Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Nefunguje Správce úloh, chybí nabídka spustit a hláška

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
AdamDvorak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 10 úno 2012 12:28
Kontaktovat uživatele:
Kontaktovat uživatele AdamDvorak

Nefunguje Správce úloh, chybí nabídka spustit a hláška

#1 Příspěvek od AdamDvorak »

Mám na počítači pár problémů, které mi znemožňují pořádnou práci na PC.
Konkrétně se jedná o nefunkčnost Správce úloh, opakované nervyberoucí hlášky a zablokované nabídky Spustit.
Tento problém je starý cca 4 dny.
Již jsem o něm psal na JNP.CZ http://jnp.zive.cz/nefunguje-spravce-ul ... ka-spustit a vás prosím alespoň o částečné přečtení. Moc mi nepomohli a řekli mi, ať se obrátím na vás.
Tady je můj článek:
Něco se mi z ničeho nic stalo se systémem.
Asi každých pět minut vyskočí hláška:
"Server SMTP vyžaduje zabezpečené připojení nebo klient nebyl ověřen. Odpověď serveru: 5.5.1 Authentication Required. Learn more at"
Docela mi to vadí, a tak jsem chtěl přijít pomocí Správce úloh na to, který program to je.
Ale při stisknutí Ctrl + Alt + Del se nestane vůbec nic.
Chtěl jsem pomocí nabídky Spustit otevřít nástroj ručně,
ale ona v nabídce start není!
Je to Virus?
Mám Avast! free antivirus a OS Windows XP
a k němu dodatek
Asi jsem to nenapsal dost jasně....
Když udělám Ctrl+Shift+Esc nebo Ctrl+Alt+Delete a nebo "HLAVNÍ PANEL" -} "Správce úloh"
okno se nezobrazí! Při prvním pokusu jen v Trayové liště blikne na 1 sec jeho ikona.
Spustit v nabídce Start není.
A prováděl jsem kompletní test systému, našlo mi to 50 virů a ta hláška se už nezobrazuje.
A teď asi to nejdůležitější
A opravdu za to může vir?
Abych se přiznal, na tento počítač chodí můj bratr a ten si nainstaloval crack na Game Maker 8.1.
z návodu na youtube. Když to spouštěl, jmenovalo se to nějak "Game Maker Mrs. Hasch Instaler"
Vyskočila ta hláška z Avastu, že nějaký poštovní program se chce zabezpečeně připojit na web, ale on mu o nemůže dovolit.
Chtěl jsem to smazat, ale nešlo to, protože ten proces byl otevřený. Tak jsem to chtěl pomocí správce úloh vypnout a od té doby nejede. No a taky pořád skáče ta hláška.
Asi to bude ono, ale soubor je již smazaný, i když ho v koši nemůžu najít.
Achjo, z Youtube ten odkaz už smazali a nemůžu ho najít v historii
Nevím, jestli je to ten vir, ale asi ano.
Co s tím mám dělat?
Můj log, který je ale z UPM

Kód: Vybrat vše

Windows XP SP 3 (build 2600)
Boot Mode: Normal
Ověření souborů Microsoftu: Ano
Whitelist: Ano
Internet Explorer v8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
Log vygenerován: 10.2.2012 12:26:36
================================================================

SmallARK
================================================================
[R]NtAddBootEntry                   -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtAllocateVirtualMemory          -> C:\WINDOWS\system32\drivers\aswSP.SYS
[?]NtClose                          -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[R]NtCreateEvent                    -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtCreateEventPair                -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[?]NtCreateFile                     -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[R]NtCreateIoCompletion             -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[?]NtCreateKey                      -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[R]NtCreateMutant                   -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[?]NtCreateSection                  -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[R]NtCreateSemaphore                -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtCreateTimer                    -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtDeleteBootEntry                -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[?]NtDeleteKey                      -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[?]NtDeleteValueKey                 -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[R]NtDuplicateObject                -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtEnumerateKey                   -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtEnumerateValueKey              -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtFreeVirtualMemory              -> C:\WINDOWS\system32\drivers\aswSP.SYS
[?]NtLoadDriver                     -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[R]NtModifyBootEntry                -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtNotifyChangeKey                -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtNotifyChangeMultipleKeys       -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtOpenEvent                      -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtOpenEventPair                  -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[?]NtOpenFile                       -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[R]NtOpenIoCompletion               -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtOpenKey                        -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtOpenMutant                     -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtOpenProcess                    -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtOpenSection                    -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtOpenSemaphore                  -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtOpenThread                     -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtOpenTimer                      -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtProtectVirtualMemory           -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtQueryKey                       -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtQueryObject                    -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtQueryValueKey                  -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtRenameKey                      -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtRestoreKey                     -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtSetBootEntryOrder              -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtSetBootOptions                 -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[?]NtSetInformationFile             -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[R]NtSetSystemInformation           -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtSetSystemPowerState            -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[?]NtSetValueKey                    -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[R]NtShutdownSystem                 -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[R]NtSystemDebugControl             -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[?]NtTerminateProcess               -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
[R]NtVdmControl                     -> C:\WINDOWS\system32\drivers\aswSnx.SYS
[?]NtWriteFile                      -> C:\WINDOWS\system32\drivers\sp_rsdrv2.sys


Běžící procesy
================================================================

C:\WINDOWS\SYSTEM32\WINLOGON.EXE
 |_ MD5: 471341D353962A35DA3C6324D59D09C4
 |_Výrobce:  Microsoft Corporation

C:\PROGRAM FILES\HEWLETT-PACKARD\DRIVE ENCRYPTION\HPFKCRYPT.EXE
 |_ MD5: FAC83C27D09DA59E9687B33BC100CF67
 |_Výrobce:  SafeBoot International

C:\PROGRAM FILES\LSI SOFTMODEM\AGRSMSVC.EXE
 |_ MD5: 9C9D3B7A05445B1AB2DF4D0C4D6B77E8
 |_Výrobce:  Agere Systems

C:\WINDOWS\EXPLORER.EXE
 |_ MD5: 1A32145EBADFE694790FB7FBC060FD37
 |_Výrobce:  Microsoft Corporation

C:\PROGRAM FILES\HEWLETT-PACKARD\IAM\BIN\ASGHOST.EXE
 |_ MD5: 3F91D1056D2CEBEF374BE0E55428190A
 |_Výrobce:  Cognizance Corporation

C:\WINDOWS\SYSTEM32\CTFMON.EXE
 |_ MD5: BD51CC12F9ACB16CBD8CD16B755E93D2
 |_Výrobce:  Microsoft Corporation

C:\PROGRAM FILES\ANALOG DEVICES\CORE\SMAX4PNP.EXE
 |_ MD5: 15D0C090E4223C68CC2DAF471584F4A8
 |_Výrobce:  Analog Devices, Inc.

C:\PROGRAM FILES\ROCKETDOCK\NEXUS.EXE
 |_ MD5: 49CDA2500790D2E8AC3EDFA1B24E79B6
 |_Výrobce:  Winstep Software Technologies

C:\PROGRAM FILES\UNLOCKER\UNLOCKERASSISTANT.EXE
 |_ MD5: 255E405D801CF01247390F38F92D8042
 |_Výrobce:  

C:\DOCUMENTS AND SETTINGS\ZASTPA.MKYJ003\PLOCHA\PROGRAMY\FLIP3D\WINFLIP.EXE
 |_ MD5: A68DC6BE5E2D179B060DA8AC3649C612
 |_Výrobce:  

C:\DOCUMENTS AND SETTINGS\ZASTPA.MKYJ003\LOCAL SETTINGS\APPS\F.LUX\FLUX.EXE
 |_ MD5: A1F86A5A0DA1BEC12B7DD19C6234BB15
 |_Výrobce:  

C:\WINDOWS\SYSTEM32\WTMKM.EXE
 |_ MD5: 542366C5659BE7E4EF3CD86415449B62
 |_Výrobce:  ?

C:\WINDOWS\SYSTEM32\MSIEXEC.EXE
 |_ MD5: 665DAE3CEA6CCCEE2D2E27B14409F9D0
 |_Výrobce:  Microsoft Corporation

C:\PROGRAM FILES\ULTIMATE PROCESS MANAGER\AVENGER.EXE
 |_ MD5: 30F3680E007D924960FD65524DE36601
 |_Výrobce:  

C:\PROGRAM FILES\ULTIMATE PROCESS MANAGER\UPM.EXE
 |_ MD5: DD42D203E3476BAD1937F0955D501F96
 |_Výrobce:  Lodus Software


Scanner
================================================================
[S, novf!] winlogon.exe                                                           
Non Microsoft v System32:                                                         
Ověřený Microsoft:          Ne
Nemá okno                                                                         
Soubor                      12%
                                                      
[?] HpFkCrypt.exe                                                                 
Nemá okno                                                                         
Soubor                      7%
                                                      
[?] agrsmsvc.exe                                                                  
Nemá okno                                                                         
                                                      
[R] IFXSPMGT.exe                                                                  
Spouští se po startu        HKLM Run [IFXSPMGT]
                                                      
[R] MDM.EXE                                                                       
Ověřený Microsoft:          Ne
                                                      
[R] MSCamS32.exe                                                                  
Ověřený Microsoft:          Ne
                                                      
[R] pdfsvc.exe                                                                    
EntryPoint v sekci:         CODE
|_ Celkový počet sekcí:     8
                                                      
[R] SeaPort.exe                                                                   
Ověřený Microsoft:          Ne
                                                      
[R] st_rsser.exe                                                                  
EntryPoint v sekci:         .ITEXT
|_ Celkový počet sekcí:     9
                                                      
[S, novf!] explorer.exe                                                           
Ověřený Microsoft:          Ne
Spouští se po startu        HKLM Winlogon [Shell]
Soubor                      25%
                                                      
[?] asghost.exe                                                                   
Soubor                      7%
                                                      
[S, novf!] ctfmon.exe                                                             
Non Microsoft v System32:                                                         
Ověřený Microsoft:          Ne
Spouští se po startu        HKCU Run [ctfmon.exe]
Soubor                      25%
                                                      
[R] AvastUI.exe                                                                   
Spouští se po startu        HKLM Run [avast]
                                                      
[R] QLBCTRL.exe                                                                   
Spouští se po startu        HKLM Run [QlbCtrl]
                                                      
[R] SynTPEnh.exe                                                                  
Spouští se po startu        HKLM Run [SynTPEnh]
                                                      
[R] igfxpers.exe                                                                  
Spouští se po startu        HKLM Run [Persistence]
                                                      
[R] jusched.exe                                                                   
Spouští se po startu        HKLM Run [SunJavaUpdateSched]
                                                      
[?] smax4pnp.exe                                                                  
Spouští se po startu        HKLM Run [SoundMAXPnP]
                                                      
[?] Nexus.exe                                                                     
Soubor                      14%
                                                      
[R] WizMouse.exe                                                                  
EntryPoint v sekci:         .ITEXT
|_ Celkový počet sekcí:     9
                                                      
[R] MSOSYNC.EXE                                                                   
Ověřený Microsoft:          Ne
                                                      
[?] UnlockerAssistant.exe                                                         
Bez výrobce                                                                       
Soubor                      12%
                                                      
[?] WinFlip.exe                                                                   
Bez výrobce                                                                       
Soubor                      12%
                                                      
[?] flux.exe                                                                      
Bez výrobce                                                                       
Soubor                      12%
                                                      
[R] Skype.exe                                                                     
Podvržená cesta modulu:     (00400000) C:\Program Files\Skype\Phone\Skype.exe
                                                      
[?] WTMKM.exe                                                                     
Bez výrobce v System32                                                            
Soubor                      25%
                                                      
[S, novf!] msiexec.exe                                                            
Non Microsoft v System32:                                                         
Ověřený Microsoft:          Ne
Nemá okno                                                                         
Soubor                      12%
                                                      
[S] searchfilterhost.exe                                                          
Proces se nepodařilo otevřít                                                      
ROOTKIT?                    Skrytá cesta
Spouští se po startu        HKCU Run [ctfmon.exe]
Nelze otevřít                                                                     
                                                      
[?] avenger.exe                                                                   
Bez výrobce                                                                       
EntryPoint v sekci:         UPX1
|_ Celkový počet sekcí:     3
Soubor                      100%
                                                      
[?] UPM.exe                                                                       
Soubor                      7%
                                                      

Po spuštění
================================================================

HKCU Run
 |_ [X][Clownfish]                    (Soubor nenalezen)
 |_ [?][ctfmon.exe]                  C:\WINDOWS\system32\ctfmon.exe
 |  |_ MD5: BD51CC12F9ACB16CBD8CD16B755E93D2
 |  |_ Výrobce:  Microsoft Corporation
 |
 |_ [?][Windows Update] C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\WindowsUpdate.exe
    |_ MD5: 7C5ADCFD9DE4784AAC8EE627ED57497C
    |_ Výrobce:  [Company]


HKLM Run
 |_ [R][avast]                       C:\Program Files\Avast\avastUI.exe /nogui
 |  |_ MD5: F7226AA410954185160067D5FA82F3F2
 |  |_ Výrobce:  AVAST Software
 |
 |_ [?][StartupDelayer] C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher.exe /LaunchType=Auto /LaunchApps=Common
 |  |_ MD5: B45888489B826B20AAD49408D1110BD5
 |  |_ Výrobce:  r2 Studios
 |
 |_ [R][SoundMAX]                    C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
 |  |_ MD5: AC3197063BF23C53D5DCBA0D575FD2E9
 |  |_ Výrobce:  Analog Devices, Inc.
 |
 |_ [R][PTHOSTTR]                    C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
 |  |_ MD5: 0C2E780785B2E0CF09B439E874C50990
 |  |_ Výrobce:  Hewlett-Packard Development Company, L.P.
 |
 |_ [R][QlbCtrl]                     C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
 |  |_ MD5: 1EEA95A7483A678551108B6DCF308CC1
 |  |_ Výrobce:   Hewlett-Packard Development Company, L.P.
 |
 |_ [R][IFXSPMGT]                    C:\WINDOWS\system32\ifxspmgt.exe /NotifyLogon
 |  |_ MD5: 274F4F664F2B0BA8F97F46BE0DEEAD8D
 |  |_ Výrobce:  Infineon Technologies AG
 |
 |_ [?][CognizanceTS] C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll ,RegisterModule
 |  |_ MD5: 09B9F07E4D91B4EC48D7271110136881
 |  |_ Výrobce:  Cognizance Corporation
 |
 |_ [?][Reloader]                    C:\WINDOWS\NiwradSoft Shell Pack\Tools\Reloader.exe /S
 |  |_ MD5: F6625774F6B3B3BE20CAEF60C28208BB
 |  |_ Výrobce:  NiwradSoft
 |
 |_ [?][QuickTime Task] C:\Program Files\QuickTime\qttask.exe -atboottime
 |  |_ MD5: 0AEE5668EB59912F32FF245BFA72465F
 |  |_ Výrobce:  Apple Inc.
 |
 |_ [?][SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
    |_ MD5: 15D0C090E4223C68CC2DAF471584F4A8
    |_ Výrobce:  Analog Devices, Inc.


HKLM ShellServiceObjectDelayLoad
 |_ [?][PostBootReminder] C:\WINDOWS\system32\SHELL32.dll
 |  |_ MD5: 7CB8B8892871754EB68479FDF922E9B1
 |  |_ Výrobce:  Microsoft Corporation
 |
 |_ [?][CDBurn]                      C:\WINDOWS\system32\SHELL32.dll
 |  |_ MD5: 7CB8B8892871754EB68479FDF922E9B1
 |  |_ Výrobce:  Microsoft Corporation
 |
 |_ [?][WebCheck]                    C:\WINDOWS\system32\webcheck.dll
 |  |_ MD5: 167254CD23D5165CADF5562339C2076E
 |  |_ Výrobce:  Microsoft Corporation
 |
 |_ [?][SysTray]                     C:\WINDOWS\system32\stobject.dll
    |_ MD5: B65B846B56B5CD3FA1EFF7AF7DF63B80
    |_ Výrobce:  Microsoft Corporation


HKU Run
 |_ [?][CTFMON.EXE]                  C:\WINDOWS\system32\CTFMON.EXE
    |_ MD5: BD51CC12F9ACB16CBD8CD16B755E93D2
    |_ Výrobce:  Microsoft Corporation


HKLM IC
 |_ [?][>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\iedkcs32.dll,BrandIEActiveSetup SIGNUP
 |  |_ MD5: 1AEDCC08E1EC64B43F8C5222FC8FE5BC
 |  |_ Výrobce:  Microsoft Corporation
 |
 |_ [X][>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP (Soubor nenalezen)
 |_ [?][{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] C:\WINDOWS\INF\msnetmtg.inf ,NetMtg.Install.PerUser.NT
 |  |_ MD5: F8995D4274D3D7E32BE7812B872BCC13
 |  |_ Výrobce:  
 |
 |_ [?][{5945c046-1e7d-11d1-bc44-00c04fd912be}] C:\WINDOWS\INF\msmsgs.inf ,BLC.QuietInstall.PerUser
 |  |_ MD5: 97BF5E6CB8D2498286096D35644517C5
 |  |_ Výrobce:  
 |
 |_ [?][{6BF52A52-394A-11d3-B153-00C04F79FAA6}] C:\WINDOWS\INF\wmp11.inf ,PerUserStub
 |  |_ MD5: C50E7DA8003BF4B222248B9DB4104290
 |  |_ Výrobce:  
 |
 |_ [?][{89820200-ECBD-11cf-8B85-00AA005B4340}] regsvr32.exe /s /n /i:U shell32.dll
    |_ MD5: 
    |_ Výrobce:  Microsoft Corporation


HKLM Winlogon
 |_ [?][Shell]                       C:\WINDOWS\Explorer.exe
    |_ MD5: 1A32145EBADFE694790FB7FBC060FD37
    |_ Výrobce:  Microsoft Corporation


HKLM Winlogon Notify
 |_ [X][!SASWinLogon] G:\First help for PC\SUPERAntiSpyware Free Edition\SASWINLO.DLL (Soubor nenalezen)
 |_ [?][cscdll]                      C:\WINDOWS\system32\cscdll.dll
 |  |_ MD5: 724145F5D2EF4BCA10EDF5E6A99558A3
 |  |_ Výrobce:  Microsoft Corporation
 |
 |_ [?][igfxcui]                     C:\WINDOWS\system32\igfxdev.dll
 |  |_ MD5: A0B342D6386A01250D35BA942B1C5A0B
 |  |_ Výrobce:  Intel Corporation
 |
 |_ [?][OneCard]                     C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll
    |_ MD5: 2EEDA27C19259C2340324EF7180D086B
    |_ Výrobce:  Cognizance Corporation


HKLM AppInit_DLLs
 |_ [?][AppInit_DLLs] C:\WINDOWS\system32\APSHook.dll
    |_ MD5: 26D017054EA002B6FE4E2AAA9CAE04B8
    |_ Výrobce:  Bioscrypt Inc.


