poprosím o kontrolu - problémy s pripojením na net

Zpráva

rivers2 · #1 Příspěvek od **rivers2** » 11 led 2012 17:29

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jozo at 2012-01-11 17:27:20
Microsoft Windows 7 Enterprise Service Pack 1
System drive C: has 30 GB (25%) free of 121 GB
Total RAM: 4094 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:27:28, on 11. 1. 2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Internet Download Manager\IDMan.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Mouse Driver\StartAutorun.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
C:\Program Files (x86)\Mouse Driver\KMConfig.exe
C:\Program Files (x86)\Mouse Driver\KMProcess.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\trend micro\Jozo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - (no file)
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [KMCONFIG] C:\Program Files (x86)\Mouse Driver\StartAutorun.exe KMConfig.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-511099198-2627886523-3154874911-1004\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-511099198-2627886523-3154874911-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Stiahnuť s IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stiahnuť s IDM všetky prepojenia - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{C6387A4D-37CE-4624-AA92-EB39C4B81CD4}: NameServer = 8.26.56.26,156.154.70.22
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: SAMSUNG AllShare Service (AllShare) - Unknown owner - C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files (x86)\Mouse Driver\KMWDSrv.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11649 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
"C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe"
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\http_ss_win_pro.exe"
\??\C:\Windows\system32\conhost.exe "-15099468261207964806-912517841554375260-6897076671125542167-2103709781276054458
C:\Windows\SysWOW64\srvany.exe
C:\Windows\KMService.exe
\??\C:\Windows\system32\conhost.exe "1974404159-1789880884-14192422901152056755-1851732891059558211323181843589815924
"C:\Program Files (x86)\Mouse Driver\KMWDSrv.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
"C:\Program Files (x86)\Internet Download Manager\IDMan.exe" /onboot
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\Mouse Driver\StartAutorun.exe" KMConfig.exe
"C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe"
"C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe"
KMConfig.exe
"C:\Program Files (x86)\Mouse Driver\KMProcess.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000728
\??\C:\Windows\system32\conhost.exe "-1540930963-1431025218593806681274534742-1764824809-1071323154-11811548711012701452
"C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE"
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-7058e628-6902-4891-b7f9-904126ecc3b6 -SystemEventPortName:HostProcess-04b009e2-d13b-4591-a573-941288a283dd -IoCancelEventPortName:HostProcess-92b7b0c4-f839-4776-a5e7-99fccbd8d234 -NonStateChangingEventPortName:HostProcess-f000e214-3f3c-494c-b6bd-b3b643f58c7f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:4f546b2d-3855-48fa-9d56-00daa1536b9d
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-511099198-2627886523-3154874911-10011_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-511099198-2627886523-3154874911-10011 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Photosmart C5200 series#1322340109" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\wuauclt.exe"
wmiadap.exe /F /T /R
"C:\Users\Jozo\Desktop\rapidshare\programy\RSITx64.exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\Jozo\AppData\Roaming\Mozilla\Firefox\Profiles\5gqpcp1f.default

