2011-12-14 20:58:22 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Notebook Hardware Control
2011-12-14 20:58:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mount&Blade Warband
2011-12-14 20:57:22 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DWGEditor
2011-12-14 20:57:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BatteryBar
2011-12-14 20:34:47 ----D---- C:\ProgramData\Skype
2011-12-14 20:16:52 ----D---- C:\Windows\system32\LogFiles
2011-12-14 19:17:34 ----D---- C:\Program Files (x86)\Internet Explorer
2011-12-14 19:17:33 ----D---- C:\Program Files\Internet Explorer
2011-12-14 19:17:32 ----D---- C:\Windows\SYSWOW64\migration
2011-12-14 19:17:25 ----D---- C:\Windows\system32\migration
2011-12-14 18:40:37 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-12-14 13:09:50 ----D---- C:\Program Files\CCleaner
2011-12-14 12:54:43 ----SHD---- C:\Recovery
2011-12-14 12:54:27 ----D---- C:\Windows\system32\Recovery
2011-12-14 12:54:18 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\WinRAR
2011-12-14 09:11:27 ----D---- C:\ProgramData\boost_interprocess
2011-12-13 21:01:57 ----D---- C:\Windows\SYSWOW64\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\system32\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\PolicyDefinitions
2011-12-13 18:24:51 ----D---- C:\Program Files\MSBuild
2011-12-13 18:24:47 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2011-12-13 17:29:51 ----D---- C:\Program Files (x86)\Microsoft SDKs
2011-12-13 17:17:29 ----D---- C:\Windows\Logs
2011-12-13 16:54:06 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-12-13 16:51:14 ----D---- C:\Program Files\Microsoft SQL Server
2011-12-13 16:51:14 ----D---- C:\Program Files (x86)\Microsoft SQL Server
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 97667536;97667536; C:\Windows\system32\DRIVERS\97667536.sys [2011-12-19 460888]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-01-13 513080]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-11-25 88480]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 125296]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-11-25 46400]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-20 188928]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-11 2229608]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-07-29 28832]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-14 384040]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 23152]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2010-09-14 760168]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2010-09-14 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2010-09-14 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2010-09-14 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 SentinelFilter;SentinelFilter; \??\C:\Windows\syswow64 []
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-07-29 36000]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-07-29 51872]
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-07-29 295072]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-07-29 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-07-29 51872]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-07-29 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-07-29 270496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [2009-07-14 64512]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Messenger\Room\safedrv.sys []
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-12-02 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-12-02 27136]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-12-02 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-12-02 9216]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2010-12-22 154256]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S3 VSPerfDrv100;Performance Tools Driver 10.0; \??\C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-21 202752]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2011-09-22 58345832]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-01-15 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2011-01-15 107832]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 SentinelKeysServer;Sentinel Keys Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [2006-08-22 316992]
R2 SentinelProtectionServer;Sentinel Protection Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [2006-12-21 206400]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2011-09-22 154984]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 42360]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-14 1431888]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-11-20 655624]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-13 1255736]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]
-----------------EOF-----------------