Job
 |_ [?][OFFICE~1.JOB] C:\Documents and Settings\zastpa.MKYJ003\Plocha\Office_2010_Activation_and_Conversion_Kit_1.6_by_Raz0r.exe
    |_ MD5: C07C80EFD4A65B4EF8A9CE01A7183C36
    |_ Výrobce:  Raz0r



HKCU IE WebBrowser Toolbar
 |_ [X][{D4027C7F-154A-4066-A1AD-4243D8127440}]  (Soubor nenalezen)

HKLM IE Toolbar
 |_ [?][{D2F8F919-690B-4EA2-9FA7-A203D1E04F75}] C:\Program Files\Styler\TB\StylerTB.dll
 |  |_ MD5: A85310C1BB9F598300209B38EB10AE71
 |  |_ Výrobce:  StyleFantasist
 |
 |_ [X][{D4027C7F-154A-4066-A1AD-4243D8127440}]  (Soubor nenalezen)

Služby (Zobraz běžící: True, Zobraz zastavené: False, Zobraz i bezpečné služby: False)
================================================================
[X] SAS Core Service
 |_ Cesta: G:\First help for PC\SUPERAntiSpyware Free Edition\SASCORE.EXE
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: 
 |   
 |_ Jméno:  !SASCORE
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Zastaveno
 |_ Typ:  Win32 Own Process
 |_ Dependency: 

[?] Agere Modem Call Progress Audio
 |_ Cesta: C:\Program Files\LSI SoftModem\agrsmsvc.exe
 |   |_ Výrobce:  Agere Systems
 |   |_ Popis: Agere Soft Modem Call Progress Service
 |   |_ MD5: 9C9D3B7A05445B1AB2DF4D0C4D6B77E8
 |   
 |_ Jméno:  AgereModemAudio
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Spuštěno
 |_ Typ:  Win32 Own Process
 |_ Dependency: 

[?] Logon Session Broker
 |_ Cesta: C:\WINDOWS\System32\svchost.exe
 |   |_ Výrobce:  Microsoft Corporation
 |   |_ Popis: Generic Host Process for Win32 Services
 |   |_ MD5: BE4A520E29B6391F49E79CCC52044D93
 |   
 |_ ServiceDLL: C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll
 |   |_ Výrobce:  Cognizance Corporation
 |   |_ Popis: Winlogon notification handler
 |   |_ MD5: 2EEDA27C19259C2340324EF7180D086B
 |   
 |_ Jméno:  ASBroker
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Spuštěno
 |_ Typ:  Win32 Share Process
 |_ Dependency: 

[?] Local Communication Channel
 |_ Cesta: C:\WINDOWS\System32\svchost.exe
 |   |_ Výrobce:  Microsoft Corporation
 |   |_ Popis: Generic Host Process for Win32 Services
 |   |_ MD5: BE4A520E29B6391F49E79CCC52044D93
 |   
 |_ ServiceDLL: C:\Program Files\Hewlett-Packard\IAM\Bin\ASChnl.dll
 |   |_ Výrobce:  Cognizance Corporation
 |   |_ Popis: Secure Communication Channel
 |   |_ MD5: BB3C0521ECCA4BB17AC55EB640DF0FA5
 |   
 |_ Jméno:  ASChannel
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Spuštěno
 |_ Typ:  Win32 Share Process
 |_ Dependency: 

[R] Easybits GO Services for Windows
 |_ Cesta: C:\WINDOWS\system32\svchost.exe
 |   |_ Výrobce:  Microsoft Corporation
 |   |_ Popis: Generic Host Process for Win32 Services
 |   |_ MD5: BE4A520E29B6391F49E79CCC52044D93
 |   
 |_ ServiceDLL: C:\WINDOWS\system32\ezGOSvc.dll
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: DA7ED3A484A2A03FD8AEC1B3A0DB401C
 |   
 |_ Jméno:  ezGOSvc
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Spuštěno
 |_ Typ:  Win32 Own Process
 |_ Dependency: 

[X] Služba Google Update (gupdate)
 |_ Cesta: C:\Program Files\Google\Update\GoogleUpdate.exe /svc
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: 
 |   
 |_ Jméno:  gupdate
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Zastaveno
 |_ Typ:  Win32 Own Process
 |_ Dependency: RPCSS

[X] LogMeIn Hamachi Tunneling Engine
 |_ Cesta: C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -s
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: 
 |   
 |_ Jméno:  Hamachi2Svc
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Spuštěno
 |_ Typ:  
 |_ Dependency: 

[?] Drive Encryption Service
 |_ Cesta: C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
 |   |_ Výrobce:  SafeBoot International
 |   |_ Popis: Drive Encryption for HP ProtectTools Service
 |   |_ MD5: FAC83C27D09DA59E9687B33BC100CF67
 |   
 |_ Jméno:  HpFkCryptService
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Spuštěno
 |_ Typ:  Win32 Own Process
 |_ Dependency: 

[X] Java Quick Starter
 |_ Cesta: C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: 
 |   
 |_ Jméno:  JavaQuickStarterService
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Spuštěno
 |_ Typ:  Win32 Own Process
 |_ Dependency: 

[?] Windows Installer
 |_ Cesta: C:\WINDOWS\system32\msiexec.exe
 |   |_ Výrobce:  Microsoft Corporation
 |   |_ Popis: Windows® installer
 |   |_ MD5: 665DAE3CEA6CCCEE2D2E27B14409F9D0
 |   
 |_ Jméno:  MSIServer
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Win32 Share Process
 |_ Dependency: RpcSs

[X] Text-to-Speech system Epos
 |_ Cesta: C:\Program Files\Epos_2.4\bin\epos.exe
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: 
 |   
 |_ Jméno:  ttscp
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Zastaveno
 |_ Typ:  
 |_ Dependency: 

[?] WTService
 |_ Cesta: C:\WINDOWS\system32\atwtusb.exe
 |   |_ Výrobce:  ?
 |   |_ Popis: User Mode Tablet Driver
 |   |_ MD5: 325164A4B3674A17E31D0E9BE8E3E020
 |   
 |_ Jméno:  WTService
 |_ StartName: LocalSystem
 |_ Typ spouštění:  Auto Start
 |_ Status: Zastaveno
 |_ Typ:  
 |_ Dependency: 


Ovladače (Zobraz běžící: True, Zobraz zastavené: False, Zobraz i bezpečné služby: False)
================================================================
[?] ADI UAA Function Driver for High Definition Audio Service
 |_ Cesta: C:\WINDOWS\system32\drivers\ADIHdAud.sys
 |   |_ Výrobce:  Analog Devices, Inc.
 |   |_ Popis: High Definition Audio Function Driver
 |   |_ MD5: 7356EFF52AD50B8946D346002118CE62
 |   
 |_ Jméno:  ADIHdAudAddService
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] AE Audio Service
 |_ Cesta: C:\WINDOWS\system32\drivers\AEAudio.sys
 |   |_ Výrobce:  Andrea Electronics Corporation
 |   |_ Popis: Audio Noise Filtering Driver (32-bit)
 |   |_ MD5: FFF87A9B1AB36EE4B7BEC98A4CB01B79
 |   
 |_ Jméno:  AEAudio
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] Agere Systems Soft Modem
 |_ Cesta: C:\WINDOWS\system32\DRIVERS\AGRSM.sys
 |   |_ Výrobce:  Agere Systems
 |   |_ Popis: SoftModem Device Driver
 |   |_ MD5: 3712986CC3ABF0DC656B43525B9D1279
 |   
 |_ Jméno:  AgereSoftModem
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[X] BootScreen
 |_ Cesta: C:\WINDOWS\C:\WINDOWS\System32\drivers\vidstub.sys
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: 
 |   
 |_ Jméno:  BootScreen
 |_ StartName: 
 |_ Typ spouštění:  Boot Start
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] Bluetooth Audio Device
 |_ Cesta: C:\WINDOWS\system32\drivers\btaudio.sys
 |   |_ Výrobce:  Broadcom Corporation.
 |   |_ Popis: Bluetooth Audio Device
 |   |_ MD5: 3AA4BF555C00C5B87FD48DD7BDBD4E97
 |   
 |_ Jméno:  btaudio
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] Bluetooth Virtual Communications Driver
 |_ Cesta: C:\WINDOWS\system32\DRIVERS\btport.sys
 |   |_ Výrobce:  Broadcom Corporation.
 |   |_ Popis: Bluetooth BTPORT Driver for Windows 2000
 |   |_ MD5: 07F0A66CFA550B13AD0674AE09E3CBA0
 |   
 |_ Jméno:  BTDriver
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] Bluetooth Bus Enumerator
 |_ Cesta: C:\WINDOWS\system32\DRIVERS\btkrnl.sys
 |   |_ Výrobce:  Broadcom Corporation.
 |   |_ Popis: Bluetooth Bus Enumerator
 |   |_ MD5: BA57F31EAB93DC597D772F6F5B9ED54F
 |   
 |_ Jméno:  BTKRNL
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] WIDCOMM USB Bluetooth Driver
 |_ Cesta: C:\WINDOWS\System32\Drivers\btwusb.sys
 |   |_ Výrobce:  Broadcom Corporation.
 |   |_ Popis: Driver for Bluetooth USB Devices
 |   |_ MD5: 57E91E9925976BBC98984EEBAAF1D84C
 |   
 |_ Jméno:  BTWUSB
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] HBtnKey
 |_ Cesta: C:\WINDOWS\system32\DRIVERS\cpqbttn.sys
 |   |_ Výrobce:  Hewlett-Packard Development Company, L.P.
 |   |_ Popis: HP Tablet PC Key Button HID Driver
 |   |_ MD5: 407E41DDB2BFECE109132AEC296E0D98
 |   
 |_ Jméno:  HBtnKey
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] HpqKbFilter Driver
 |_ Cesta: C:\WINDOWS\system32\DRIVERS\HpqKbFiltr.sys
 |   |_ Výrobce:  Hewlett-Packard Development Company, L.P.
 |   |_ Popis: HpqKbFiltr Keyboard Filter Driver
 |   |_ MD5: 35956140E686D53BF676CF0C778880FC
 |   
 |_ Jméno:  HpqKbFiltr
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] ialm
 |_ Cesta: C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
 |   |_ Výrobce:  Intel Corporation
 |   |_ Popis: Intel Graphics Miniport Driver
 |   |_ MD5: 200CCA76CD0E0F7EEC78FA56C29B4D67
 |   
 |_ Jméno:  ialm
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] IFXTPM
 |_ Cesta: C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS
 |   |_ Výrobce:  Infineon Technologies AG
 |   |_ Popis: Infineon Trusted Platform Module
 |   |_ MD5: 2CDF483F8FC2BF3F7B93E3BDD734CFBD
 |   
 |_ Jméno:  IFXTPM
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?]     Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows XP 32 Bit
 |_ Cesta: C:\WINDOWS\system32\DRIVERS\NETwLx32.sys
 |   |_ Výrobce:  Intel Corporation
 |   |_ Popis: Intel® Wireless WiFi Link Driver
 |   |_ MD5: 72062B53186E4A3F5FCBC41EBB62B905
 |   
 |_ Jméno:  NETwLx32
 |_ StartName: 
 |_ Typ spouštění:  Ruční spuštění
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] PxHelp20
 |_ Cesta: C:\WINDOWS\System32\Drivers\PxHelp20.sys
 |   |_ Výrobce:  Sonic Solutions
 |   |_ Popis: Px Engine Device Driver for Windows 2000/XP
 |   |_ MD5: FEFFCFDC528764A04C8ED63D5FA6E711
 |   
 |_ Jméno:  PxHelp20
 |_ StartName: 
 |_ Typ spouštění:  Boot Start
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] RsvLock
 |_ Cesta: C:\WINDOWS\system32\drivers\RsvLock.sys
 |   |_ Výrobce:  SafeBoot International
 |   |_ Popis: SafeBoot Reserved Files Lock Driver
 |   |_ MD5: 0DE27C94A562D0360FB520C42068CCA0
 |   
 |_ Jméno:  RsvLock
 |_ StartName: 
 |_ Typ spouštění:  System Start
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] SafeBoot
 |_ Cesta: C:\WINDOWS\system32\drivers\SafeBoot.sys
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: 
 |   
 |_ Jméno:  SafeBoot
 |_ StartName: 
 |_ Typ spouštění:  Boot Start
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] SbAlg
 |_ Cesta: C:\WINDOWS\system32\drivers\SbAlg.sys
 |   |_ Výrobce:  SafeBoot N.V.
 |   |_ Popis: SafeBoot FIPS AES Algorithm (256 bit)
 |   |_ MD5: F6367FB350F8E5D3F6DD8040E4C0E33B
 |   
 |_ Jméno:  SbAlg
 |_ StartName: 
 |_ Typ spouštění:  Boot Start
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[X] sptd
 |_ Cesta: C:\WINDOWS\C:\WINDOWS\System32\Drivers\sptd.sys
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: 
 |   
 |_ Jméno:  sptd
 |_ StartName: 
 |_ Typ spouštění:  Boot Start
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] Spyware Terminator 2012 Realtime Shield Driver
 |_ Cesta: C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
 |   |_ Výrobce:  ?
 |   |_ Popis: ?
 |   |_ MD5: 7B426B8E809EDF081D771EF429345528
 |   
 |_ Jméno:  sp_rsdrv2
 |_ StartName: 
 |_ Typ spouštění:  System Start
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 

[?] StarOpen
 |_ Cesta: C:\WINDOWS\system32\drivers\StarOpen.sys
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: E57B778208C783D8DEBAB320C16A1B82
 |   
 |_ Jméno:  StarOpen
 |_ StartName: 
 |_ Typ spouštění:  Auto Start
 |_ Status: Spuštěno
 |_ Typ:  File System Driver
 |_ Dependency: 