prefs.js - "browser.startup.homepage" - "http://www.google.sk/"
prefs.js - "extensions.enabledItems" - "smartwebprinting@hp.com:4.51, mozilla_cc@internetdownloadmanager.com:7.3.8, bkmrksync@nokia.com:1.0.0.740, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.6"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@checkpoint.com/FFApi]
"Description"=ZoneAlarm Toolbar Api
"Path"=C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files (x86)\Mozilla Firefox\plugins\
npnul32.dll
nppdf32.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDM integration (IDMIEHlprObj Class) - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2011-10-01 367456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDM integration (IDMIEHlprObj Class) - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2011-10-01 218544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-08-26 12681320]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-12-21 9454920]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"IDMan"=C:\Program Files (x86)\Internet Download Manager\IDMan.exe [2011-10-01 3425688]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2011-06-16 1500160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Companion]
C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [2011-10-21 433872]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2011-11-26 258512]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-01-21 91520]
"KMCONFIG"=C:\Program Files (x86)\Mouse Driver\StartAutorun.exe [2008-05-30 212992]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-01-11 17:27:20 ----D---- C:\Program Files\trend micro
2012-01-10 22:25:02 ----D---- C:\rsit
2012-01-07 20:42:22 ----D---- C:\ProgramData\SonicStage
2012-01-07 20:38:37 ----A---- C:\Windows\SYSWOW64\CDDBUISony.dll
2012-01-07 20:38:37 ----A---- C:\Windows\SYSWOW64\CddbPlaylist2Sony.dll
2012-01-07 20:38:37 ----A---- C:\Windows\SYSWOW64\CddbMusicIDSony.dll
2012-01-07 20:38:37 ----A---- C:\Windows\SYSWOW64\CddbLinkSony.dll
2012-01-07 20:38:37 ----A---- C:\Windows\SYSWOW64\CDDBControlSony.dll
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\vxblock.dll
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\pxwave.dll
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\pxsfs.dll
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\pxmas.dll
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\pxinsi64.exe
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\pxinsa64.exe
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\pxhpinst.exe
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\pxdrv.dll
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\pxcpyi64.exe
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\pxcpya64.exe
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\pxafs.dll
2012-01-07 20:36:36 ----N---- C:\Windows\SYSWOW64\px.dll
2012-01-07 20:36:36 ----N---- C:\Windows\system32\drivers\PxHlpa64.sys
2012-01-07 20:36:36 ----N---- C:\Windows\system32\drivers\cdralw2k.sys
2012-01-07 20:36:36 ----N---- C:\Windows\system32\drivers\cdr4_xp.sys
2012-01-07 20:35:05 ----D---- C:\Windows\SYSWOW64\Iosubsys
2012-01-07 20:30:49 ----D---- C:\ss43_dl
2012-01-02 11:48:33 ----D---- C:\Users\Jozo\AppData\Roaming\Red Alert 3 Uprising
2012-01-02 11:41:29 ----D---- C:\ProgramData\Electronic Arts
2012-01-01 15:04:48 ----D---- C:\Program Files (x86)\CDex
2012-01-01 15:00:00 ----D---- C:\Program Files (x86)\CDA Converter Plus
2011-12-30 23:04:29 ----D---- C:\ProgramData\Easy CD-DA Extractor
2011-12-30 23:04:27 ----D---- C:\Program Files\Easy CD-DA Extractor 15
2011-12-30 22:45:21 ----D---- C:\Users\Jozo\AppData\Roaming\AnvSoft
2011-12-30 22:45:07 ----D---- C:\Program Files (x86)\AnvSoft
2011-12-30 21:47:46 ----D---- C:\temp
2011-12-30 21:46:36 ----D---- C:\AVOneExport
2011-12-30 21:46:16 ----A---- C:\Windows\SYSWOW64\another2file.exe
2011-12-24 13:25:51 ----A---- C:\Windows\SYSWOW64\srvany.exe
2011-12-24 13:25:51 ----A---- C:\Windows\KMService.exe
2011-12-20 13:46:15 ----D---- C:\Users\Jozo\AppData\Roaming\Postbox
2011-12-20 13:46:04 ----D---- C:\Program Files (x86)\Postbox
2011-12-20 12:51:16 ----D---- C:\Program Files (x86)\7-Zip
2011-12-19 18:57:44 ----D---- C:\Users\Jozo\AppData\Roaming\Command and Conquer 4
2011-12-19 16:18:57 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2011-12-19 16:18:51 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2011-12-19 16:18:38 ----D---- C:\Users\Jozo\AppData\Roaming\DAEMON Tools Lite
2011-12-19 16:18:34 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-12-19 12:34:39 ----D---- C:\Program Files (x86)\Firefly Studios
2011-12-18 14:48:40 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2011-12-18 14:38:49 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2011-12-18 14:38:49 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2011-12-18 14:38:49 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-12-18 14:38:49 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-12-18 14:38:48 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2011-12-18 14:38:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2011-12-18 14:38:48 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-12-18 14:38:48 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-12-18 14:38:47 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2011-12-18 14:38:47 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2011-12-18 14:38:47 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-12-18 14:38:47 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-12-18 14:38:46 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2011-12-18 14:38:46 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2011-12-18 14:38:46 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-12-18 14:38:46 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-12-18 14:38:45 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-12-18 14:38:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-12-18 14:38:45 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-12-18 14:38:45 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-12-18 14:38:45 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-12-18 14:38:45 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-12-18 14:38:45 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-12-18 14:38:45 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-12-18 14:38:44 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-12-18 14:38:44 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-12-18 14:38:42 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-12-18 14:38:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-12-18 14:38:42 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-12-18 14:38:42 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-12-18 14:38:41 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-12-18 14:38:41 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-12-18 14:38:40 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-12-18 14:38:40 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-12-18 14:38:40 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-12-18 14:38:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-12-18 14:38:40 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-12-18 14:38:40 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-12-18 14:38:40 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-12-18 14:38:40 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-12-18 14:38:39 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-12-18 14:38:39 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-12-18 14:38:39 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-12-18 14:38:39 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-12-18 14:38:38 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-12-18 14:38:38 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-12-18 14:38:38 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-12-18 14:38:38 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-12-18 14:38:38 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-12-18 14:38:38 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-12-18 14:38:38 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-12-18 14:38:38 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-12-18 14:38:37 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-12-18 14:38:37 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-12-18 14:38:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-12-18 14:38:37 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-12-18 14:38:37 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-12-18 14:38:37 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-12-18 14:38:36 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-12-18 14:38:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-12-18 14:38:36 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-12-18 14:38:36 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-12-18 14:38:36 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-12-18 14:38:36 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-12-18 14:38:36 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-12-18 14:38:36 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-12-18 14:38:35 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-12-18 14:38:35 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-12-18 14:38:35 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-12-18 14:38:35 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-12-18 14:38:35 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-12-18 14:38:35 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-12-18 14:38:34 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2011-12-18 14:38:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2011-12-18 14:38:34 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-12-18 14:38:34 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-12-18 