[?] Vcs support
 |_ Cesta: C:\WINDOWS\system32\Drivers\Vcs.sys
 |   |_ Výrobce:  
 |   |_ Popis: 
 |   |_ MD5: CE9B7DF9AF5B01884BEEAB3F703C3BF6
 |   
 |_ Jméno:  Vcs
 |_ StartName: 
 |_ Typ spouštění:  Auto Start
 |_ Status: Spuštěno
 |_ Typ:  Kernel Driver
 |_ Dependency: 


lNetStat
================================================================
Typ:  PID       Proces              Local <-> Remote                             Status
-----------------------------------------------------------------------------------------
TCP (1192)    svchost.exe         0.0.0.0:135                                  LISTENING
TCP (4)       Systém              0.0.0.0:445                                  LISTENING
TCP (1096)    svchost.exe         0.0.0.0:3389                                 LISTENING
TCP (4)       Systém              5.54.223.240:139                             LISTENING
TCP (172)     alg.exe             127.0.0.1:1026                               LISTENING
TCP (2376)    firefox.exe         127.0.0.1:1037 <-> 127.0.0.1:1038            ESTABLISHED
TCP (2376)    firefox.exe         127.0.0.1:1038 <-> 127.0.0.1:1037            ESTABLISHED
TCP (2376)    firefox.exe         127.0.0.1:1056 <-> 127.0.0.1:1057            ESTABLISHED
TCP (2376)    firefox.exe         127.0.0.1:1057 <-> 127.0.0.1:1056            ESTABLISHED
TCP (0)       127.0.0.1:1903                               TIME_WAIT
TCP (2376)    firefox.exe         127.0.0.1:1905 <-> 127.0.0.1:12080           ESTABLISHED
TCP (4560)    UPM.exe             127.0.0.1:1907 <-> 127.0.0.1:12080           ESTABLISHED
TCP (0)       127.0.0.1:1910                               TIME_WAIT
TCP (4560)    UPM.exe             127.0.0.1:1912 <-> 127.0.0.1:12080           ESTABLISHED
TCP (2376)    firefox.exe         127.0.0.1:1916 <-> 127.0.0.1:12080           ESTABLISHED
TCP (2376)    firefox.exe         127.0.0.1:1917 <-> 127.0.0.1:12080           ESTABLISHED
TCP (2376)    firefox.exe         127.0.0.1:1920 <-> 127.0.0.1:12080           ESTABLISHED
TCP (2376)    firefox.exe         127.0.0.1:1923 <-> 127.0.0.1:12080           ESTABLISHED
TCP (2376)    firefox.exe         127.0.0.1:1955 <-> 127.0.0.1:12080           ESTABLISHED
TCP (624)     jqs.exe             127.0.0.1:5152                               LISTENING
TCP (1864)    AvastSvc.exe        127.0.0.1:12025                              LISTENING
TCP (1864)    AvastSvc.exe        127.0.0.1:12080                              LISTENING
TCP (0)       127.0.0.1:12080                              TIME_WAIT
TCP (1864)    AvastSvc.exe        127.0.0.1:12080 <-> 127.0.0.1:1905           ESTABLISHED
TCP (1864)    AvastSvc.exe        127.0.0.1:12080 <-> 127.0.0.1:1907           ESTABLISHED
TCP (1864)    AvastSvc.exe        127.0.0.1:12080 <-> 127.0.0.1:1912           ESTABLISHED
TCP (1864)    AvastSvc.exe        127.0.0.1:12080 <-> 127.0.0.1:1916           ESTABLISHED
TCP (1864)    AvastSvc.exe        127.0.0.1:12080 <-> 127.0.0.1:1917           ESTABLISHED
TCP (1864)    AvastSvc.exe        127.0.0.1:12080 <-> 127.0.0.1:1920           ESTABLISHED
TCP (1864)    AvastSvc.exe        127.0.0.1:12080 <-> 127.0.0.1:1923           ESTABLISHED
TCP (0)       127.0.0.1:12080                              TIME_WAIT
TCP (1864)    AvastSvc.exe        127.0.0.1:12080 <-> 127.0.0.1:1955           ESTABLISHED
TCP (1864)    AvastSvc.exe        127.0.0.1:12110                              LISTENING
TCP (1864)    AvastSvc.exe        127.0.0.1:12119                              LISTENING
TCP (1864)    AvastSvc.exe        127.0.0.1:12143                              LISTENING
TCP (1864)    AvastSvc.exe        127.0.0.1:12465                              LISTENING
TCP (1864)    AvastSvc.exe        127.0.0.1:12563                              LISTENING
TCP (1864)    AvastSvc.exe        127.0.0.1:12993                              LISTENING
TCP (1864)    AvastSvc.exe        127.0.0.1:12995                              LISTENING
TCP (1064)    svchost.exe         127.0.0.1:49100                              LISTENING
TCP (4)       Systém              192.168.1.102:139                            LISTENING
TCP (220)     hamachi-2.exe       192.168.1.102:1047 <-> 64.74.103.79:12975    ESTABLISHED
TCP (1864)    AvastSvc.exe        192.168.1.102:1902                           LAST_ACK
TCP (1864)    AvastSvc.exe        192.168.1.102:1908 <-> 109.123.209.238:80    ESTABLISHED
TCP (1864)    AvastSvc.exe        192.168.1.102:1909                           CLOSE_WAIT
TCP (1864)    AvastSvc.exe        192.168.1.102:1913 <-> 95.100.248.24:80      ESTABLISHED
TCP (1864)    AvastSvc.exe        192.168.1.102:1919                           CLOSE_WAIT
TCP (0)       192.168.1.102:1928                           TIME_WAIT
TCP (0)       192.168.1.102:1930                           TIME_WAIT
TCP (0)       192.168.1.102:1933                           TIME_WAIT
TCP (0)       192.168.1.102:1938                           TIME_WAIT
TCP (1864)    AvastSvc.exe        192.168.1.102:1941                           CLOSE_WAIT
TCP (0)       192.168.1.102:1943                           TIME_WAIT
TCP (1864)    AvastSvc.exe        192.168.1.102:1944 <-> 77.75.77.66:80        ESTABLISHED
TCP (0)       192.168.1.102:1946                           TIME_WAIT
TCP (0)       192.168.1.102:1948                           TIME_WAIT
TCP (0)       192.168.1.102:1952                           TIME_WAIT
TCP (0)       192.168.1.102:1953                           TIME_WAIT
TCP (0)       192.168.1.102:1954                           TIME_WAIT
UDP (4)       Systém              0.0.0.0:445 <-> 62.219.81.122:80             ESTABLISHED
UDP (884)     lsass.exe           0.0.0.0:500                                  
UDP (220)     hamachi-2.exe       0.0.0.0:1049                                 
UDP (884)     lsass.exe           0.0.0.0:4500                                 
UDP (1340)    svchost.exe         5.54.223.240:123                             
UDP (4)       Systém              5.54.223.240:137                             
UDP (4)       Systém              5.54.223.240:138                             
UDP (1608)    svchost.exe         5.54.223.240:1900                            
UDP (1340)    svchost.exe         127.0.0.1:123                                
UDP (580)     flux.exe            127.0.0.1:1033                               
UDP (4036)    Skype.exe           127.0.0.1:1034                               
UDP (1608)    svchost.exe         127.0.0.1:1900                               
UDP (1340)    svchost.exe         192.168.1.102:123                            
UDP (4)       Systém              192.168.1.102:137                            
UDP (4)       Systém              192.168.1.102:138                            
UDP (220)     hamachi-2.exe       192.168.1.102:1048                           
UDP (1608)    svchost.exe         192.168.1.102:1900
------------------------------------------------------------------------------------------------------------------------
Adam Dvořák

Nezkušený začátečník v oblastí virů, ale středně pokročilý programátor her v GameMakerovi a psaní HTML
Nahoru
AdamDvorak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 10 úno 2012 12:28
Kontaktovat uživatele:
Kontaktovat uživatele AdamDvorak

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#2 Příspěvek od AdamDvorak »

Zde je log RSIT:
Logfile of random's system information tool 1.09 (written by random/random)
Run by zastpa at 2012-02-10 12:59:19
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 73 GB (30%) free of 238 GB
Total RAM: 2039 MB (26% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:59:36, on 10.2.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\LSI SoftModem\agrsmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\WINDOWS\system32\ifxspmgt.exe
C:\WINDOWS\system32\ifxtcs.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\PDF Complete\pdfsvc.exe
C:\WINDOWS\system32\IfxPsdSv.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Spyware Terminator\st_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avast\avastUI.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Hewlett-Packard\Embedded Security Software\PSDrt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\RocketDock\Nexus.exe
C:\Program Files\WizMouse\WizMouse.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Documents and Settings\zastpa.MKYJ003\Plocha\Programy\Flip3D\WinFlip.exe
C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Apps\F.lux\flux.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\WTMKM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Miranda\Miranda packing2\miranda32.exe
C:\Program Files\Ultimate Process Manager\UPM.exe
C:\Program Files\Ultimate Process Manager\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\zastpa.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Complitly\Complitly.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: QTTabBar AutoLoader - {d2bf470e-ed1c-487f-a777-2bd8835eb6ce} - mscoree.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.3.dll
O2 - BHO: Kwyshell MidpX BHO - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - C:\Program Files\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Avast\aswWebRepIE.dll
O3 - Toolbar: QTTabBar - {d2bf470e-ed1c-487f-a333-2bd8835eb6ce} - mscoree.dll (file missing)
O3 - Toolbar: QTTab Standard Buttons - {d2bf470e-ed1c-487f-a666-2bd8835eb6ce} - mscoree.dll (file missing)
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: Kwyshell MidpX - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - C:\Program Files\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [StartupDelayer] "C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher.exe" /LaunchType=Auto /LaunchApps=Common
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [IFXSPMGT] C:\WINDOWS\system32\ifxspmgt.exe /NotifyLogon
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [Reloader] C:\WINDOWS\NiwradSoft Shell Pack\Tools\Reloader.exe /S
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Windows Update] C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\WindowsUpdate.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [WizMouse] "C:\Program Files\WizMouse\WizMouse.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-796845957-776561741-725345543-500\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Administrator')
O4 - HKUS\S-1-5-21-796845957-776561741-725345543-501\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Guest')
O4 - HKUS\S-1-5-21-807471530-2265404454-1082218415-2474\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Styler.lnk = ?
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Download all by FlashGet3 - C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\FlashGetBHO\GetUrl.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Link to &MidpX - C:\Program Files\Kwyshell\MidpX\JadInvoker\Extent\jad_wrap.htm
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 1750112031
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 8976101796
O17 - HKLM\System\CCS\Services\Tcpip\..\{3F2F1C24-72E1-4913-8E5B-A54E2F127103}: Domain = phiag.corp
O17 - HKLM\System\CCS\Services\Tcpip\..\{78CFDDE4-4BB4-4E1E-B9A9-A05FD2D51C65}: Domain = phiag.corp
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype4COM.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: APSHook.dll
O20 - Winlogon Notify: !SASWinLogon - G:\First help for PC\SUPERAntiSpyware Free Edition\SASWINLO.DLL (file missing)
O20 - Winlogon Notify: OneCard - C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - Unknown owner - G:\First help for PC\SUPERAntiSpyware Free Edition\SASCORE.EXE (file missing)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Drive Encryption Service (HpFkCryptService) - SafeBoot International - C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\WINDOWS\system32\ifxspmgt.exe
O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\WINDOWS\system32\ifxtcs.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: Personal Secure Drive service (PersonalSecureDriveService) - Infineon Technologies AG - C:\WINDOWS\system32\IfxPsdSv.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files\Spyware Terminator\st_rsser.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SWIHPWMI - Sierra Wireless Inc. - C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe
O23 - Service: Text-to-Speech system Epos (ttscp) - Unknown owner - C:\Program Files\Epos_2.4\bin\epos.exe (file missing)
O23 - Service: WeFi Engine Service (WefiEngSvc) - WeFi - C:\Program Files\WeFi\WefiEngSvc.exe
O23 - Service: WTService - Unknown owner - C:\WINDOWS\system32\atwtusb.exe

--
End of file - 16620 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Office_2010_Activation_and_Conversion_Kit_1.6_by_Raz0r.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Mozilla\Firefox\Profiles\34fw68tl.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/?clid=1"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, jqs@sun.com:1.0, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3, {dc572301-7619-498c-a57d-39143191b318}:0.3.8.5, {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.1, {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4, elemhidehelper@adblockplus.org:1.1.1, {258735dc-6743-4805-95fc-f95941fffdad}:1.3.6, personas@christopher.beard:1.6.2, printedit@DW-dev:3.5, {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8, {9AA46F4F-4DC7-4c06-97AF-5035170634FE}:4.0, foxmarks@kei.com:3.9.5, smarterwiki@wikiatic.com:4.1.8, smartbookmarksbar@remy.juteau:1.4.3, {37fa1426-b82d-11db-8314-0800200c9a66}:2.7.5, {ada4b710-8346-4b82-8199-5de2b400a6ae}:1.9.9.3, {20a82645-c095-46ed-80e3-08825760534b}:0.0.0, {ad48108d-92a6-4eb9-87e4-978aca1dbae4}:1.1.6, add-to-searchbox@maltekraus.de:2.0, youtube2mp3@mondayx.de:1.0.7, {d47a9f51-8281-43fa-f450-f28ef8735e9a}:2.1.1, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13, {07b2a769-ed19-4483-87ce-c643914c81b1}:2.2"
prefs.js - "keyword.URL" - "http://search.seznam.cz/?sourceid=undefined&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{4B3803EA-5230-4DC3-A7FC-33638F3D3542}"=C:\Program Files\Crawler\Toolbar\firefox\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"wrc@avast.com"=C:\Program Files\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"Description"=Unity Player 3.0.0f5
"Path"=C:\Program Files\Unity\WebPlayer\loader\npUnity3D32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.1.10]
"Description"=VLC Multimedia Plugin
"Path"=C:\Documents and Settings\zastpa.MKYJ003\Plocha\Programy\Přehrávače filmů\Vlc Compilation\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@virtools.com/3DviaPlayer]
"Description"=3Dvia Player For Mozilla Based Broswer
"Path"=C:\Program Files\Virtools\3D Life Player\npvirtools.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
FlashGet3.xpi
nppl3260.xpt
nsIQTScriptablePlugin.xpt
nsJSRealPlayerPlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
exeImagine.IMD
np-mswmp.dll
npDivxPlayerPlugin.dll
npImagine.dll
NPOFF12.DLL
NPOFFICE.DLL
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprpjplug.dll
nsIDivxPlayerPlugin.xpt
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
crawlersrch.xml
google.xml
heureka-cz.xml
jnpcz.xml
jyxo-cz.xml
McSiteAdvisor.xml
seznam-cz.xml
slovnk-czen.xml
slovnk-encz.xml
slunecnice-cz.xml
stahujcz.xml
vyhledvn-vide-ve-slub-youtube.xml
wikipedia-cz.xml

C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Mozilla\Firefox\Profiles\34fw68tl.default\extensions\
add-to-searchbox@maltekraus.de
ALone-live@ya.ru
cs@dictionaries.addons.mozilla.org
jyboy.yy@gmail.com
personas@christopher.beard
staged
{1018e4d6-728f-4b20-ad56-37578a4de76b}
{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
{258735dc-6743-4805-95fc-f95941fffdad}
{33e0daa6-3af3-d8b5-6752-10e949c61516}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
{d47a9f51-8281-43fa-f450-f28ef8735e9a}
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Mozilla\Firefox\Profiles\34fw68tl.default\searchplugins\
doplky-pro-firefox.xml
geotool.xml
uloto.xml
wwwslovnik-cizich-slovcz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
Complitly - C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Complitly\Complitly.dll [2011-10-16 139768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Avast\aswWebRepIE.dll [2011-11-28 809040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17 3855520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2bf470e-ed1c-487f-a777-2bd8835eb6ce}]
QTTabBar AutoLoader - C:\WINDOWS\system32\mscoree.dll [2010-03-18 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-02-06 59272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
Credential Manager for HP ProtectTools - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll [2006-11-21 71192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2010-04-16 1067872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\core.3.dll [2011-01-19 1175152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EBE9E2B5-B526-48BC-AD46-687263EDCB0E}]
Kwyshell MidpX - C:\Program Files\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll [2004-12-03 100864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2010-04-16 1067872]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Avast\aswWebRepIE.dll [2011-11-28 809040]
{d2bf470e-ed1c-487f-a333-2bd8835eb6ce} - QTTabBar - C:\WINDOWS\system32\mscoree.dll [2010-03-18 297808]
{d2bf470e-ed1c-487f-a666-2bd8835eb6ce} - QTTab Standard Buttons - C:\WINDOWS\system32\mscoree.dll [2010-03-18 297808]
{D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - StylerToolBar - C:\Program Files\Styler\TB\StylerTB.dll [2006-05-02 102400]
{D4027C7F-154A-4066-A1AD-4243D8127440}
{EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - Kwyshell MidpX - C:\Program Files\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll [2004-12-03 100864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\Avast\avastUI.exe [2011-11-28 3744552]
"StartupDelayer"=C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher.exe [2011-12-13 978944]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2006-07-13 729088]
"PTHOSTTR"=C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [2007-01-09 145184]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-11-06 177456]
"IFXSPMGT"=C:\WINDOWS\system32\ifxspmgt.exe [2007-02-15 677408]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-05-18 138008]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-05-18 138008]
"CognizanceTS"=C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll [2003-12-22 17920]
"Reloader"=C:\WINDOWS\NiwradSoft Shell Pack\Tools\Reloader.exe [2010-07-04 325046]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-11-29 421888]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-09-30 252296]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2007-01-05 872448]
"WatchDog"=C:\Program Files\InterVideo\DVD Check\DVDCheck.exe [2007-05-23 192512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Clownfish"= []
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2011-02-08 40448]
"Windows Update"=C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\WindowsUpdate.exe [2012-02-07 189440]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"WizMouse"=C:\Program Files\WizMouse\WizMouse.exe [2011-09-30 121648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnUpdater]
C:\Program Files\Ask.com\Updater\Updater.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EADM\Core.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eXtra Buttons]
C:\Program Files\eXtra Buttons\xb.exe [2011-05-12 2492416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2007-04-19 484904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ManicTime]
C:\Program Files\ManicTime\ManicTime.exe /minimized /name: []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\McAfeeUpdaterUI]
C:\Program Files\McAfee\Common Framework\udaterui.exe /StartedFromRunKey []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MuralPixAgent]
C:\Program Files\MuralPix\MpAgent.exe /r []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\pamelaPCR.exe]
C:\Program Files\Pamela\PCR\PamelaPCR.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Phone Remote Control.lnk]
C:\PROGRA~1\PHONER~1\PHONER~1.EXE [2009-06-06 565064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^zastpa.MKYJ003^Nabídka Start^Programy^Po spuštění^ClearTemp.lnk]
C:\WINDOWS\system32\CLEART~1.EXE [2011-07-04 20992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^zastpa.MKYJ003^Nabídka Start^Programy^Po spuštění^Kopie - WeFi.lnk]
C:\PROGRA~1\WeFi\WeFi.exe [2010-11-03 1645912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^zastpa.MKYJ003^Nabídka Start^Programy^Po spuštění^Seznam Pošťák.lnk]
C:\PROGRA~1\Seznam.cz\postak.exe [2011-01-19 489584]