14:38:33 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-12-18 14:38:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-12-18 14:38:33 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-12-18 14:38:33 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-12-18 14:38:33 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-12-18 14:38:33 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-12-18 14:38:32 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-12-18 14:38:32 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-12-18 14:38:32 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-12-18 14:38:32 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-12-18 14:38:31 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-12-18 14:38:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-12-18 14:38:31 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-12-18 14:38:31 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-12-18 14:38:30 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-12-18 14:38:30 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-12-18 14:38:30 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-12-18 14:38:30 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-12-18 14:38:29 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-12-18 14:38:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-12-18 14:38:29 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-12-18 14:38:29 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-12-18 14:38:28 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-12-18 14:38:28 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-12-18 14:38:28 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-12-18 14:38:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-12-18 14:38:28 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-12-18 14:38:28 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-12-18 14:38:28 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-12-18 14:38:28 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-12-18 14:38:26 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-12-18 14:38:26 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-12-18 14:38:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-12-18 14:38:26 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-12-18 14:38:26 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-12-18 14:38:26 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-12-18 14:38:25 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-12-18 14:38:25 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-12-18 14:38:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-12-18 14:38:25 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-12-18 14:38:25 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-12-18 14:38:25 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-12-18 14:38:19 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-12-18 14:38:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-12-18 14:38:19 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-12-18 14:38:19 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-12-18 14:38:18 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-12-18 14:38:18 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-12-18 14:38:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-12-18 14:38:18 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-12-18 14:38:18 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-12-18 14:38:18 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-12-18 14:38:17 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-12-18 14:38:17 ----A---- C:\Windows\system32\xinput1_3.dll
2011-12-18 14:38:16 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-12-18 14:38:16 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-12-18 14:38:15 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-12-18 14:38:15 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-12-18 14:38:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-12-18 14:38:15 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-12-18 14:38:15 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-12-18 14:38:15 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-12-18 14:38:13 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-12-18 14:38:13 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-12-18 14:38:12 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-12-18 14:38:12 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-12-18 14:38:11 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-12-18 14:38:11 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-12-18 14:38:11 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-12-18 14:38:11 ----A---- C:\Windows\system32\d3dx10.dll
2011-12-18 14:38:08 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-12-18 14:38:08 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-12-18 14:38:08 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2011-12-18 14:38:08 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-12-18 14:38:08 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-12-18 14:38:08 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-12-18 14:38:06 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-12-18 14:38:06 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-12-18 14:38:05 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-12-18 14:38:05 ----A---- C:\Windows\system32\xinput1_2.dll
2011-12-18 14:38:04 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-12-18 14:38:04 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-12-18 14:38:04 ----A---- C:\Windows\system32\xinput1_1.dll
2011-12-18 14:38:04 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-12-18 14:38:01 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-12-18 14:38:01 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-12-18 14:37:53 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-12-18 14:37:53 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-12-18 14:37:53 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-12-18 14:37:53 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-12-18 14:37:52 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-12-18 14:37:52 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-12-18 14:37:52 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-12-18 14:37:52 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-12-18 14:37:51 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-12-18 14:37:51 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-12-18 14:37:50 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-12-18 14:37:50 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-12-18 14:37:49 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-12-18 14:37:49 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-12-18 14:37:49 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-12-18 14:37:49 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-12-18 11:28:08 ----D---- C:\Program Files (x86)\Google
2011-12-15 20:31:32 ----D---- C:\Program Files (x86)\Avanquest update
2011-12-15 20:31:31 ----D---- C:\ProgramData\Avanquest
2011-12-15 20:30:38 ----D---- C:\ProgramData\BVRP Software
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018whnt.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018wh.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018unic.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018obex.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018nd5.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018mgmt.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018mdm.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018mdfl.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018cr.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018cmnt.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018cm.sys
2011-12-15 20:29:39 ----A---- C:\Windows\system32\drivers\s1018bus.sys
2011-12-15 20:29:34 ----D---- C:\ProgramData\Sony Ericsson
2011-12-15 20:29:34 ----D---- C:\Program Files (x86)\Sony Ericsson
2011-12-14 18:07:04 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-12-14 18:07:04 ----A---- C:\Windows\system32\mshtmled.dll
2011-12-14 18:07:04 ----A---- C:\Windows\system32\iertutil.dll
2011-12-14 18:07:03 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-12-14 18:07:03 ----A---- C:\Windows\SYSWOW64\url.dll
2011-12-14 18:07:03 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-12-14 18:07:03 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-12-14 18:07:03 ----A---- C:\Windows\system32\urlmon.dll
2011-12-14 18:07:03 ----A---- C:\Windows\system32\url.dll
2011-12-14 18:07:03 ----A---- C:\Windows\system32\ieui.dll
2011-12-14 18:07:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-12-14 18:07:02 ----A---- C:\Windows\system32\wininet.dll
2011-12-14 18:07:02 ----A---- C:\Windows\system32\jsproxy.dll
2011-12-14 18:07:01 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-12-14 18:07:01 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-12-14 18:07:01 ----A---- C:\Windows\system32\jscript9.dll
2011-12-14 18:07:00 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-12-14 18:07:00 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-12-14 18:07:00 ----A---- C:\Windows\system32\jscript.dll
2011-12-14 18:06:58 ----A---- C:\Windows\system32\mshtml.dll
2011-12-14 18:06:57 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-12-14 18:06:57 ----A---- C:\Windows\system32\ieframe.dll
2011-12-14 17:57:19 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-12-14 17:57:19 ----A---- C:\Windows\system32\tzres.dll
2011-12-14 17:57:11 ----A---- C:\Windows\system32\csrsrv.dll
2011-12-14 17:57:10 ----A---- C:\Windows\system32\win32k.sys
2011-12-14 17:57:09 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-12-14 17:57:09 ----A---- C:\Windows\system32\EncDec.dll

======List of files/folders modified in the last 1 month======

2012-01-11 17:27:28 ----D---- C:\Windows\Prefetch
2012-01-11 17:27:24 ----D---- C:\Windows\Temp
2012-01-11 17:27:20 ----RD---- C:\Program Files
2012-01-11 17:21:02 ----D---- C:\Windows\System32
2012-01-11 17:21:02 ----D---- C:\Windows\inf
2012-01-11 17:21:02 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-01-11 17:20:25 ----D---- C:\Windows\system32\NDF
2012-01-11 17:15:27 ----D---- C:\Users\Jozo\AppData\Roaming\DMCache
2012-01-11 17:07:07 ----D---- C:\Windows\system32\config
2012-01-11 15:06:10 ----HD---- C:\Config.Msi
2012-01-10 21:41:25 ----SHD---- C:\Windows\Installer
2012-01-10 21:40:53 ----D---- C:\Windows\SysWOW64
2012-01-09 16:04:46 ----D---- C:\Users\Jozo\AppData\Roaming\IDM
2012-01-07 21:23:53 ----SHD---- C:\$Recycle.Bin
2012-01-07 20:49:47 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-01-07 20:42:27 ----D---- C:\Users\Jozo\AppData\Roaming\Sony Corporation
2012-01-07 20:42:23 ----D---- C:\ProgramData\Sony Corporation
2012-01-07 20:42:22 ----HD---- C:\ProgramData
2012-01-07 20:36:36 ----D---- C:\Windows\system32\drivers
2012-01-07 20:36:21 ----SHD---- C:\System Volume Information
2012-01-07 20:35:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-01-07 20:35:47 ----D---- C:\Program Files (x86)\Sony
2012-01-07 20:34:28 ----D---- C:\Program Files (x86)\Common Files
2012-01-07 20:09:51 ----D---- C:\Windows
2012-01-02 11:37:57 ----D---- C:\Windows\Logs
2012-01-01 15:04:48 ----RD---- C:\Program Files (x86)
2011-12-30 23:26:49 ----D---- C:\Windows\Panther
2011-12-30 23:26:49 ----D---- C:\Windows\debug
2011-12-30 23:06:30 ----AD---- C:\ProgramData\TEMP
2011-12-26 23:01:23 ----D---- C:\Windows\system32\catroot2
2011-12-22 18:52:35 ----SD---- C:\Users\Jozo\AppData\Roaming\Microsoft
2011-12-20 15:07:21 ----RSD---- C:\Windows\assembly
2011-12-20 15:07:21 ----D---- C:\Windows\Microsoft.NET
2011-12-20 11:31:21 ----D---- C:\Windows\winsxs
2011-12-19 19:58:57 ----A---- C:\Windows\system32\cmdcsr.dll
2011-12-19 19:58:55 ----A---- C:\Windows\SYSWOW64\guard32.dll
2011-12-19 19:58:54 ----A---- C:\Windows\system32\guard64.dll
2011-12-19 16:27:27 ----D---- C:\Users\Jozo\AppData\Roaming\Skype
2011-12-19 16:19:23 ----D---- C:\Windows\system32\catroot
2011-12-19 16:19:22 ----D---- C:\Windows\system32\DriverStore
2011-12-18 14:43:37 ----D---- C:\Windows\SYSWOW64\en-US
2011-12-18 14:43:37 ----D---- C:\Windows\system32\en-US
2011-12-18 14:43:36 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-12-18 14:42:41 ----D---- C:\Windows\SoftwareDistribution
2011-12-18 14:38:16 ----D---- C:\Windows\system32\Tasks
2011-12-18 14:38:13 ----D---- C:\Windows\Tasks
2011-12-18 11:28:49 ----D---- C:\Program Files (x86)\CCleaner
2011-12-15 20:31:50 ----D---- C:\Windows\system32\drivers\UMDF
2011-12-14 18:39:39 ----D---- C:\Windows\rescache
2011-12-14 18:09:40 ----D---- C:\Program Files (x86)\Internet Explorer
2011-12-14 18:09:39 ----D---- C:\Windows\SYSWOW64\migration
2011-12-14 18:09:39 ----D---- C:\Windows\system32\migration
2011-12-14 18:09:39 ----D---- C:\Program Files\Internet Explorer
2011-12-14 18:07:45 ----D---- C:\ProgramData\Microsoft Help
2011-12-14 18:06:18 ----D---- C:\Windows\SYSWOW64\sk-SK
2011-12-14 18:06:18 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-12-14 18:06:18 ----D---- C:\Windows\system32\sk-SK
2011-12-14 18:06:18 ----D---- C:\Windows\system32\cs-CZ

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2011-12-08 130760]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2011-11-26 27760]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2011-12-19 577824]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2011-12-19 43248]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-12-19 270912]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2011-12-19 93200]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2011-11-26 97312]
R2 IDMWFP;IDMWFP; C:\Windows\system32\DRIVERS\idmwfp.sys [2011-07-06 145008]
R2 RtNdPt60;Realtek NDIS Protocol Driver; C:\Windows\system32\DRIVERS\RtNdPt60.sys [2009-07-20 27136]
R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-08-30 3069032]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-01 535656]
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 KMWDFILTER;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-30 30208]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-05-18 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-05-18 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.0); C:\Windows\system32\DRIVERS\RtTeam60.sys [2009-12-21 51712]
S3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2); C:\Windows\system32\DRIVERS\RtVlan60.sys [2007-12-03 24064]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\Windows\system32\DRIVERS\s1018bus.sys [2009-03-25 113704]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 19496]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 153128]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 133160]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 34856]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1018obex.sys [2009-03-25 128552]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1018unic.sys [2009-03-25 146472]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.0); C:\Windows\system32\DRIVERS\RtTeam60.sys [2009-12-21 51712]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-05-18 9216]
S3 usbser;Sony Ericsson USB Serial Port; C:\Windows\system32\drivers\usbser.sys [2010-11-21 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-05-18 9216]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VLAN;Realtek Virtual Miniport Driver for VLAN (NDIS 6.2); C:\Windows\system32\DRIVERS\RtVLAN60.sys [2007-12-03 24064]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R2 AllShare;SAMSUNG AllShare Service; C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe [2010-07-16 6638080]
R2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [2011-12-08 342480]
R2 AntiVirService;Avira Realtime Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-11-26 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-11-26 86224]
R2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2011-11-26 463824]
R2 CLPSLS;COMODO livePCsupport Service; C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe [2011-05-26 161080]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-12-19 2779416]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 KMService;KMService; C:\Windows\syswow64\srvany.exe [2003-04-18 8192]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files (x86)\Mouse Driver\KMWDSrv.exe [2009-08-31 1821184]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-05-21 1016936]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-21 2214504]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2011-08-24 430136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 SonicStage Back-End Service;SonicStage Back-End Service; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeSvc.exe [2007-02-05 112184]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
S3 SPTISRV;Sony SPTI Service; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]
S3 SSScsiSV;SonicStage SCSI Service; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SSScsiSV.exe [2007-02-05 75320]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-11-27 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 12 led 2012 10:01