C:\Documents and Settings\zastpa.MKYJ003\Nabídka Start\Programy\Po spuštění
Styler.lnk - C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="APSHook.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
G:\First help for PC\SUPERAntiSpyware Free Edition\SASWINLO.DLL []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-05-16 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OneCard]
C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [2007-02-07 74240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WB]
C:\Program Files\MyColors\fastload.dll [2009-06-09 30000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 4221328]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=G:\First help for PC\SUPERAntiSpyware Free Edition\SASSEH.DLL []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=SbHpNp
scecli
ASWLNPkg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"GreyMSIAds"=1
"NoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoUserNameInStartMenu"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote"
"C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\KMSAct\Pack\Keygen\Keygen.exe"="C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\KMSAct\Pack\Keygen\Keygen.exe:*:Enabled:Keygen"
"C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\7ZipSfx.000\Pack\Keygen\Keygen.exe"="C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\7ZipSfx.000\Pack\Keygen\Keygen.exe:*:Enabled:Keygen"
"C:\Program Files\MirandaPacking\miranda32.exe"="C:\Program Files\MirandaPacking\miranda32.exe:*:Enabled:Miranda IM"
"C:\Program Files\Miranda\miranda32.exe"="C:\Program Files\Miranda\miranda32.exe:*:Enabled:Miranda IM"
"C:\Program Files\Miranda\Miranda packing2\miranda32.exe"="C:\Program Files\Miranda\Miranda packing2\miranda32.exe:*:Enabled:Miranda IM"
"C:\Program Files\Miranda\Miranda packing2\miranda322.exe"="C:\Program Files\Miranda\Miranda packing2\miranda322.exe:*:Enabled:Miranda IM"
"C:\Program Files\totalcmd\TOTALCMD.EXE"="C:\Program Files\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe"="C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"
"D:\_02_LADENI\_03_DOPLNKY\WINLIRC-0.6.5\WINLIRC.EXE"="D:\_02_LADENI\_03_DOPLNKY\WINLIRC-0.6.5\WINLIRC.EXE:*:Enabled:WINLIRC"
"C:\Program Files\Hasbro Interactive\RollerCoaster Tycoon\rct.exe"="C:\Program Files\Hasbro Interactive\RollerCoaster Tycoon\rct.exe:*:Enabled:rct"
"C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe"="C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe:*:Enabled:FreeCall"
"C:\Program Files\VoipDiscount.com\VoipDiscount\VoipDiscount.exe"="C:\Program Files\VoipDiscount.com\VoipDiscount\VoipDiscount.exe:*:Enabled:VoipDiscount"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Microsoft LifeCam\LifeCam.exe"="C:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe"
"C:\Program Files\Microsoft LifeCam\LifeEnC2.exe"="C:\Program Files\Microsoft LifeCam\LifeEnC2.exe:*:Enabled:LifeEnC2.exe"
"C:\Program Files\Microsoft LifeCam\LifeExp.exe"="C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"
"C:\Program Files\Microsoft LifeCam\LifeTray.exe"="C:\Program Files\Microsoft LifeCam\LifeTray.exe:*:Enabled:LifeTray.exe"
"C:\Program Files\Java\jre6\launch4j-tmp\Jubler.exe"="C:\Program Files\Java\jre6\launch4j-tmp\Jubler.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\dxdiag.exe"="C:\WINDOWS\system32\dxdiag.exe:*:Enabled:Microsoft DirectX Diagnostic Tool"
"C:\Program Files\Mozilla Firefox\plugin-container.exe"="C:\Program Files\Mozilla Firefox\plugin-container.exe:*:Enabled:Plugin Container for Firefox"
"C:\Program Files\Spyware Terminator\SpywareTerminator.exe"="C:\Program Files\Spyware Terminator\SpywareTerminator.exe:*:Enabled:Spyware Terminator 2012"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Spyware Terminator 2012"
"C:\Program Files\Java\jre7\bin\javaw.exe"="C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre7\bin\java.exe"="C:\Program Files\Java\jre7\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\Rar$EX00.984\chat.exe"="C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\Rar$EX00.984\chat.exe:*:Enabled:chat"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\McAfee\Common Framework\FrameworkService.exe"="C:\Program Files\McAfee\Common Framework\FrameworkService.exe:*:Enabled:McAfee Framework Service"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\system32\mstsc.exe"="C:\WINDOWS\system32\mstsc.exe:*:Enabled:Remote Desktop Connection"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Axence\NetTools\3.1\nVision.exe"="C:\Program Files\Axence\NetTools\3.1\nVision.exe:*:Enabled:nVision"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codecx.acm
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"vidc.XVID"=xvidvfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"vidc.MPG4"=MPG4c32.dll
"vidc.MP42"=MPG4c32.dll
"vidc.MP43"=MPG4c32.dll
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"msacm.l3fhg"=mp3fhg.acm
"msacm.divxa32"=divxa32.acm
"msacm.vorbis"=vorbis.acm
"VIDC.X264"=x264vfw.dll
"VIDC.DIV3"=DivXc32.dll
"VIDC.DIV4"=DivXc32f.dll
"VIDC.HFYU"=huffyuv.dll
"VIDC.VP70"=vp7vfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.YV12"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.txt - open - "C:\Program Files\Notepad++\notepad++.exe" "%1"

======List of files/folders created in the last 1 month======

2012-02-10 12:59:21 ----D---- C:\Program Files\trend micro
2012-02-10 12:59:19 ----D---- C:\rsit
2012-02-10 12:11:23 ----D---- C:\Program Files\Ultimate Process Manager
2012-02-09 16:15:13 ----D---- C:\Program Files\LogMeIn Hamachi
2012-02-07 21:07:59 ----AH---- C:\WINDOWS\system32\hamachi.sys
2012-02-07 19:44:21 ----A---- C:\WINDOWS\w32dasm8.ini
2012-02-07 14:31:11 ----A---- C:\WINDOWS\hw.ini
2012-02-06 21:06:45 ----D---- C:\Program Files\Common Files\Java
2012-02-06 21:05:58 ----A---- C:\WINDOWS\system32\npdeployJava1.dll
2012-02-06 21:05:58 ----A---- C:\WINDOWS\system32\javaws.exe
2012-02-06 21:05:58 ----A---- C:\WINDOWS\system32\javaw.exe
2012-02-06 21:05:58 ----A---- C:\WINDOWS\system32\java.exe
2012-02-06 20:23:48 ----D---- C:\Program Files\Minecraft Note Block Studio
2012-02-06 16:12:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2012-02-02 19:16:28 ----D---- C:\Program Files\SaveGameBackup
2012-02-02 10:07:58 ----D---- C:\Content
2012-01-29 21:13:00 ----D---- C:\Program Files\MuseScore
2012-01-29 18:41:54 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Stykz Help
2012-01-26 15:12:02 ----D---- C:\Program Files\Imagine
2012-01-26 15:06:46 ----D---- C:\Program Files\Common Files\Imagine
2012-01-22 17:30:43 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\TeamViewer
2012-01-22 17:30:29 ----D---- C:\Program Files\TeamViewer
2012-01-19 22:49:18 ----D---- C:\Program Files\Notepad++
2012-01-19 22:49:18 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Notepad++
2012-01-17 20:55:22 ----D---- C:\Program Files\Vlak
2012-01-11 19:36:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2012-01-11 19:36:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2012-01-11 19:35:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2012-01-11 19:32:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2012-01-11 19:32:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2012-01-11 19:32:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$

======List of files/folders modified in the last 1 month======

2012-02-10 12:59:21 ----RD---- C:\Program Files
2012-02-10 12:51:14 ----SHD---- C:\WINDOWS\Installer
2012-02-10 12:51:14 ----SHD---- C:\Config.Msi
2012-02-10 12:15:25 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Skype
2012-02-10 11:44:06 ----D---- C:\WINDOWS\system32\CatRoot2
2012-02-10 11:31:38 ----D---- C:\WINDOWS\Temp
2012-02-10 11:14:49 ----D---- C:\WINDOWS\system32
2012-02-10 11:14:49 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-02-10 11:14:25 ----HD---- C:\WINDOWS\NiwradSoft Shell Pack
2012-02-10 11:13:29 ----A---- C:\WINDOWS\win.ini
2012-02-10 10:55:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-02-10 10:46:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2012-02-10 10:15:56 ----D---- C:\WINDOWS
2012-02-09 23:04:49 ----A---- C:\WINDOWS\nastaveni.ini
2012-02-09 21:02:41 ----D---- C:\WINDOWS\$regcmp$
2012-02-09 21:02:41 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\QTTabBar
2012-02-09 21:02:40 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\DAEMON Tools Lite
2012-02-09 20:56:58 ----D---- C:\WINDOWS\Debug
2012-02-09 20:54:07 ----D---- C:\WINDOWS\Prefetch
2012-02-09 20:48:22 ----D---- C:\Program Files\CCleaner
2012-02-09 14:22:08 ----D---- C:\Program Files\Game_Maker8
2012-02-09 09:54:07 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-02-09 09:54:02 ----D---- C:\WINDOWS\system32\drivers
2012-02-09 09:53:39 ----HD---- C:\WINDOWS\inf
2012-02-09 09:53:27 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-02-07 15:06:08 ----D---- C:\Program Files\Mozilla Firefox
2012-02-06 21:06:45 ----D---- C:\Program Files\Common Files
2012-02-06 21:05:31 ----A---- C:\WINDOWS\system32\deployJava1.dll
2012-02-06 21:05:23 ----D---- C:\Program Files\Java
2012-02-06 16:12:06 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Google
2012-02-06 16:11:17 ----D---- C:\Program Files\Google
2012-02-04 20:50:03 ----D---- C:\Program Files\Miranda
2012-02-02 20:15:44 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Synthesia
2012-02-01 11:50:06 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Realore_Whiterra Roads Of Rome 2
2012-02-01 10:19:07 ----D---- C:\Program Files\Rio- Miny hry
2012-02-01 10:13:51 ----D---- C:\Program Files\Rio- Plážový závod
2012-01-30 16:55:38 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Audacity
2012-01-29 18:43:05 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Stykz
2012-01-29 15:45:22 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-01-29 15:45:18 ----D---- C:\Program Files\Windows Media Player
2012-01-29 15:44:16 ----D---- C:\Documents and Settings
2012-01-28 16:28:56 ----D---- C:\Program Files\FlatOut
2012-01-25 18:16:49 ----D---- C:\Program Files\CDBurnerXP
2012-01-19 22:17:15 ----RSD---- C:\WINDOWS\Fonts
2012-01-17 21:01:53 ----A---- C:\WINDOWS\WINCMD.INI
2012-01-13 20:24:22 ----D---- C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\.minecraft
2012-01-11 19:36:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2012-01-11 19:32:50 ----A---- C:\WINDOWS\system32\mrt.exe
2012-01-11 19:32:22 ----HD---- C:\WINDOWS\$hf_mig$
2012-01-11 17:59:17 ----D---- C:\Program Files\Spyware Terminator

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BootScreen;BootScreen; C:\WINDOWS\System32\drivers\vidstub.sys [2011-07-26 163712]
R0 hpdskflt;HP Disk Filter Driver; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2008-05-23 24624]
R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2007-03-21 304920]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2006-07-24 36528]
R0 SafeBoot;SafeBoot; C:\WINDOWS\system32\drivers\SafeBoot.sys [2007-04-22 100095]
R0 SbAlg;SbAlg; C:\WINDOWS\system32\drivers\SbAlg.sys [2006-10-09 44720]
R0 SbFsLock;SbFsLock; C:\WINDOWS\system32\drivers\SbFsLock.sys [2007-03-29 13696]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-09-24 443448]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-11-28 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-11-28 34392]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-11-28 435032]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-11-28 314456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-11-28 52952]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 PersonalSecureDrive;PersonalSecureDrive; C:\WINDOWS\System32\drivers\psd.sys [2007-01-23 39080]
R1 RsvLock;RsvLock; C:\WINDOWS\system32\drivers\RsvLock.sys [2007-04-22 5808]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-11-28 20568]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-11-28 111320]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752]
R2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-11-12 5504]
R2 Vcs;Vcs support; \??\C:\WINDOWS\system32\Drivers\Vcs.sys []
R3 Accelerometer;HP Accelerometer; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2008-05-23 28592]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-10-01 281600]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-07-13 94976]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2008-11-21 1204128]
R3 ATSWPDRV;(****DEBUG****) AuthenTec TruePrint USB Driver (SwipeSensor); C:\WINDOWS\system32\DRIVERS\ATSwpDrv.sys [2007-04-10 140808]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2007-02-14 530861]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2007-02-14 30459]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2007-02-14 868298]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2007-02-14 67960]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HBtnKey;HBtnKey; C:\WINDOWS\system32\DRIVERS\cpqbttn.sys [2008-04-28 9344]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\WINDOWS\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-05-16 5707744]
R3 IFXTPM;IFXTPM; C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS [2007-01-23 36608]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; C:\WINDOWS\System32\Drivers\nx6000.sys [2010-12-13 30576]
R3 NETwLx32; Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETwLx32.sys [2010-10-07 6609920]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136]
S1 SASDIFSV;SASDIFSV; \??\G:\First help for PC\SUPERAntiSpyware Free Edition\SASDIFSV.SYS []
S1 SASKUTIL;SASKUTIL; \??\G:\First help for PC\SUPERAntiSpyware Free Edition\SASKUTIL.SYS []
S3 a6fxfbi3;a6fxfbi3; C:\WINDOWS\system32\drivers\a6fxfbi3.sys []
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-14 38912]
S3 b57w2k;Broadcom NetLink (TM) Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2007-02-27 160256]
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2007-02-14 149123]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 cpudrv;cpudrv; \??\C:\Program Files\SystemRequirementsLab\cpudrv.sys []
S3 HP24X;HP PC Card Smart Card Reader; C:\WINDOWS\system32\DRIVERS\HP24X.sys [2006-10-19 33024]
S3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2008-04-13 161020]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 NETw4x32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [2007-03-01 2203520]
S3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-11-17 3636864]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 SS_ACdrv;SeeStorm; C:\WINDOWS\system32\DRIVERS\ss_acdrv.sys []
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 USB28xxBGA;USB 2863 Device; C:\WINDOWS\system32\DRIVERS\emBDA.sys [2009-12-01 579712]
S3 USB28xxOEM;USB 28xx OEM Filter; C:\WINDOWS\system32\DRIVERS\emOEM.sys [2009-12-01 543744]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2011-02-17 11520]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2008-08-26 14336]
R2 ASBroker;Logon Session Broker; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 ASChannel;Local Communication Channel; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Avast\AvastSvc.exe [2011-11-28 44768]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-05-12 264800]
R2 ezGOSvc;Easybits GO Services for Windows; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-02-07 1373576]
R2 HpFkCryptService;Drive Encryption Service; C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [2007-04-22 221184]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [2007-12-05 144688]
R2 IFXSpMgtSrv;Security Platform Management Service; C:\WINDOWS\system32\ifxspmgt.exe [2007-02-15 677408]
R2 IFXTCS;Trusted Platform Core Service; C:\WINDOWS\system32\ifxtcs.exe [2007-01-23 849440]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-04-19 75304]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2010-12-13 135536]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-07-13 71096]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2007-05-08 540448]
R2 PersonalSecureDriveService;Personal Secure Drive service; C:\WINDOWS\system32\IfxPsdSv.exe [2007-02-15 140832]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files\Spyware Terminator\st_rsser.exe [2011-12-23 482992]
R2 SWIHPWMI;SWIHPWMI; C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe [2006-12-04 292384]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S2 !SASCORE;SAS Core Service; G:\First help for PC\SUPERAntiSpyware Free Edition\SASCORE.EXE []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-21 136176]
S2 ttscp;Text-to-Speech system Epos; C:\Program Files\Epos_2.4\bin\epos.exe []
S2 WTService;WTService; C:\WINDOWS\system32\atwtusb.exe [2007-05-29 360096]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 fsssvc;Služba Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-04-28 704872]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-21 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2006-11-06 887544]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-11-01 73728]
S3 WefiEngSvc;WeFi Engine Service; C:\Program Files\WeFi\WefiEngSvc.exe [2010-11-03 120152]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 avast! Firewall;avast! Firewall; C:\Program Files\Avast\afwServ.exe []
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Naposledy upravil(a) vyosek dne 10 úno 2012 13:11, celkem upraveno 1 x.
Důvod: log odstranen z code
------------------------------------------------------------------------------------------------------------------------
Adam Dvořák

Nezkušený začátečník v oblastí virů, ale středně pokročilý programátor her v GameMakerovi a psaní HTML
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#3 Příspěvek od vyosek »