Zdravim

Kde jste prisel prosim k verzi W7 Enterprise

Nedavno jste tu mel log z W7 Ultimate, neni tech PC s nejvyssimi (a jiste legalnimi) licencemi nejak vic...

rivers2 · #3 Příspěvek od **rivers2** » 13 led 2012 00:03

zdravím. robil som reinstal s 32 bit verzie, na 64 bit verziu. je to podstatné?

#4 Příspěvek od **vyosek** » 13 led 2012 12:42

No ja se ptam kde jste ziskal licenci Enterprise ktera je dostupna jen velkym korporacim a spolecnostem...

rivers2 · #5 Příspěvek od **rivers2** » 13 led 2012 13:24

myslim ze to nieje podstatne. oslovil som Vas s inym problemom

#6 Příspěvek od **vyosek** » 13 led 2012 17:02

Ptam se z duvodu, abych pripadne neporusoval pravidla fora na jejichz vyvoji jsem se podilel...

rivers2 · #7 Příspěvek od **rivers2** » 13 led 2012 18:15

jedna sa o sukromny PC a nie firemny

#8 Příspěvek od **vyosek** » 13 led 2012 18:37

Fajn, kde jste tedy sehnal verzi Enterprise ktera je urcena prave jen pro firmy...muzu hadat, nekde jste ji stahnul na warezu, jest tak? Nebo stahl na MSD a serial ci keygen sehnal na warezu...

rivers2 · #9 Příspěvek od **rivers2** » 14 led 2012 21:05

nevedel som ze win 7 enterprise pouzivaju len firmy. tento win som zohnal aj spolocne so serialovym klucom a nainstaloval. povodne som chcel dat win 7 ultimate 64 bit verziu. ked ju zozeniem win opat preinstalujem

#10 Příspěvek od **vyosek** » 15 led 2012 10:13

Stáhněte a spusťte WVCheck.exe nebo WVCheck.zip

Stiskněte "Enter".
Program začne prohledávat PC, délka skenu závisí na množství (velikosti) souborů, ale obvykle netrvá déle než 5 minut.
Po dokončení skenu na Vás vyskočí log, ten vložte do topicu. Log je také uložený na ploše.

Stahnete OTL (viz muj podpis) a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
Zaskrtnete okenko Pro vsechny uzivatele
Zaskrtnete okenko Kontrola na havet "LOP"
Zaskrtnete okenko Kontrola na havet "Purity"
Stari souboru zmente z 30 dnu na 7 dnu
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s

Kliknete na tlacitko Prohledat
Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte

rivers2 · #11 Příspěvek od **rivers2** » 15 led 2012 14:51

Windows Validation Check
Version: 1.9.12.5
Log Created On: 1447_15-01-2012
-----------------------

Windows Information
-----------------------
Windows Version: Windows 7 Service Pack 1
Windows Mode: Normal
Systemroot Path: C:\Windows

WVCheck's Auto Update Check
-----------------------
Auto-Update Option: Download updates automatically, but ask me when I want to install them.
-----------------------
Last Success Time for Update Detection: 2012-01-15 07:54:19
Last Success Time for Update Download: 2012-01-11 16:35:17
Last Success Time for Update Installation: 2012-01-11 16:40:07

WVCheck's Registry Check Check
-----------------------
Antiwpa: Not Found
-----------------------
Chew7Hale: Not Found
-----------------------

WVCheck's File Dump
-----------------------
C:\Windows\System32\slwga.dll
Size: 14336 bytes
Creation; 21/11/2010 4:23:48
Modification; 21/11/2010 4:23:48
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------
C:\Windows\SysWOW64\slwga.dll
Size: 14336 bytes
Creation; 21/11/2010 4:23:48
Modification; 21/11/2010 4:23:48
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\amd64_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_5d778f71b9f4fd55\slwga.dll
Size: 15360 bytes
Creation; 21/11/2010 4:24:21
Modification; 21/11/2010 4:24:21
MD5; b6d6886149573278cba6abd44c4317f5
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_0158f3ee01978c1f\slwga.dll
Size: 14336 bytes
Creation; 21/11/2010 4:23:48
Modification; 21/11/2010 4:23:48
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------

WVCheck's Dir Dump
-----------------------
WVCheck found no known bad directories.

WVCheck's Missing File Check
-----------------------
WVCheck found no missing Windows files.

WVCheck's HOSTS File Check
-----------------------
WVCheck found no bad lines in the hosts file.