Zdravim a pekny den preji :)

:arrow: Nedavejte logy do code, spatne se to lusti a boli z toho oci

:arrow: Problem reste na jednom foru, jinak se muzem s kolegy tlouct a mazat si stopy

:arrow: Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller ... r_TEST.exe
  • :cap: Jedna se o testovaci verzi prelozeneho RK - proto je v nazvu ten TEST :) v navodu nize jsou i anglicke nazvy prikazu kdyby CZ nefungovala
  • Ukoncete vsechny programy
  • Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pockejte na dokonceni PreScanu
  • Zvolte moznost Prohledat (scan)
  • Po dokonceni skenu kliknete na Zpráva (Report)- otevre se log, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
AdamDvorak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 10 úno 2012 12:28
Kontaktovat uživatele:
Kontaktovat uživatele AdamDvorak

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#4 Příspěvek od AdamDvorak »

RogueKiller V7.0.4 [02/08/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operační systém: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v: Normální režim
Uživatel: zastpa [Práva Správce]
Mode: Kontrola -- Date : 02/10/2012 13:21:15

¤¤¤ Škodlivé procesy: 2 ¤¤¤
[SUSP PATH] WFHook.dll -- C:\Documents and Settings\zastpa.MKYJ003\Plocha\Programy\Flip3D\WFHook.dll -> UNLOADED
[SUSP PATH] WinFlip.exe -- C:\Documents and Settings\zastpa.MKYJ003\Plocha\Programy\Flip3D\WinFlip.exe -> KILLED [TermProc]

¤¤¤ Záznamy Registrů: 7 ¤¤¤
[SUSP PATH] HKCU\[...]\Run : Windows Update (C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\WindowsUpdate.exe) -> FOUND
[SUSP PATH] HKUS\S-1-5-21-796845957-776561741-725345543-1005[...]\Run : Windows Update (C:\Documents and Settings\zastpa.MKYJ003\Local Settings\Temp\WindowsUpdate.exe) -> FOUND
[SUSP PATH] Office_2010_Activation_and_Conversion_Kit_1.6_by_Raz0r.job : C:\Documents and Settings\zastpa.MKYJ003\Plocha\Office_2010_Activation_and_Conversion_Kit_1.6_by_Raz0r.exe -> FOUND
[SUSP PATH] Styler.lnk : C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe -> FOUND
[SUSP PATH] Styler.lnk : C:\Documents and Settings\zastpa.MKYJ003\Data aplikací\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe -> FOUND
[SCRSV] HKCU\[...]\Desktop : SCRNSAVE.EXE (C:\WINDOWS\avastSS.scr) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač: [NENAHRÁNO] ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: TOSHIBA MK2546GSX +++++
--- User ---
[MBR] fe1b108ece80fc72436a7590d57dd4ff
[BSP] b90cd450f3360b3c25670a9abc584584 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238464 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1].txt >>
RKreport[1].txt
------------------------------------------------------------------------------------------------------------------------
Adam Dvořák

Nezkušený začátečník v oblastí virů, ale středně pokročilý programátor her v GameMakerovi a psaní HTML
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#5 Příspěvek od vyosek »

:arrow: Co udelame s temi nelegalnimi produkty od Microsoftu? Samotne windows mate legalni = zakoupena licence :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
AdamDvorak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 10 úno 2012 12:28
Kontaktovat uživatele:
Kontaktovat uživatele AdamDvorak

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#6 Příspěvek od AdamDvorak »

Nevím, čím to je, ale práci viru jsem dočasně pozastavil :D
Normálně jsem otevřel UPM, tak si listoval procesy a našel jeden označený "Systémový soubor"
No a já ho omylem vypl a teď můžu zapnout správce úloh, pomocí Win + R zapínat spustit a hláška se už nezobrazuje! :)
Jen mám strach, že až zase zapnu počítač, tak se spustí. :o
------------------------------------------------------------------------------------------------------------------------
Adam Dvořák

Nezkušený začátečník v oblastí virů, ale středně pokročilý programátor her v GameMakerovi a psaní HTML
Nahoru
AdamDvorak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 10 úno 2012 12:28
Kontaktovat uživatele:
Kontaktovat uživatele AdamDvorak

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#7 Příspěvek od AdamDvorak »

vyosek píše::arrow: Co udelame s temi nelegalnimi produkty od Microsoftu? Samotne windows mate legalni = zakoupena licence :???:
Jakými nelegálními produkty?
------------------------------------------------------------------------------------------------------------------------
Adam Dvořák

Nezkušený začátečník v oblastí virů, ale středně pokročilý programátor her v GameMakerovi a psaní HTML
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#8 Příspěvek od vyosek »

Co treba Microsoft Office :???: A co ty windows :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
AdamDvorak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 10 úno 2012 12:28
Kontaktovat uživatele:
Kontaktovat uživatele AdamDvorak

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#9 Příspěvek od AdamDvorak »

Windows jsou legální a office jsem už dostal. Mám notebook jako dárek.
------------------------------------------------------------------------------------------------------------------------
Adam Dvořák

Nezkušený začátečník v oblastí virů, ale středně pokročilý programátor her v GameMakerovi a psaní HTML
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#10 Příspěvek od vyosek »

:arrow: Stahnete prosim tento novy RK http://www.sur-la-toile.com/RogueKiller ... r_TEST.exe a ulozte na plochu (nazev je stejny, ale byl aktualizovan)

:arrow: Spustte RogueKiller
  • Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pockejte na dokonceni PreScanu
  • Zvolte moznost Prohledat (Scan) a pote Smazat (Deletion) a nasledne Zprava (Report) - otevre se log, ten sem vlozte
  • Pak kliknete na Oprava Host(HostFix) a Zprava (Report) - otevre se log, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
AdamDvorak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 10 úno 2012 12:28
Kontaktovat uživatele:
Kontaktovat uživatele AdamDvorak

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#11 Příspěvek od AdamDvorak »

RogueKiller V7.0.4 [02/08/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operační systém: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v: Normální režim
Uživatel: zastpa [Práva Správce]
Mode: Odebrat -- Date : 02/10/2012 17:53:08

¤¤¤ Škodlivé procesy: 0 ¤¤¤

¤¤¤ Záznamy Registrů: 2 ¤¤¤
[SCRSV] HKCU\[...]\Desktop : SCRNSAVE.EXE (C:\WINDOWS\avastSS.scr) -> REPLACED (c:\windows\system32\logon.scr)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač: [NAHRÁNO] ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: TOSHIBA MK2546GSX +++++
--- User ---
[MBR] fe1b108ece80fc72436a7590d57dd4ff
[BSP] b90cd450f3360b3c25670a9abc584584 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238464 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt
------------------------------------------------------------------------------------------------------------------------
Adam Dvořák

Nezkušený začátečník v oblastí virů, ale středně pokročilý programátor her v GameMakerovi a psaní HTML
Nahoru
AdamDvorak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 10 úno 2012 12:28
Kontaktovat uživatele:
Kontaktovat uživatele AdamDvorak

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#12 Příspěvek od AdamDvorak »

RogueKiller V7.0.4 [02/08/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operační systém: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v: Normální režim
Uživatel: zastpa [Práva Správce]
Mode: Oprava HOSTS -- Date : 02/10/2012 17:54:35

¤¤¤ Škodlivé procesy: 0 ¤¤¤

¤¤¤ Ovladač: [NAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
127.0.0.1 localhost


¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost

Dokončeno : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt
------------------------------------------------------------------------------------------------------------------------
Adam Dvořák

Nezkušený začátečník v oblastí virů, ale středně pokročilý programátor her v GameMakerovi a psaní HTML
Nahoru
AdamDvorak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 10 úno 2012 12:28
Kontaktovat uživatele:
Kontaktovat uživatele AdamDvorak

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#13 Příspěvek od AdamDvorak »

vyosek píše::arrow: Stahnete prosim tento novy RK http://www.sur-la-toile.com/RogueKiller ... r_TEST.exe a ulozte na plochu (nazev je stejny, ale byl aktualizovan)

:arrow: Spustte RogueKiller
  • Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pockejte na dokonceni PreScanu
  • Zvolte moznost Prohledat (Scan) a pote Smazat (Deletion) a nasledne Zprava (Report) - otevre se log, ten sem vlozte
  • Pak kliknete na Oprava Host(HostFix) a Zprava (Report) - otevre se log, ten sem vlozte
Co mi ten program vlastně udělá s počítačem????
------------------------------------------------------------------------------------------------------------------------
Adam Dvořák

Nezkušený začátečník v oblastí virů, ale středně pokročilý programátor her v GameMakerovi a psaní HTML
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#14 Příspěvek od vyosek »

:arrow: RogueKiller je jedna z utilit, kterou pouzivame na odvirovavani a nasem forum je jejich zakladnou pro CZ podporu - autorem je Tigzy - utilita hleda skodlive soubory\zapisy v registru a pote je umi i mazat

:arrow: Jdeme dal, jeste tam neco bude

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
AdamDvorak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 10 úno 2012 12:28
Kontaktovat uživatele:
Kontaktovat uživatele AdamDvorak

Re: Nefunguje Správce úloh, chybí nabídka spustit a hláška

#15 Příspěvek od AdamDvorak »