WVCheck's MD5 Check
EXPERIMENTAL!!
-----------------------
user32.dll - 5e0db2d8b2750543cd2ebb9ea8e6cdd3

-------- End of File, program close at 1450_15-01-2012 --------

#12 Příspěvek od **vyosek** » 15 led 2012 16:54

Nasledujici soubory otestujte na VirusTotalu (viz muj podpis)

C:\Windows\System32\slwga.dll
Kliknete na Prochazet
Soubor nehledejte, jen vlozte cestu souboru, ktery chci otestovat
Kliknete na Send File
Pokud na Vas vyskoci obrazovka jako je nize, tak kliknete na ReAnalyse
Vysledek analyzy sem vlozte (jako odkaz)

A poprosim o log z OTL

rivers2 · #13 Příspěvek od **rivers2** » 15 led 2012 17:40

OTL logfile created on: 15. 1. 2012 17:34:47 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Jozo\Desktop
64bit- Enterprise Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

4,00 Gb Total Physical Memory | 2,61 Gb Available Physical Memory | 65,29% Memory free
8,00 Gb Paging File | 6,15 Gb Available in Paging File | 76,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 117,99 Gb Total Space | 25,27 Gb Free Space | 21,42% Space Free | Partition Type: NTFS
Drive D: | 114,89 Gb Total Space | 114,80 Gb Free Space | 99,92% Space Free | Partition Type: NTFS
Drive E: | 18,45 Gb Total Space | 18,36 Gb Free Space | 99,52% Space Free | Partition Type: NTFS

Computer Name: JOZO-PC | User Name: Jozo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012/01/15 14:52:06 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Jozo\Desktop\OTL.exe
PRC - [2012/01/03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/12/08 13:13:50 | 000,342,480 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
PRC - [2011/11/26 19:16:47 | 000,947,056 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
PRC - [2011/11/26 18:55:43 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2011/11/26 18:55:31 | 000,463,824 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
PRC - [2011/11/26 18:55:28 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011/11/26 18:55:27 | 000,258,512 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011/10/01 09:08:26 | 003,425,688 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
PRC - [2011/08/24 17:30:58 | 000,430,136 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
PRC - [2011/05/21 06:01:00 | 002,214,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2010/07/16 17:23:30 | 006,638,080 | ---- | M] () -- C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe
PRC - [2010/06/09 15:15:34 | 000,417,906 | ---- | M] () -- C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\http_ss_win_pro.exe
PRC - [2010/05/25 15:28:58 | 000,263,600 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
PRC - [2010/04/10 09:03:46 | 000,077,824 | ---- | M] () -- C:\Windows\KMService.exe
PRC - [2009/08/31 22:46:04 | 000,339,456 | ---- | M] (UASSOFT.COM) -- C:\Program Files (x86)\Mouse Driver\KMProcess.exe
PRC - [2009/08/31 22:00:28 | 001,821,184 | ---- | M] (UASSOFT.COM) -- C:\Program Files (x86)\Mouse Driver\KMWDSrv.exe
PRC - [2009/05/21 20:21:18 | 000,890,368 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\HP\Digital Imaging\bin\Hpqdirec.exe
PRC - [2008/06/14 01:02:04 | 000,397,312 | ---- | M] (UASSOFT.COM) -- C:\Program Files (x86)\Mouse Driver\KMCONFIG.exe
PRC - [2008/05/30 01:22:32 | 000,212,992 | ---- | M] (UASSOFT.COM) -- C:\Program Files (x86)\Mouse Driver\StartAutorun.exe
PRC - [2003/04/18 19:06:26 | 000,008,192 | ---- | M] () -- C:\Windows\SysWOW64\srvany.exe