ComboFix 12-02-10.02 - zastpa 10.02.2012 18:39:54.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2039.409 [GMT 1:00]
Spuštěný z: c:\program files\Ultimate Process Manager\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: avast! Internet Security *Enabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\autorun.inf
c:\documents and settings\zastpa.MKYJ003\SendTo\Přehledně zobrazit.exe
c:\documents and settings\zastpa.MKYJ003\update.exe
c:\documents and settings\zastpa.MKYJ003\Vypnout.exe.old
c:\documents and settings\zastpa.MKYJ003\WINDOWS
c:\program files\Downloaded Installers
c:\program files\Downloaded Installers\{937417dc-c013-401f-895c-ced28eb175c4}\setup.msi
c:\windows\system32\btw_ci.dll.anofp
c:\windows\system32\GroupPolicy\User\Scripts\scripts.ini
c:\windows\w32dasm8.ini
c:\windows\WINDOWS
c:\windows\WINDOWS\VC8\mesa\.gitignore
c:\windows\WINDOWS\VC8\mesa\gdi\gdi.vcproj
c:\windows\WINDOWS\VC8\mesa\glsl_apps_compile\glsl_apps_compile.vcproj
c:\windows\WINDOWS\VC8\mesa\glu\glu.vcproj
c:\windows\WINDOWS\VC8\mesa\mesa.sln
c:\windows\WINDOWS\VC8\mesa\mesa\mesa.vcproj
c:\windows\WINDOWS\VC8\mesa\osmesa\osmesa.vcproj
c:\windows\WINDOWS\VC8\progs\.gitignore
c:\windows\WINDOWS\VC8\progs\demos\gears.vcproj
c:\windows\WINDOWS\VC8\progs\glut\glut.vcproj
c:\windows\WINDOWS\VC8\progs\progs.sln
.
Nakažená kopie c:\windows\system32\midimap.dll byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\VistaMizer\old\midimap.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_VCS
-------\Service_Vcs
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-01-10 do 2012-02-10 )))))))))))))))))))))))))))))))
.
.
2012-02-10 11:59 . 2012-02-10 11:59 -------- d-----w- c:\program files\trend micro
2012-02-10 11:59 . 2012-02-10 11:59 -------- d-----w- C:\rsit
2012-02-10 11:11 . 2012-02-10 17:31 -------- d-----w- c:\program files\Ultimate Process Manager
2012-02-09 15:15 . 2012-02-10 09:46 -------- d-----w- c:\program files\LogMeIn Hamachi
2012-02-09 13:22 . 2012-02-09 13:22 -------- d-----w- c:\documents and settings\zastpa.MKYJ003\Local Settings\Data aplikací\GayMaker 8.1
2012-02-09 13:07 . 2012-02-09 13:18 -------- d-----w- c:\documents and settings\zastpa.MKYJ003\Local Settings\Data aplikací\MediaGet2
2012-02-09 08:43 . 2012-02-09 08:43 -------- d-----w- c:\windows\system32\config\systemprofile\Plocha
2012-02-07 20:07 . 2009-03-18 15:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
2012-02-07 17:35 . 2012-02-07 17:35 -------- d-----w- c:\documents and settings\zastpa.MKYJ003\Local Settings\Data aplikací\YoYo_Games_Ltd
2012-02-07 17:35 . 2012-02-07 17:35 -------- d-----w- c:\documents and settings\zastpa.MKYJ003\Local Settings\Data aplikací\GameMaker8.1
2012-02-06 20:06 . 2012-02-06 20:06 -------- d-----w- c:\program files\Common Files\Java
2012-02-06 20:05 . 2012-02-06 20:05 637848 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-02-06 19:23 . 2012-02-06 19:23 -------- d-----w- c:\program files\Minecraft Note Block Studio
2012-02-02 18:16 . 2012-02-02 18:17 -------- d-----w- c:\program files\SaveGameBackup
2012-02-02 09:07 . 2012-02-02 09:08 -------- d-----w- C:\Content
2012-01-29 20:13 . 2012-01-29 20:13 -------- d-----w- c:\program files\MuseScore
2012-01-29 20:12 . 2012-01-29 20:12 -------- d-----w- c:\documents and settings\zastpa.MKYJ003\Local Settings\Data aplikací\MusE
2012-01-29 17:41 . 2012-01-29 17:42 -------- d-----w- c:\documents and settings\zastpa.MKYJ003\Data aplikací\Stykz Help
2012-01-26 14:12 . 2012-01-26 14:12 -------- d-----w- c:\program files\Imagine
2012-01-26 14:06 . 2012-01-26 14:09 139776 ----a-w- c:\program files\Mozilla Firefox\plugins\npImagine.dll
2012-01-26 14:06 . 2006-07-29 12:26 2506240 ----a-w- c:\windows\system32\exeImagine.IMD
2012-01-26 14:06 . 2012-01-26 14:12 -------- d-----w- c:\program files\Common Files\Imagine
2012-01-26 14:06 . 2006-07-29 12:34 399872 ----a-w- c:\windows\system32\nxImagine.ocx
2012-01-22 16:30 . 2012-01-22 16:56 -------- d-----w- c:\documents and settings\zastpa.MKYJ003\Data aplikací\TeamViewer
2012-01-22 16:30 . 2012-01-22 16:30 -------- d-----w- c:\program files\TeamViewer
2012-01-19 21:49 . 2012-01-19 21:51 -------- d-----w- c:\documents and settings\zastpa.MKYJ003\Data aplikací\Notepad++
2012-01-19 21:49 . 2012-01-19 21:49 -------- d-----w- c:\program files\Notepad++
2012-01-17 19:55 . 2012-01-17 19:55 -------- d-----w- c:\program files\Vlak
2012-01-17 10:45 . 2012-01-17 10:45 4376224 ----a-w- c:\program files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2012-01-14 13:50 . 2012-01-14 13:50 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\Adobe
2012-01-11 19:08 . 2012-02-10 17:53 -------- d-----w- c:\documents and settings\zastpa.MKYJ003\Local Settings\Data aplikací\LogMeIn Hamachi
2012-01-11 19:08 . 2012-02-10 17:56 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\LogMeIn Hamachi
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-06 20:05 . 2011-10-21 15:00 141312 ----a-w- c:\windows\system32\javacpl.cpl
2012-02-06 20:05 . 2010-11-05 16:44 567184 ----a-w- c:\windows\system32\deployJava1.dll
2012-01-27 07:41 . 2011-05-18 14:00 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-01-06 20:06 . 2012-01-06 20:06 53248 ----a-w- C:\zlib.dll
2012-01-06 20:06 . 2012-01-06 20:06 28672 ----a-w- C:\uncompress.exe
2012-01-04 19:40 . 2012-01-04 19:40 547840 ----a-w- c:\documents and settings\zastpa.MKYJ003\Data aplikací\Microsoft\Internet Explorer\Quick Launch\wise-shutdown.exe
2011-12-22 15:56 . 2011-12-22 15:56 451072 ----a-w- c:\windows\Radeon Omega Drivers v3.8.252 Uninstall.exe
2011-12-07 19:42 . 2011-12-06 20:53 232512 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-11-28 18:01 . 2011-02-05 20:36 41184 ----a-w- c:\windows\avastSS.scr
2011-11-28 18:01 . 2011-02-05 20:36 199816 ----a-w- c:\windows\system32\aswBoot.exe
2011-11-28 17:53 . 2011-04-10 11:58 435032 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-11-28 17:53 . 2011-02-05 20:36 314456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-11-28 17:52 . 2011-02-05 20:36 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-11-28 17:52 . 2011-02-05 20:36 52952 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-11-28 17:52 . 2011-02-05 20:36 111320 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-11-28 17:51 . 2011-02-05 20:36 105176 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-11-28 17:51 . 2011-02-05 20:36 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-11-28 17:48 . 2011-02-05 20:36 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-11-25 21:57 . 2006-03-02 12:00 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-11-23 14:40 . 2006-03-02 12:00 1859584 ----a-w- c:\windows\system32\win32k.sys
2011-11-20 06:12 . 2006-03-02 12:00 84992 ----a-w- c:\windows\system32\packager.exe
2011-11-16 14:21 . 2006-03-02 12:00 354816 ----a-w- c:\windows\system32\winhttp.dll
2011-11-16 14:21 . 2006-03-02 12:00 152064 ----a-w- c:\windows\system32\schannel.dll
2009-06-19 11:12 . 2009-06-19 11:12 1828176 ----a-w- c:\program files\Common Files\Skype4COM.dll
2011-12-24 08:24 . 2011-04-04 16:01 121816 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2011-02-08 19:00 667136 --sha-w- c:\windows\NiwradSoft Shell Pack\Backup\iexplore.exe
2009-02-04 18:06 64512 --sha-w- c:\windows\NiwradSoft Shell Pack\Backup\wmplayer.exe
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[7] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[7] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys
[7] 2006-03-02 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0009\DriverFiles\i386\atapi.sys
[7] 2004-08-03 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
.
[7] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[7] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
[7] 2006-03-02 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys
.
[7] 2006-03-02 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[7] 2006-03-02 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys
.
[7] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[7] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
[7] 2006-03-02 . 6F877BF8DC01A550CD666F3BEDB2213C . 24576 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0018\DriverFiles\i386\kbdclass.sys
[7] 2004-08-17 . 6F877BF8DC01A550CD666F3BEDB2213C . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys
.
[7] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[7] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
[7] 2006-03-02 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB912436$\ndis.sys
[-] 2006-01-10 . AA898F84D2B59129FB92E143A2C73434 . 182528 . . [5.1.2600.2824] . . c:\windows\$NtServicePackUninstall$\ndis.sys
.
[7] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[7] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
[7] 2006-03-02 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ntfs.sys
.
[7] 2006-03-02 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[7] 2006-03-02 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys
.
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[7] 2006-03-02 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
.
[7] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[7] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[7] 2006-03-02 . F219E27E88107A50544153898DD8178E . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll
.
[7] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[7] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[7] 2006-03-02 . 82A362FE1D4980B71B588D9C10748511 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe
.
[7] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[7] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[7] 2006-03-02 . AF342D2781225A8769686E0D47E3123E . 198144 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netman.dll
.
[-] 2011-02-08 19:01 . 3EF79D1F5B06B29B3C317DFFB8BE0F8F . 1405440 . . [2001.12.4414.700] . . c:\windows\NiwradSoft Shell Pack\Backup\comres.dll
[-] 2011-02-08 19:01 . 8F1807F7766FF1F7895499E9A67E1637 . 1533440 . . [2001.12.4414.700] . . c:\windows\ServicePackFiles\i386\comres.dll
[-] 2011-02-08 19:01 . 8F1807F7766FF1F7895499E9A67E1637 . 1533440 . . [2001.12.4414.700] . . c:\windows\system32\comres.dll
[-] 2011-02-08 19:01 . A5DED85FC02433A47A7FB8B07725C4B3 . 822272 . . [2001.12.4414.700] . . c:\windows\VistaMizer\old\comres.dll
[7] 2006-03-02 12:00 . B44F68274AB7B8A54E9AD74AFF0EFAAC . 806912 . . [2001.12.4414.258] . . c:\windows\$NtServicePackUninstall$\comres.dll
.
[7] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[7] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[7] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
[7] 2006-03-02 . E774A26610EC92674273486612C11CFC . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll
.
[7] 2009-02-09 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[7] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[7] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[7] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\rpcss.dll
[7] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[7] 2006-03-02 . C72C15EE57E248C66E57C76CAB086CF2 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
.
[7] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[7] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[7] 2009-02-09 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[7] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe
[7] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[7] 2006-03-02 . 6E401E61F952FBBF708AFBECEFAFAE81 . 108544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\services.exe
.
[7] 2010-08-17 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024] . . c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
[7] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\spoolsv.exe
[7] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\dllcache\spoolsv.exe
[7] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB2347290$\spoolsv.exe
[7] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
[7] 2006-03-02 . 21B6FAA88044A41640E03EBB68BE93E8 . 57856 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe
.
[-] 2008-04-14 . 471341D353962A35DA3C6324D59D09C4 . 547328 . . [5.1.2600.5512] . . c:\windows\NiwradSoft Shell Pack\Backup\winlogon.exe
[-] 2008-04-14 . 471341D353962A35DA3C6324D59D09C4 . 547328 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . 471341D353962A35DA3C6324D59D09C4 . 547328 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[7] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\VistaMizer\old\winlogon.exe
[7] 2006-03-02 . 221C29AE1B4CC61D11D8B27DE78B2307 . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe
.
[7] 2009-08-06 . 62BB79160F86CD962F312C68C6239BFD . 53472 . . [7.4.7600.226] . . c:\windows\NiwradSoft Shell Pack\Backup\wuauclt.exe
[7] 2009-08-06 . 62BB79160F86CD962F312C68C6239BFD . 53472 . . [7.4.7600.226] . . c:\windows\system32\wuauclt.exe
[7] 2009-08-06 . 62BB79160F86CD962F312C68C6239BFD . 53472 . . [7.4.7600.226] . . c:\windows\system32\dllcache\wuauclt.exe
[7] 2009-08-06 . 62BB79160F86CD962F312C68C6239BFD . 53472 . . [7.4.7600.226] . . c:\windows\VistaMizer\old\wuauclt.exe
[7] 2008-04-14 . DF7917138B80C79D15B3E8520D565311 . 111104 . . [5.4.3790.5512] . . c:\windows\ServicePackFiles\i386\wuauclt.exe
[7] 2006-03-02 . E9F9CD3C7F2E56505A0AC166580120E3 . 111104 . . [5.4.3790.2180] . . c:\windows\$NtServicePackUninstall$\wuauclt.exe
.
[7] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ipsec.sys
[7] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys
[7] 2006-03-02 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ipsec.sys
.
[-] 2010-08-23 . 58DB048E9B62543B70FC6487BAEC7717 . 724992 . . [5.82] . . c:\windows\NiwradSoft Shell Pack\Backup\comctl32.dll
[-] 2010-08-23 . 5CE819DCD046DE414D697CD33B1A57A1 . 694784 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2010-08-23 . 5CE819DCD046DE414D697CD33B1A57A1 . 694784 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2010-08-23 . 5CE819DCD046DE414D697CD33B1A57A1 . 694784 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll
[7] 2010-08-23 . E145ADD7DAEF759C4F5FB80A180A9C30 . 617472 . . [5.82] . . c:\windows\VistaMizer\old\comctl32.dll
[7] 2010-08-23 . 8A72A30FDC803DC06755D3B36D966F31 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
[7] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\$NtUninstallKB2296011$\comctl32.dll
[7] 2008-04-14 . D7B7AE36A2EBA312AC4B53862019B3F5 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[7] 2006-03-02 . 876C658C44F2BF4AF050E5534A9F066F . 611328 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll
[7] 2006-03-02 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
[7] 2006-03-02 . F76B3003366A205E05AFC0D034C7D3E9 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
.
[7] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[7] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[7] 2006-03-02 . 70D2A1756F4B2067658A186C963FCABD . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll
.
[7] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[7] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[7] 2008-07-07 20:25 . BE68EA4457E2E5717231CF91BE5448E0 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[7] 2008-04-14 07:51 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . c:\windows\$NtUninstallKB950974$\es.dll
[7] 2008-04-14 07:51 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[7] 2006-03-02 12:00 . 972378B907070F64932A87C90A035487 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtServicePackUninstall$\es.dll
.
[7] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[7] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[7] 2006-03-02 . 2413635113361E54B62F0C40E4E4DAE6 . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll
.
[7] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[7] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[7] 2009-03-21 . 0D8F61460F84139BBE5E391D8DE18D9A . 990208 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[7] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB959426$\kernel32.dll
[7] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[7] 2006-03-02 . 98DA079F61265BC26D4587E280B79F30 . 982016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
.
[7] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[7] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[7] 2006-03-02 . EE1F842DB2AE412136643B0814D770A6 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll
.
[7] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[7] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[7] 2006-03-02 . BFE8DC7AAE7CB1C86243D77B340DC304 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll
.
[7] 2011-11-04 . 824B3D28F3D10B4F18A5F842916BFDA7 . 5978112 . . [8.00.6001.19170] . . c:\windows\NiwradSoft Shell Pack\Backup\mshtml.dll
[-] 2011-11-04 . 491E21FEAF56FE3C167E7681B7F07D22 . 6139392 . . [8.00.6001.19170] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2011-11-04 . 491E21FEAF56FE3C167E7681B7F07D22 . 6139392 . . [8.00.6001.19170] . . c:\windows\system32\mshtml.dll
[-] 2011-11-04 . 491E21FEAF56FE3C167E7681B7F07D22 . 6139392 . . [8.00.6001.19170] . . c:\windows\system32\dllcache\mshtml.dll
[7] 2011-11-04 . 25E90AFB26D2B7CB5A9C06F987E4B2C1 . 5978624 . . [8.00.6001.23266] . . c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll
[7] 2011-10-03 . B318A4E66111332CA35A90B7F7585891 . 5971456 . . [8.00.6001.19154] . . c:\windows\ie8updates\KB2618444-IE8\mshtml.dll
[7] 2011-10-03 . E5F6F7F7531A2A8297A7F5739E30865F . 5972992 . . [8.00.6001.23250] . . c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll
[-] 2011-07-25 . 683758FC8B479DE0937D277F6568FADE . 6131200 . . [8.00.6001.19120] . . c:\windows\ie8updates\KB2586448-IE8\mshtml.dll
[7] 2011-07-25 . 00533384F69D30E334BD7FD0260FC95C . 5971456 . . [8.00.6001.23216] . . c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll
[7] 2011-05-30 . DCF153201CF53F9A721AFEEF43C6947D . 5964800 . . [8.00.6001.19088] . . c:\windows\ie8updates\KB2559049-IE8\mshtml.dll
[7] 2011-05-30 . 878F729E235273AAF7EE57AD15679F15 . 5967360 . . [8.00.6001.23181] . . c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll
[7] 2011-02-22 . A5DF4911593299C09D92BFA3E7096F68 . 5964800 . . [8.00.6001.23141] . . c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll
[7] 2011-02-22 . 3916F0BAB9666CC2F6962F69A3DB3D6B . 5962240 . . [8.00.6001.19046] . . c:\windows\ie8updates\KB2530548-IE8\mshtml.dll
[-] 2011-02-08 . D8751190ED2208F8A5F8D8BC3E56D607 . 6049792 . . [8.00.6001.18999] . . c:\windows\ie8updates\KB2482017-IE8\mshtml.dll
[7] 2010-12-20 . F41F8D25A9EC6BC64B4F081DD4AC3C7F . 5961216 . . [8.00.6001.19019] . . c:\windows\ie8updates\KB2497640-IE8\mshtml.dll
[7] 2010-12-20 . 0EB055A6E68E1855AB0AA90CDBEDBA6C . 5962240 . . [8.00.6001.23111] . . c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll
[7] 2010-11-06 . 8C0B4A6F4E9C323937F44BC252747FD1 . 5960704 . . [8.00.6001.23091] . . c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll
[7] 2010-09-10 . BFB18929123F545F3EAA845F912AC4BD . 5957120 . . [8.00.6001.18975] . . c:\windows\ie8updates\KB2416400-IE8\mshtml.dll
[7] 2010-09-10 . BFB18929123F545F3EAA845F912AC4BD . 5957120 . . [8.00.6001.18975] . . c:\windows\SoftwareDistribution\Download\305178da04015cd3a8ad4645941f7b2e\SP3GDR\mshtml.dll
[7] 2010-09-10 . 84BF75E7A417C4F176AEC0B4E46C104E . 5958656 . . [8.00.6001.23067] . . c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll
[7] 2010-09-10 . 84BF75E7A417C4F176AEC0B4E46C104E . 5958656 . . [8.00.6001.23067] . . c:\windows\SoftwareDistribution\Download\305178da04015cd3a8ad4645941f7b2e\SP3QFE\mshtml.dll
[7] 2010-09-09 . 4A205A6973672102625707EE32AA41E5 . 3095552 . . [6.00.2900.6036] . . c:\windows\$hf_mig$\KB2360131\SP3QFE\mshtml.dll
[7] 2010-05-06 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928] . . c:\windows\ie8updates\KB2360131-IE8\mshtml.dll
[7] 2010-05-06 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3GDR\mshtml.dll
[7] 2010-05-06 . 3F88F981AA7BC20744E0D2C699F500EF . 5953024 . . [8.00.6001.23019] . . c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll
[7] 2010-05-06 . 3F88F981AA7BC20744E0D2C699F500EF . 5953024 . . [8.00.6001.23019] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3QFE\mshtml.dll
[7] 2009-03-08 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB982381-IE8\mshtml.dll
[7] 2008-04-14 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512] . . c:\windows\ie8\mshtml.dll
[-] 2006-03-02 . 43E8D8091527AA91EB0B2A553447B3D8 . 3070464 . . [6.00.2900.2853] . . c:\windows\$NtServicePackUninstall$\mshtml.dll
[-] 2006-02-21 . CDD766C610E7DE86CCE91CD339C79BCF . 3073024 . . [6.00.2900.2853] . . c:\windows\$hf_mig$\KB911164\SP2QFE\mshtml.dll
.
[7] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[7] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[7] 2008-04-14 . EC8D5E09C6CA5F52858A5EB71F308FDF . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[7] 2006-03-02 . 91CC3E4CCDBBF8E224182C76C87E454F . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll
[7] 2006-03-02 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
[7] 2006-03-02 . AB47015B67531572BE46C0C08222C84C . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
.
[7] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\$NtUninstallKB2509553$\mswsock.dll
[7] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
[7] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[7] 2008-06-20 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[7] 2008-06-20 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[7] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll
[7] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[7] 2006-03-02 . 64C078BD4EFD441C3F159EDC5EA4420A . 247296 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
.
[7] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[7] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[7] 2006-03-02 . 2591CADAEF7D2242039255028E577688 . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll
.
[7] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[7] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[7] 2006-03-02 . 134B95A1D8FAFD74A68E4B2116DEFA7D . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll
.
[7] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[7] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[7] 2006-03-02 . 07119058D451CB7EA4317BCFDA8599A6 . 184832 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll
.
[7] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[7] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[7] 2006-03-02 . 6CC2D21488333133AE0C9F44F6051CB7 . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll
.
[7] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[7] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[7] 2006-03-02 . DFBA2915B0BF58ABB288CD4C9318CB3F . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe
.
[7] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[7] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[7] 2006-03-02 . 37162D29CD61519E6F5EA0DE99786FF6 . 246272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll
.
[-] 2008-04-14 . 581480DE9C65D6BD0552E35BF17379B2 . 587776 . . [5.1.2600.5512] . . c:\windows\NiwradSoft Shell Pack\Backup\user32.dll
[-] 2008-04-14 . CCB32D10C69A89822E9134C0C4894BE1 . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . CCB32D10C69A89822E9134C0C4894BE1 . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
[7] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\VistaMizer\old\user32.dll
[7] 2006-03-02 . 1B4CCC59980DA34E75F20E42B283B027 . 577024 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\user32.dll
.
[7] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[7] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[7] 2006-03-02 . 836F7960362FF95C5D49E40B891F2CFC . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe
.
[7] 2011-11-04 . 906D5D1E05B92716362A7B309349C2C7 . 916992 . . [8.00.6001.19165] . . c:\windows\NiwradSoft Shell Pack\Backup\wininet.dll
[-] 2011-11-04 . C809DB026053E03B2A20AD331D3BB67E . 983552 . . [8.00.6001.19165] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2011-11-04 . C809DB026053E03B2A20AD331D3BB67E . 983552 . . [8.00.6001.19165] . . c:\windows\system32\wininet.dll
[-] 2011-11-04 . C809DB026053E03B2A20AD331D3BB67E . 983552 . . [8.00.6001.19165] . . c:\windows\system32\dllcache\wininet.dll
[7] 2011-11-04 . 26DA5DB5586F328F2808D0776A3FC6B2 . 919552 . . [8.00.6001.23261] . . c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll
[7] 2011-08-22 . 5A210F47410B4829B1EF162DFF535F66 . 916480 . . [8.00.6001.19131] . . c:\windows\ie8updates\KB2618444-IE8\wininet.dll
[7] 2011-08-22 . EACC4B6D2AE03590C82808992A4F47D7 . 919552 . . [8.00.6001.23227] . . c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll
[-] 2011-06-23 . E8689D2B64159B31A8EED0A50E922D50 . 983040 . . [8.00.6001.19098] . . c:\windows\ie8updates\KB2586448-IE8\wininet.dll
[7] 2011-06-23 . 279B74EC9E9AC6B42344BABB9995EC41 . 919552 . . [8.00.6001.23192] . . c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll
[7] 2011-04-25 . ABBE4038CB5C1363B8886C525C67264C . 916480 . . [8.00.6001.19072] . . c:\windows\ie8updates\KB2559049-IE8\wininet.dll
[7] 2011-04-25 . 081237E3BE3EA0AF3B7A77F7578B7831 . 919552 . . [8.00.6001.23165] . . c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll
[7] 2011-02-22 . 193372CF2538E1943580C416D6DE925B . 919552 . . [8.00.6001.23139] . . c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll
[7] 2011-02-22 . 38F763F5829A75DB9512295BF8A0520F . 916480 . . [8.00.6001.19044] . . c:\windows\ie8updates\KB2530548-IE8\wininet.dll
[-] 2011-02-08 . C34051BBF96AE00A36C18D82625F5678 . 929792 . . [8.00.6001.18992] . . c:\windows\ie8updates\KB2482017-IE8\wininet.dll
[7] 2010-12-20 . 62709A317843B4A64C39A94354847E90 . 916480 . . [8.00.6001.19019] . . c:\windows\ie8updates\KB2497640-IE8\wininet.dll
[7] 2010-12-20 . 0EA9F77AAE38F90904E926BB73BF6D00 . 919552 . . [8.00.6001.23111] . . c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll
[7] 2010-11-06 . 8E5E22429507F8CF2F7B7D4F361F2827 . 919552 . . [8.00.6001.23084] . . c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll
[7] 2010-09-10 . 63505861F205E3835D8148811DCB56FE . 916480 . . [8.00.6001.18968] . . c:\windows\ie8updates\KB2416400-IE8\wininet.dll
[7] 2010-09-10 . 63505861F205E3835D8148811DCB56FE . 916480 . . [8.00.6001.18968] . . c:\windows\SoftwareDistribution\Download\305178da04015cd3a8ad4645941f7b2e\SP3GDR\wininet.dll
[7] 2010-09-10 . 1B2338967DABAA1B65415D355105D743 . 919552 . . [8.00.6001.23060] . . c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll
[7] 2010-09-10 . 1B2338967DABAA1B65415D355105D743 . 919552 . . [8.00.6001.23060] . . c:\windows\SoftwareDistribution\Download\305178da04015cd3a8ad4645941f7b2e\SP3QFE\wininet.dll
[7] 2010-09-09 . 5D64A660FF81AC5828DDD00439BEC3BA . 669696 . . [6.00.2900.6036] . . c:\windows\$hf_mig$\KB2360131\SP3QFE\wininet.dll
[7] 2010-05-06 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923] . . c:\windows\ie8updates\KB2360131-IE8\wininet.dll
[7] 2010-05-06 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3GDR\wininet.dll
[7] 2010-05-06 . 72064DA077E9D6912F39438D97CC0C60 . 919040 . . [8.00.6001.23014] . . c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll
[7] 2010-05-06 . 72064DA077E9D6912F39438D97CC0C60 . 919040 . . [8.00.6001.23014] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3QFE\wininet.dll
[7] 2009-03-08 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB982381-IE8\wininet.dll
[7] 2008-04-14 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512] . . c:\windows\ie8\wininet.dll
[7] 2006-03-02 . 50D263E3454E8357D13BB598129185AD . 657408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\wininet.dll
.
[7] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[7] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[7] 2006-03-02 . 382E9B87F1282E697C67AF84E34E35E2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll
.
[7] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[7] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
[7] 2006-03-02 . C2B86666FC44B48903AD6016D15A23DF . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll
.
[-] 2011-02-08 . 1A32145EBADFE694790FB7FBC060FD37 . 1541120 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2011-02-08 . 6347602C0397D969F62BB5D280A2CC8D . 1552384 . . [6.00.2900.5512] . . c:\windows\NiwradSoft Shell Pack\Backup\explorer.exe
[-] 2011-02-08 . 1A32145EBADFE694790FB7FBC060FD37 . 1541120 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2011-02-08 . 31A427B61739EC961A5CD92F4BD0EA80 . 1085952 . . [6.00.2900.5512] . . c:\windows\VistaMizer\old\explorer.exe
[-] 2009-04-07 . DC451E8EAF75B9F274E3151C2BED40DD . 3082240 . . [6.0.6001.18164] . . c:\windows\Resources\Themes\Themespack\Windows 7 Style For Vista\Windows 7 Style For Vista\Extra\x64 System Files\Explorer\explorer.exe
[-] 2009-03-22 . 84ED92280C550F1340A43A0D096CB6FF . 2928640 . . [6.0.6001.18164] . . c:\windows\Resources\Themes\Themespack\Windows 7 Style For Vista\Windows 7 Style For Vista\Extra\x86 System Files\Explorer\explorer.exe
[-] 2008-11-21 . 4815CCD3796D5B645F8FC911E3B83712 . 2925056 . . [6.0.6001.18000] . . c:\windows\Resources\Themes\Themespack\ISOTAVS\ISOTA\System Files\explorer.exe
[7] 2006-03-02 . 53114D57AB73A406AC7F602227781A99 . 1032704 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\explorer.exe
.
[-] 2011-02-08 . 357A3D34D84170AA254A0F5F56197DBC . 277504 . . [5.1.2600.5512] . . c:\windows\regedit.exe
[-] 2011-02-08 . 1E0F5A0072CD399DC0DF14FE7C7BBAAE . 268800 . . [5.1.2600.5512] . . c:\windows\NiwradSoft Shell Pack\Backup\regedit.exe
[-] 2011-02-08 . 357A3D34D84170AA254A0F5F56197DBC . 277504 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regedit.exe
[-] 2011-02-08 . E12E4EDBAE8396845CB127C43D957CBF . 292864 . . [5.1.2600.5512] . . c:\windows\VistaMizer\old\regedit.exe
[7] 2006-03-02 . CB5A91928D94224E7E30EE277B45E8A3 . 147968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regedit.exe
.
[7] 2011-11-01 . ED9B683C7A8BBAAAB9B377197D20832C . 1288192 . . [5.1.2600.6168] . . c:\windows\NiwradSoft Shell Pack\Backup\ole32.dll
[-] 2011-11-01 . 2AB08107D0AEB88B6CAA786EFBB48C6B . 1313280 . . [5.1.2600.6168] . . c:\windows\ServicePackFiles\i386\ole32.dll
[-] 2011-11-01 . 2AB08107D0AEB88B6CAA786EFBB48C6B . 1313280 . . [5.1.2600.6168] . . c:\windows\system32\ole32.dll
[-] 2011-11-01 . 2AB08107D0AEB88B6CAA786EFBB48C6B . 1313280 . . [5.1.2600.6168] . . c:\windows\system32\dllcache\ole32.dll
[7] 2011-11-01 . B5EEF42BC72418EECC3DD3D93B2B5F34 . 1288704 . . [5.1.2600.6168] . . c:\windows\$hf_mig$\KB2624667\SP3QFE\ole32.dll
[-] 2010-07-16 . 81206718E930BEF6D92A64725907D973 . 1312768 . . [5.1.2600.6010] . . c:\windows\$NtUninstallKB2624667$\ole32.dll
[7] 2010-07-16 . 6D1A3A355CA2AC64D2D5BAEC25C16427 . 1287680 . . [5.1.2600.6010] . . c:\windows\VistaMizer\old\ole32.dll
[7] 2010-07-16 . C85BE0CF9C91EB64CECA1D639D71D4CC . 1288704 . . [5.1.2600.6010] . . c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
[7] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB979687$\ole32.dll
[7] 2006-03-02 . 7FE54C063DDA8EF226846510852E6B1B . 1281024 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ole32.dll
.
[7] 2010-04-16 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\usp10.dll
[7] 2010-04-16 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\dllcache\usp10.dll
[7] 2010-04-16 . 6BE004F9FCEECA6536385D5CB59BFD37 . 406016 . . [1.0420.2600.5969] . . c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
[7] 2008-04-14 . F5B6A143739B894BF4F488CFFC3D3015 . 406016 . . [1.0420.2600.5512] . . c:\windows\$NtUninstallKB981322$\usp10.dll
[7] 2008-04-14 . F5B6A143739B894BF4F488CFFC3D3015 . 406016 . . [1.0420.2600.5512] . . c:\windows\ServicePackFiles\i386\usp10.dll
[7] 2006-03-02 . E28340F6CB7BAC3EACDA9C74A0BE42BE . 406528 . . [1.0420.2600.2180] . . c:\windows\$NtServicePackUninstall$\usp10.dll
.
[7] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\ksuser.dll
[7] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ksuser.dll
[7] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ReinstallBackups\0029\DriverFiles\i386\ksuser.dll
[7] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ReinstallBackups\0030\DriverFiles\i386\ksuser.dll
[7] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ReinstallBackups\0032\DriverFiles\i386\ksuser.dll
[7] 2004-08-17 . FC727882241CD48E243868DD8401AB60 . 4096 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\ksuser.dll
.
[-] 2011-02-08 . 04F020DE8F6AD9BF15946808915A5D12 . 25088 . . [5.1.2600.5512] . . c:\windows\NiwradSoft Shell Pack\Backup\ctfmon.exe
[-] 2011-02-08 . BD51CC12F9ACB16CBD8CD16B755E93D2 . 40448 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2011-02-08 . BD51CC12F9ACB16CBD8CD16B755E93D2 . 40448 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
[-] 2011-02-08 . 9467686B82BA152BCA92E7B4848B43B5 . 30208 . . [5.1.2600.5512] . . c:\windows\VistaMizer\old\ctfmon.exe
[7] 2006-03-02 . A5BAA91475167161DEA02BA3C4CA4F59 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe
.
[7] 2009-07-27 . EE9A2B9EA968A792A053C9D1A86BF870 . 135168 . . [6.00.2900.5853] . . c:\windows\system32\shsvcs.dll
[7] 2009-07-27 . EE9A2B9EA968A792A053C9D1A86BF870 . 135168 . . [6.00.2900.5853] . . c:\windows\system32\dllcache\shsvcs.dll
[7] 2009-07-27 . 54A6BF743E0517528A5064CEAEB40EA7 . 135168 . . [6.00.2900.5853] . . c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll
[7] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\$NtUninstallKB971029$\shsvcs.dll
[7] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[7] 2006-03-02 . 8BA76BD2A943F642F267A296A15776D2 . 134656 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll
.
[7] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[7] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[7] 2006-03-02 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB888402$\srsvc.dll
[-] 2004-11-17 . 17C219D43024C82B25256D14CE0803EC . 171008 . . [5.1.2600.2567] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
.
[7] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[7] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
[7] 2006-03-02 . 93F75FF033BAA186D08115D73BFE3D32 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe
.
[7] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[7] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[7] 2006-03-02 . 9B835D4C64860B155A1701D5092EC9E4 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll
.
[7] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[7] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[7] 2006-03-02 . 6EB66066D5C0175320CFEA0A4C74C88F . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll
.
[7] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[7] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
[7] 2006-03-02 . 5CA2E2BA624D6F2C7A581C91E70394CB . 1548288 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll
.
[7] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ipsec.sys
[7] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys
[7] 2006-03-02 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ipsec.sys
.
[7] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[7] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[7] 2006-03-02 . 5B21208FCF8970BB61FE98E19D828714 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll
.
[7] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[7] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[7] 2006-03-02 . 29AC93307C6182DBE336BCA314947F28 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll
.
[7] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[7] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[7] 2006-03-02 . 88C28F53F53438DAFCD95E99C837C61E . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
.
[7] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[7] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[7] 2006-03-02 . 2F5919F2F6EE7A845893D9C3AA2BC56A . 295936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll
.
[-] 2008-04-14 . FDE84E2C6D0E1F75D61D7CC111A1DA5A . 369152 . . [5.1.2600.5512] . . c:\windows\NiwradSoft Shell Pack\Backup\hnetcfg.dll
[-] 2008-04-14 . FDE84E2C6D0E1F75D61D7CC111A1DA5A . 369152 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\hnetcfg.dll
[-] 2008-04-14 . FDE84E2C6D0E1F75D61D7CC111A1DA5A . 369152 . . [5.1.2600.5512] . . c:\windows\system32\hnetcfg.dll
[7] 2008-04-14 . ED18ADEE4AA21EB26977260152D7241A . 345088 . . [5.1.2600.5512] . . c:\windows\VistaMizer\old\hnetcfg.dll
[7] 2006-03-02 . FAABA83BE47C5B15F620FAA53267A9B8 . 345088 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\hnetcfg.dll
.
[7] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\appmgmts.dll
[7] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
[7] 2006-03-02 . 421184F91EAE5C6E78E653C6B32AAE84 . 171008 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\appmgmts.dll
.
[7] 2006-03-02 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys
.
[7] 2008-04-13 21:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[7] 2008-04-13 21:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
[7] 2004-08-03 21:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\$NtServicePackUninstall$\aec.sys
.
[7] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[7] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys
.
[7] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[7] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
[7] 2006-03-02 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys
.
[7] 2010-09-18 07:18 . 2BC3ED47ACB42F664D5D1D247F2553AA . 953856 . . [4.1.6151] . . c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
[7] 2010-09-18 06:53 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . c:\windows\system32\mfc40u.dll
[7] 2010-09-18 06:53 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . c:\windows\system32\dllcache\mfc40u.dll
[7] 2008-04-14 07:51 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\$NtUninstallKB2387149$\mfc40u.dll
[7] 2008-04-14 07:51 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2006-03-02 12:00 . A9D81C87BEF253D4CE3A5F8CEE2526C4 . 924432 . . [4.1.6140] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll
.
[7] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[7] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
[7] 2006-03-02 . 8B2FCBD881879B55BE40B41F12FFC431 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll
.
[7] 2009-01-30 19:33 . 051B1BDECD6DEE18C771B5D5EC7F044D . 27136 . . [11.0.5721.5262] . . c:\windows\system32\mspmsnsv.dll
[7] 2009-01-30 19:33 . 051B1BDECD6DEE18C771B5D5EC7F044D . 27136 . . [11.0.5721.5262] . . c:\windows\system32\dllcache\mspmsnsv.dll
[7] 2006-03-02 12:00 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
.
[7] 2011-10-26 . 8AE4032D26FB72F39BEA8BB4D4F8AC30 . 2071552 . . [5.1.2600.6165] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[7] 2011-10-26 . D0CE1AD877BDF9E6D646F789F0C711B4 . 2029056 . . [5.1.2600.6165] . . c:\windows\NiwradSoft Shell Pack\Backup\ntkrnlpa.exe
[-] 2011-10-26 . F0E6149516EE7AECE469A71F8C2479C9 . 2190336 . . [5.1.2600.6165] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2011-10-26 . F0E6149516EE7AECE469A71F8C2479C9 . 2190336 . . [5.1.2600.6165] . . c:\windows\system32\ntkrnlpa.exe
[-] 2011-10-26 . F0E6149516EE7AECE469A71F8C2479C9 . 2190336 . . [5.1.2600.6165] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[7] 2011-10-26 . 64201EB5A7ECB3E7203ECCDB60FBE44E . 2071552 . . [5.1.2600.6165] . . c:\windows\$hf_mig$\KB2633171\SP3QFE\ntkrnlpa.exe
[7] 2010-12-09 . 40D176442F70573DBA0E05A7E40D3EBB . 2071552 . . [5.1.2600.6055] . . c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe
[-] 2010-12-09 . 436E72D2B4D8539FF2E1355E50A8B152 . 2205696 . . [5.1.2600.6055] . . c:\windows\$NtUninstallKB2633171$\ntkrnlpa.exe