========== Modules (No Company Name) ==========

MOD - [2011/11/26 19:16:48 | 000,776,704 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll
MOD - [2011/11/26 19:16:48 | 000,316,928 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll
MOD - [2011/11/26 19:16:48 | 000,275,968 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll
MOD - [2011/11/26 19:16:48 | 000,168,448 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll
MOD - [2011/11/26 19:16:48 | 000,106,496 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreelements.dll
MOD - [2011/11/26 19:16:48 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll
MOD - [2011/11/26 19:16:48 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll
MOD - [2011/11/26 19:16:48 | 000,078,336 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll
MOD - [2011/11/26 19:16:48 | 000,076,800 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll
MOD - [2011/11/26 19:16:48 | 000,068,608 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll
MOD - [2011/11/26 19:16:48 | 000,064,000 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll
MOD - [2011/11/26 19:16:48 | 000,046,592 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll
MOD - [2011/11/26 19:16:48 | 000,045,568 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gsttypefindfunctions.dll
MOD - [2010/01/09 20:18:18 | 004,254,560 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009/05/21 20:21:18 | 000,140,288 | ---- | M] () -- C:\Program Files (x86)\HP\Digital Imaging\bin\libexpatw.dll
MOD - [2008/06/16 09:06:10 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\Mouse Driver\MouseHook.dll
MOD - [2007/03/29 12:17:42 | 000,106,496 | ---- | M] () -- C:\Program Files (x86)\Mouse Driver\keydll.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/12/19 19:58:59 | 002,779,416 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV:64bit: - [2011/05/26 04:43:26 | 000,161,080 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe -- (CLPSLS)
SRV:64bit: - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/07/14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012/01/03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/12/08 13:13:50 | 000,342,480 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService)
SRV - [2011/11/26 18:55:43 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011/11/26 18:55:31 | 000,463,824 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)
SRV - [2011/11/26 18:55:28 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/08/24 17:30:58 | 000,430,136 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider)
SRV - [2011/06/29 14:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2011/06/08 13:02:00 | 000,633,856 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011/05/21 06:01:00 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010/07/16 17:23:30 | 006,638,080 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe -- (AllShare)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/09/20 11:55:20 | 001,037,824 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
SRV - [2009/08/31 22:00:28 | 001,821,184 | ---- | M] (UASSOFT.COM) [Auto | Running] -- C:\Program Files (x86)\Mouse Driver\KMWDSrv.exe -- (KMWDSERVICE)
SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007/02/05 10:11:18 | 000,075,320 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SSScsiSV.exe -- (SSScsiSV)
SRV - [2007/02/05 10:11:16 | 000,112,184 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeSvc.exe -- (SonicStage Back-End Service)
SRV - [2006/12/14 02:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
SRV - [2006/12/14 02:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
SRV - [2006/12/14 01:46:16 | 000,057,344 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
SRV - [2003/04/18 19:06:26 | 000,008,192 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\srvany.exe -- (KMService)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/12/19 16:18:57 | 000,270,912 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2011/12/08 13:13:58 | 000,130,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2011/11/26 18:55:49 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2011/11/26 18:55:48 | 000,097,312 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2011/11/24 14:05:02 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/11/24 14:05:02 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/08/17 09:58:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
DRV:64bit: - [2011/08/17 09:58:22 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2011/08/17 09:58:20 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
DRV:64bit: - [2011/08/17 09:58:16 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:64bit: - [2011/07/06 16:14:42 | 000,145,008 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
DRV:64bit: - [2011/06/01 04:16:50 | 000,535,656 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/11/21 04:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010/11/21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:64bit: - [2010/11/21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:64bit: - [2010/11/21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2010/11/21 04:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2010/11/21 04:23:48 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2010/11/21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2009/12/21 16:39:40 | 000,051,712 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtTeam60.sys -- (TEAM) Realtek Virtual Miniport Driver for Teaming (NDIS 6.0)
DRV:64bit: - [2009/12/21 16:39:40 | 000,051,712 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtTeam60.sys -- (RTTEAMPT) Realtek Teaming Protocol Driver (NDIS 6.0)
DRV:64bit: - [2009/07/20 03:27:34 | 000,027,136 | ---- | M] (Realtek ) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\RtNdPt60.sys -- (RtNdPt60)
DRV:64bit: - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/04/30 00:28:30 | 000,030,208 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\KMWDFILTER.sys -- (KMWDFILTER)
DRV:64bit: - [2009/03/25 16:48:00 | 000,153,128 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdm.sys -- (s1018mdm)
DRV:64bit: - [2009/03/25 16:48:00 | 000,146,472 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM)
DRV:64bit: - [2009/03/25 16:48:00 | 000,133,160 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM)
DRV:64bit: - [2009/03/25 16:48:00 | 000,128,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018obex.sys -- (s1018obex)
DRV:64bit: - [2009/03/25 16:48:00 | 000,113,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM)
DRV:64bit: - [2009/03/25 16:48:00 | 000,034,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS)
DRV:64bit: - [2009/03/25 16:48:00 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdfl.sys -- (s1018mdfl)
DRV:64bit: - [2008/08/28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:64bit: - [2007/12/03 03:20:54 | 000,024,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtVlan60.sys -- (VLAN) Realtek Virtual Miniport Driver for VLAN (NDIS 6.2)
DRV:64bit: - [2007/12/03 03:20:54 | 000,024,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtVlan60.sys -- (RTVLANPT) Realtek Vlan Protocol Driver (NDIS 6.2)
DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B9 82 91 92 63 AC CC 01 [binary data]
IE - HKCU\..\URLSearchHook: {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.google.sk/"
FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.51
FF - prefs.js..extensions.enabledItems: mozilla_cc@internetdownloadmanager.com:7.3.8
FF - prefs.js..extensions.enabledItems: bkmrksync@nokia.com:1.0.0.740

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/11/26 21:41:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2011/12/08 11:57:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/11/26 20:32:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/01/10 21:41:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/11/26 19:22:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/11/26 21:41:10 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Jozo\AppData\Roaming\IDM\idmmzcc5 [2011/11/26 22:05:00 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Jozo\AppData\Roaming\IDM\idmmzcc5 [2011/11/26 22:05:00 | 000,000,000 | ---D | M]

[2011/11/26 20:32:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jozo\AppData\Roaming\mozilla\Extensions
[2011/11/28 10:34:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jozo\AppData\Roaming\mozilla\Firefox\Profiles\5gqpcp1f.default\extensions
[2011/11/26 20:32:25 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/11/26 21:41:10 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES (X86)\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3
[2011/12/08 11:57:06 | 000,000,000 | ---D | M] (PC Sync 2 Synchronisation Extension) -- C:\PROGRAM FILES (X86)\NOKIA\NOKIA PC SUITE 7\BKMRKSYNC
[2011/11/26 22:05:00 | 000,000,000 | ---D | M] (IDM CC) -- C:\USERS\JOZO\APPDATA\ROAMING\IDM\IDMMZCC5
[2010/06/26 09:18:14 | 000,001,583 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\atlas-sk.xml
[2010/06/26 09:18:14 | 000,001,380 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\azet-sk.xml
[2010/06/26 09:18:14 | 000,001,479 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\dunaj-sk.xml
[2010/06/26 09:18:14 | 000,001,473 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\slovnik-sk.xml
[2010/06/26 09:18:14 | 000,001,104 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-sk.xml
[2010/06/26 09:18:14 | 000,000,830 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\zoznam-sk.xml

O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O4:64bit: - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [KMCONFIG] C:\Program Files (x86)\Mouse Driver\StartAutorun.exe KMConfig.exe File not found
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Stiahnuť s IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8:64bit: - Extra context menu item: Stiahnuť s IDM všetky prepojenia - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Stiahnuť s IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Stiahnuť s IDM všetky prepojenia - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000015 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.23.240.20 217.23.240.21
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C6387A4D-37CE-4624-AA92-EB39C4B81CD4}: DhcpNameServer = 217.23.240.20 217.23.240.21
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C6387A4D-37CE-4624-AA92-EB39C4B81CD4}: NameServer = 8.26.56.26,156.154.70.22
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\guard64.dll) - C:\Windows\SysNative\guard64.dll (COMODO)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\guard32.dll) -C:\Windows\SysWOW64\guard32.dll (COMODO)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 7 Days ==========