[7] 2010-12-09 . 3BDF4E6E7BAA918AAA1670B7EBA505A3 . 2029056 . . [5.1.2600.6055] . . c:\windows\VistaMizer\old\ntkrnlpa.exe
[7] 2010-04-28 . 2FA1EF498F026847CF276DF9099ABE79 . 2069120 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
[7] 2010-04-28 . F7648719DB795F098BA7F2AE67150182 . 2026496 . . [5.1.2600.5973] . . c:\windows\$NtUninstallKB2393802$\ntkrnlpa.exe
[7] 2009-02-09 . 6DD6966FA0FF770A3E5545875557C7F1 . 2025984 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
[7] 2009-02-09 . FF8A3F180A224AA27EBAB937CA027F4D . 2068352 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[7] 2008-04-14 . 9F12E026DC0B0C43F521114EFB3A3ACC . 2025984 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[7] 2006-03-02 . 7715EDDD01EDFEF9EF335D29C6DFE212 . 2017280 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB896256$\ntkrnlpa.exe
[-] 2005-10-12 . 69257A531B57D3FF6942032F5DD823B2 . 2017280 . . [5.1.2600.2774] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2005-09-29 . 20687432C578E59928FCA69A19D5C0DF . 2017792 . . [5.1.2600.2765] . . c:\windows\$NtUninstallKB909095$\ntkrnlpa.exe
.
[7] 2008-04-14 07:51 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[7] 2008-04-14 07:51 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[7] 2006-03-02 12:00 . D8D2B13BA93AE830B1A637DF571D1195 . 435712 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll
.
[7] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[7] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[7] 2006-03-02 . 984FC1518B0D5B31D76F0E63608E0500 . 185344 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\upnphost.dll
.
[7] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[7] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
[7] 2006-03-02 . 8ECC475F5BAD26DB85943F888D62E364 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll
.
[7] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[7] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
[7] 2006-03-02 . A19F5837E52D57DB66D9DB55BFCC7796 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll
.
[7] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[7] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
[7] 2006-03-02 . 0F9A5DD4503E82B085D8B1336B961A81 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll
.
[7] 2008-04-14 07:51 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[7] 2008-04-14 07:51 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
[7] 2006-03-02 12:00 . 33F14F23DFAE4B43CDD4E535CD7C1963 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll
.
[7] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[7] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
[7] 2006-03-02 . 6C08FF4B76506676617E03C34ECCFB11 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll
.
[7] 2008-04-14 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\version.dll
[7] 2008-04-14 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\version.dll
[7] 2006-03-02 . E472BDA53A4DCD2142143AF9FD25C99A . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\version.dll
.
.
.
.
[7] 2011-10-26 . 702435ABA81209767F8AADD8813A1A73 . 2194944 . . [5.1.2600.6165] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[7] 2011-10-26 . 6045926521ECB7FCD965D3589554BAAA . 2150912 . . [5.1.2600.6165] . . c:\windows\NiwradSoft Shell Pack\Backup\ntoskrnl.exe
[-] 2011-10-26 . 21C4D06AE70D3198C0A773B8786BC8FF . 2312192 . . [5.1.2600.6165] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2011-10-26 . 21C4D06AE70D3198C0A773B8786BC8FF . 2312192 . . [5.1.2600.6165] . . c:\windows\system32\ntoskrnl.exe
[-] 2011-10-26 . 21C4D06AE70D3198C0A773B8786BC8FF . 2312192 . . [5.1.2600.6165] . . c:\windows\system32\dllcache\ntoskrnl.exe
[7] 2011-10-26 . BCA329B5A39AB25CC2DCCB3549EE30BF . 2194944 . . [5.1.2600.6165] . . c:\windows\$hf_mig$\KB2633171\SP3QFE\ntoskrnl.exe
[7] 2010-12-09 . 8D222D8EF9B1951296F822583A044542 . 2194944 . . [5.1.2600.6055] . . c:\windows\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe
[-] 2010-12-09 . 3777F967DA3622335AE5939EC97EC112 . 2327552 . . [5.1.2600.6055] . . c:\windows\$NtUninstallKB2633171$\ntoskrnl.exe
[7] 2010-12-09 . EB4B6B42932C180632A2C2C43F23B84C . 2150912 . . [5.1.2600.6055] . . c:\windows\VistaMizer\old\ntoskrnl.exe
[7] 2010-04-28 . 431278D0EF7518BA499720122F4ED86F . 2148352 . . [5.1.2600.5973] . . c:\windows\$NtUninstallKB2393802$\ntoskrnl.exe
[7] 2010-04-28 . 91FE668957FF51A2DBCEE0D8637BA77E . 2192256 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
[7] 2009-02-10 . 97480EBFE1D4B547657BAD75AAAB1325 . 2191360 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[7] 2009-02-09 . 6499BF91CF62B4319D6ED7E99D0B6998 . 2147328 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
[7] 2008-04-14 . 27C7A7AED8A477F6A0C7D3AD00AB9419 . 2147328 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[7] 2006-03-02 . 84FEF6BE553ACC66729F5D4113F53310 . 2150400 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB896256$\ntoskrnl.exe
[-] 2005-10-12 . 3A0DCD3C8BE8423B2D5F254F4FD2C0B5 . 2138112 . . [5.1.2600.2774] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2005-09-29 . DDECA52A662B26574438AB569AF18DEF . 2138112 . . [5.1.2600.2765] . . c:\windows\$NtUninstallKB909095$\ntoskrnl.exe
.
[7] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[7] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[7] 2006-03-02 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB888402$\srsvc.dll
[-] 2004-11-17 . 17C219D43024C82B25256D14CE0803EC . 171008 . . [5.1.2600.2567] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
.
[7] 2008-04-14 . FA4E1CDBA256787F2149F4AAD07BC91F . 176640 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\w32time.dll
[7] 2008-04-14 . FA4E1CDBA256787F2149F4AAD07BC91F . 176640 . . [5.1.2600.5512] . . c:\windows\system32\w32time.dll
[7] 2006-03-02 . 2CEEBB402187AE56B585701F3D191FB3 . 176128 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\w32time.dll
.
[7] 2008-04-14 . C1CDD9275F6A115BB0AE1D55D8D27BA6 . 334336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wiaservc.dll
[7] 2008-04-14 . C1CDD9275F6A115BB0AE1D55D8D27BA6 . 334336 . . [5.1.2600.5512] . . c:\windows\system32\wiaservc.dll
[7] 2006-03-02 . 0645CCDDDD27F96EEA3534C1DEF736D9 . 333824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wiaservc.dll
.
[7] 2008-04-14 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512] . . c:\windows\NiwradSoft Shell Pack\Backup\midimap.dll
[-] 2008-04-14 . 08099AB0C2874E2B6AEA6CEDA684C492 . 42496 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\midimap.dll
[7] 2008-04-14 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\midimap.dll
[7] 2008-04-14 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512] . . c:\windows\VistaMizer\old\midimap.dll
[7] 2006-03-02 . B356DD67178B22A8C2FBD47316CCB43B . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\midimap.dll
.
[7] 2008-04-14 . B26098F3DC08D841DE3D79C38ACCB807 . 7680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rasadhlp.dll
[7] 2008-04-14 . B26098F3DC08D841DE3D79C38ACCB807 . 7680 . . [5.1.2600.5512] . . c:\windows\system32\rasadhlp.dll
[7] 2006-03-02 . 630A1012AF129918D2E2D70727D69351 . 8192 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\rasadhlp.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- c:\program files\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\documents and settings\zastpa.MKYJ003\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\documents and settings\zastpa.MKYJ003\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\documents and settings\zastpa.MKYJ003\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\documents and settings\zastpa.MKYJ003\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-08-02 4910912]
"NeXuS"="c:\program files\RocketDock\Nexus.exe" [2011-11-18 13599872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\Avast\avastUI.exe" [2011-11-28 3744552]
"StartupDelayer"="c:\program files\r2 Studios\Startup Delayer\Startup Launcher.exe" [2011-12-13 978944]
"PTHOSTTR"="c:\program files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2007-01-09 145184]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-11-06 177456]
"IFXSPMGT"="c:\windows\system32\ifxspmgt.exe" [2007-02-15 677408]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-05-18 138008]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-06-04 1791272]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-05-18 138008]
"CognizanceTS"="c:\progra~1\HEWLET~1\IAM\Bin\ASTSVCC.dll" [2003-12-22 17920]
"Reloader"="c:\windows\NiwradSoft Shell Pack\Tools\Reloader.exe" [2010-07-04 325046]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-01-05 872448]
"SpywareTerminatorShield"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2011-12-23 2779824]
"SpywareTerminatorUpdater"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2011-12-23 3621040]
"WatchDog"="c:\program files\InterVideo\DVD Check\DVDCheck.exe" [2007-05-23 192512]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2011-02-08 40448]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"GreyMSIAds"= 1 (0x1)
"NoMovingBands"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OneCard]
2007-02-07 01:30 74240 ----a-r- c:\program files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB]
2009-06-09 07:55 30000 ----a-w- c:\program files\MyColors\fastload.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\APSHook.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ SbHpNp scecli
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Phone Remote Control.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Phone Remote Control.lnk
backup=c:\windows\pss\Phone Remote Control.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^zastpa.MKYJ003^Nabídka Start^Programy^Po spuštění^ClearTemp.lnk]
path=c:\documents and settings\zastpa.MKYJ003\Nabídka Start\Programy\Po spuštění\ClearTemp.lnk
backup=c:\windows\pss\ClearTemp.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^zastpa.MKYJ003^Nabídka Start^Programy^Po spuštění^Kopie - WeFi.lnk]
path=c:\documents and settings\zastpa.MKYJ003\Nabídka Start\Programy\Po spuštění\Kopie - WeFi.lnk
backup=c:\windows\pss\Kopie - WeFi.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^zastpa.MKYJ003^Nabídka Start^Programy^Po spuštění^Seznam Pošťák.lnk]
path=c:\documents and settings\zastpa.MKYJ003\Nabídka Start\Programy\Po spuštění\Seznam Pošťák.lnk
backup=c:\windows\pss\Seznam Pošťák.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^zastpa.MKYJ003^Nabídka Start^Programy^Po spuštění^Styler.lnk]
path=c:\documents and settings\zastpa.MKYJ003\Nabídka Start\Programy\Po spuštění\Styler.lnk
backup=c:\windows\pss\Styler.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-03 07:37 843712 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clownfish]
2011-12-23 02:58 3621040 ----a-w- c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2011-08-02 07:33 4910912 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eXtra Buttons]
2011-05-12 19:57 2492416 ----a-w- c:\program files\eXtra Buttons\xb.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
2007-04-19 12:26 484904 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 15:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-09-30 11:19 252296 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WatchDog]
2007-05-23 10:00 192512 ----a-w- c:\program files\InterVideo\DVD Check\DVDCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WizMouse]
2011-09-30 07:51 121648 ----a-w- c:\program files\WizMouse\WizMouse.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Miranda\\Miranda packing2\\miranda32.exe"=
"c:\\Program Files\\totalcmd\\TOTALCMD.EXE"=
"c:\\Documents and Settings\\zastpa.MKYJ003\\Data aplikací\\Dropbox\\bin\\Dropbox.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Program Files\\Hasbro Interactive\\RollerCoaster Tycoon\\rct.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeEnC2.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeTray.exe"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\Jubler.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\WINDOWS\\system32\\dxdiag.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminator.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\Java\\jre7\\bin\\javaw.exe"=
"c:\\Program Files\\Java\\jre7\\bin\\java.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer_Service.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
.
R0 SafeBoot;SafeBoot;c:\windows\system32\drivers\SafeBoot.sys [22.4.2007 16:24 100095]
R0 SbAlg;SbAlg;c:\windows\system32\drivers\SbAlg.sys [9.10.2006 13:31 44720]
R0 SbFsLock;SbFsLock;c:\windows\system32\drivers\SbFsLock.sys [29.3.2007 16:54 13696]
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [10.4.2011 12:58 435032]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [5.2.2011 21:36 314456]
R1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\system32\drivers\psd.sys [23.1.2007 21:07 39080]
R1 RsvLock;RsvLock;c:\windows\system32\drivers\rsvlock.sys [22.4.2007 16:25 5808]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver;c:\windows\system32\drivers\sp_rsdrv2.sys [8.1.2012 16:50 32768]
R2 ASBroker;Logon Session Broker;c:\windows\System32\svchost.exe -k Cognizance [2.3.2006 13:00 14336]
R2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe -k Cognizance [2.3.2006 13:00 14336]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [5.2.2011 21:36 20568]
R2 ezGOSvc;Easybits GO Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [2.3.2006 13:00 14336]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [7.2.2012 13:18 1373576]
R2 HpFkCryptService;Drive Encryption Service;c:\program files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [22.4.2007 16:32 221184]
R2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [5.11.2010 17:01 540448]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files\Spyware Terminator\st_rsser.exe [8.1.2012 16:50 482992]
R2 SWIHPWMI;SWIHPWMI;c:\program files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe [4.12.2006 16:13 292384]
R2 WTService;WTService;c:\windows\system32\atwtusb.exe [30.6.2011 9:16 360096]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [5.11.2010 16:41 36608]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\drivers\nx6000.sys [5.11.2011 16:38 30576]
R3 NETwLx32; Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows XP 32 Bit;c:\windows\system32\drivers\NETwLx32.sys [29.11.2011 17:54 6609920]
S1 SASDIFSV;SASDIFSV;\??\g:\first help for pc\SUPERAntiSpyware Free Edition\SASDIFSV.SYS --> g:\first help for pc\SUPERAntiSpyware Free Edition\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\g:\first help for pc\SUPERAntiSpyware Free Edition\SASKUTIL.SYS --> g:\first help for pc\SUPERAntiSpyware Free Edition\SASKUTIL.SYS [?]
S2 !SASCORE;SAS Core Service;"g:\first help for pc\SUPERAntiSpyware Free Edition\SASCORE.EXE" --> g:\first help for pc\SUPERAntiSpyware Free Edition\SASCORE.EXE [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [21.2.2011 20:44 136176]
S2 ttscp;Text-to-Speech system Epos;c:\program files\Epos_2.4\bin\epos.exe --> c:\program files\Epos_2.4\bin\epos.exe [?]
S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [18.12.2009 11:58 11336]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [21.2.2011 20:44 136176]
S3 HP24X;HP PC Card Smart Card Reader;c:\windows\system32\drivers\HP24X.sys [5.11.2010 16:46 33024]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [12.6.2011 10:15 31125880]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [9.1.2010 21:37 4640000]
S3 PROCEXP151;PROCEXP151;\??\c:\windows\system32\Drivers\PROCEXP151.SYS --> c:\windows\system32\Drivers\PROCEXP151.SYS [?]
S3 SS_ACdrv;SeeStorm;c:\windows\system32\DRIVERS\ss_acdrv.sys --> c:\windows\system32\DRIVERS\ss_acdrv.sys [?]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [27.7.2011 14:06 11520]
S3 WefiEngSvc;WeFi Engine Service;c:\program files\WeFi\WefiEngSvc.exe [3.11.2010 10:21 120152]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker ASChannel
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezGOSvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-04-19 12:23 452136 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2012-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-02-21 19:44]
.
2012-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-02-21 19:44]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: Crawler Search - tbr:iemenu
IE: Download all by FlashGet3 - c:\documents and settings\zastpa.MKYJ003\Data aplikací\FlashGetBHO\GetAllUrl.htm
IE: Download by FlashGet3 - c:\documents and settings\zastpa.MKYJ003\Data aplikací\FlashGetBHO\GetUrl.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Link to &MidpX - c:\program files\Kwyshell\MidpX\JadInvoker\Extent\jad_wrap.htm
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: ????3?? - c:\documents and settings\zastpa.MKYJ003\Data aplikací\FlashGetBHO\GetUrl.htm
IE: ????3?????? - c:\documents and settings\zastpa.MKYJ003\Data aplikací\FlashGetBHO\GetAllUrl.htm
TCP: DhcpNameServer = 192.168.21.254 81.19.33.2
FF - ProfilePath - c:\documents and settings\zastpa.MKYJ003\Data aplikací\Mozilla\Firefox\Profiles\34fw68tl.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/?clid=1
FF - prefs.js: keyword.URL - hxxp://search.seznam.cz/?sourceid=undefined&q=
FF - user.js: extentions.y2layers.installId - 967d3bfb-647f-4a10-b718-5006f5e9cf9e
FF - user.js: extentions.y2layers.defaultEnableAppsList - BestVideoDownloader,BestVideoDownloader,
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - g:\first help for pc\SUPERAntiSpyware Free Edition\SASSEH.DLL
Notify-!SASWinLogon - g:\first help for pc\SUPERAntiSpyware Free Edition\SASWINLO.DLL
MSConfigStartUp-ApnUpdater - c:\program files\Ask.com\Updater\Updater.exe
MSConfigStartUp-EA Core - c:\program files\Electronic Arts\EADM\Core.exe
MSConfigStartUp-ManicTime - c:\program files\ManicTime\ManicTime.exe
MSConfigStartUp-McAfeeUpdaterUI - c:\program files\McAfee\Common Framework\udaterui.exe
MSConfigStartUp-MuralPixAgent - c:\program files\MuralPix\MpAgent.exe
MSConfigStartUp-pamelaPCR - c:\program files\Pamela\PCR\PamelaPCR.exe
MSConfigStartUp-Windows Update - c:\documents and settings\zastpa.MKYJ003\Local Settings\Temp\WindowsUpdate.exe
AddRemove-Agere Systems Soft Modem - c:\windows\agrsmdel
AddRemove-HD Tune_is1 - g:\first help for pc\HD Tune\unins000.exe
AddRemove-HijackThis - g:\first help for pc\HijackThis\HijackThis.exe
AddRemove-XPv3.8.252 - c:\windows\Radeon Omega Drivers v3.8.252
AddRemove-Recuva - g:\first help for pc\Recuva\uninst.exe
AddRemove-{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA} - g:\first help for pc\SUPERAntiSpyware Free Edition\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-02-10 18:58
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
C:\## aswSnx private storage
c:\windows\system32\midimap.dll.niwrad 42496 bytes executable
.
sken byl úspešně dokončen
skryté soubory: 2
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-796845957-776561741-725345543-1005\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}Ź]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
@="c:\\Documents and Settings\\zastpa.MKYJ003\\Data aplikací\\FlashGetBHO\\GetUrl.htm"
"contexts"=dword:00000022
.
[HKEY_USERS\S-1-5-21-796845957-776561741-725345543-1005\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}ŹhQčţ”Ąc]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
@="c:\\Documents and Settings\\zastpa.MKYJ003\\Data aplikací\\FlashGetBHO\\GetAllUrl.htm"
"contexts"=dword:000000f3
.
[HKEY_LOCAL_MACHINE\software\Xanthic\{EAC0842F-9764-03DD-A0B6-5FFFB48AD6EB}*_]
"fr"="078D644D405145"
"lr"="078D74475D5141"
.
------------------------------------------------------------------------------------------------------------------------
Adam Dvořák

Nezkušený začátečník v oblastí virů, ale středně pokročilý programátor her v GameMakerovi a psaní HTML
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“