[2012/01/15 14:52:05 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Jozo\Desktop\OTL.exe
[2012/01/14 13:17:27 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2012/01/13 18:23:44 | 000,000,000 | ---D | C] -- C:\Users\Jozo\Documents\Picture Motion Browser
[2012/01/13 18:08:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony Picture Utility
[2012/01/13 09:42:18 | 000,000,000 | ---D | C] -- C:\USB Notebook Data
[2012/01/13 09:42:03 | 000,000,000 | ---D | C] -- C:\Users\Jozo\AppData\Roaming\OTi
[2012/01/11 17:34:39 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2012/01/11 17:34:38 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2012/01/11 17:34:38 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2012/01/11 17:34:38 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2012/01/11 17:34:38 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2012/01/11 17:34:38 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2012/01/11 17:34:37 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2012/01/11 17:34:37 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2012/01/11 17:34:37 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2012/01/11 17:34:37 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2012/01/11 17:34:36 | 001,731,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2012/01/11 17:34:08 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll
[2012/01/11 17:34:08 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll
[2012/01/11 17:27:20 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012/01/10 22:25:02 | 000,000,000 | ---D | C] -- C:\rsit
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012/01/15 14:56:28 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012/01/15 14:52:06 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Jozo\Desktop\OTL.exe
[2012/01/15 13:15:33 | 000,027,440 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/01/15 13:15:33 | 000,027,440 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/01/15 13:05:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/01/15 08:54:54 | 000,865,778 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2012/01/15 08:54:54 | 000,859,630 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/01/15 08:54:54 | 000,338,056 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2012/01/15 08:54:54 | 000,319,154 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/01/15 08:54:54 | 000,006,208 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/01/15 08:50:26 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys
[2012/01/13 18:09:16 | 000,002,195 | ---- | M] () -- C:\Users\Public\Desktop\Image Export Tool.lnk
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/01/15 14:56:28 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012/01/13 18:09:16 | 000,002,195 | ---- | C] () -- C:\Users\Public\Desktop\Image Export Tool.lnk
[2012/01/07 20:38:37 | 000,532,480 | ---- | C] () -- C:\Windows\SysWow64\CddbPlaylist2Sony.dll
[2011/12/30 21:46:16 | 000,610,304 | ---- | C] () -- C:\Windows\SysWow64\another2file.exe
[2011/12/24 13:25:51 | 000,077,824 | ---- | C] () -- C:\Windows\KMService.exe
[2011/12/24 13:25:51 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe
[2011/12/18 14:48:40 | 001,545,466 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/11/26 23:53:14 | 000,203,264 | ---- | C] () -- C:\Users\Jozo\AppData\Local\Uninstall.exe
[2011/11/26 23:52:20 | 000,139,776 | ---- | C] () -- C:\Users\Jozo\AppData\Local\Install.exe
[2011/11/26 22:03:56 | 000,000,000 | ---- | C] () -- C:\Users\Jozo\AppData\Roaming\chrtmp
[2011/11/26 21:35:28 | 000,210,779 | ---- | C] () -- C:\Windows\hpoins21.dat
[2011/11/26 21:35:28 | 000,005,474 | ---- | C] () -- C:\Windows\hpomdl21.dat
[2009/07/14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/13 14:12:56 | 000,221,184 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll
[2009/06/10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

========== LOP Check ==========

[2011/12/30 22:45:21 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\AnvSoft
[2011/11/28 09:46:13 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\CheckPoint
[2011/12/19 19:08:38 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\Command and Conquer 4
[2011/12/30 23:26:55 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\DAEMON Tools Lite
[2012/01/14 22:39:25 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\DMCache
[2011/11/26 20:08:02 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\GHISLER
[2012/01/09 16:04:46 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\IDM
[2011/12/08 11:57:41 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\Nokia
[2011/11/26 19:16:52 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\Opera
[2012/01/13 09:42:03 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\OTi
[2011/12/08 11:57:41 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\PC Suite
[2011/12/20 13:46:15 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\Postbox
[2012/01/02 13:16:41 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\Red Alert 3 Uprising
[2011/11/26 19:22:07 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\Thunderbird
[2011/11/26 21:48:35 | 000,000,000 | ---D | M] -- C:\Users\Jozo\AppData\Roaming\URSoft
[2009/07/14 06:08:49 | 000,027,132 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 158 bytes -> C:\ProgramData\TEMP:FB1B13D8
@Alternate Data Stream - 158 bytes -> C:\ProgramData\TEMP:1CE11B51

< End of report >

#14 Příspěvek od **vyosek** » 15 led 2012 19:44

Ctete prosim dukladne navody

Spustte znovu OTL

Kliknete na Nekontrolovat
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s

Kliknete na tlacitko Prohledat
Po dokonceni skenu (cca 10 az 15 min) se objevi log OTL.txt, vlozte jej sem

rivers2 · #15 Příspěvek od **rivers2** » 15 led 2012 20:09

https://www.virustotal.com/file/da54cd8 ... =slwga.dll

VIRY.CZ

poprosím o kontrolu - problémy s pripojením na net

poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net

Re: poprosím o kontrolu - problémy s pripojením na net