problém s windowsem
Napsal: 04 dub 2012 17:38
Prosím o pomoc, mám legální windows a přesto mi dneska najela zpráva o tom, že je nelegální a už mi černá obrazovka. Jedná se o vir? Přikládám log z RSIT
Logfile of random's system information tool 1.09 (written by random/random)
Run by Magda at 2012-04-04 18:36:15
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 178 GB (77%) free of 231 GB
Total RAM: 3997 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:36:22, on 4.4.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
C:\Program Files (x86)\Launch Manager\LManager.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Magda.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5i4711u36q
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... tbid=60747
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1750559
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5i4711u36q
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5i4711u36q
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll (file missing)
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Magda\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Acer VCM.lnk = ?
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.co ... .5.1.0.cab
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\Partner.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11193 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
"C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\PLFSetI.exe"
"C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Launch Manager\LManager.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\Winamp\winampa.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe"
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" /INSTALL
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantExperimentA/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/ --extension-process --renderer-print-preview --channel=3524.053E8700.1320463090 /prefetch:3
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheListSize/CacheListSize_13/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantExperimentA/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel=3524.065F11C0.438814585 /prefetch:3
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheListSize/CacheListSize_13/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantExperimentA/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/Disabled/ --renderer-print-preview --channel=3524.0664E1C0.1299628821 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\Magda\AppData\Local\Google\Chrome\APPLIC~1\180102~1.142\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Magda\AppData\Local\Google\Chrome\Application\18.0.1025.142\gcswf32.dll" --lang=cs --channel=3524.081A35F0.1857075769 --flash-broker=2148 /prefetch:4
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheListSize/CacheListSize_13/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantExperimentA/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/Disabled/ --renderer-print-preview --channel=3524.0A157C40.90296356 /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Magda\Downloads\RSITX64.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-487761364-2999805323-891229571-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-487761364-2999805323-891229571-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-06 1211776]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\Partner64.dll [2010-05-05 750064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-03-17 253040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
&Crawler Toolbar Helper - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2012-03-21 1237240]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\progra~1\mcafee\msk\mskapbho.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\Partner.dll [2010-05-05 433648]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-06 1003704]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-17 192112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-06 1211776]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-03-17 253040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-06 1003704]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-17 192112]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler Toolbar - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2012-03-21 1237240]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2009-07-19 503864]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-09-17 1842472]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-02-26 818720]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 415256]
"PLFSetI"=C:\Windows\PLFSetI.exe [2012-03-02 206208]
"SpywareTerminatorShield"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2012-03-27 2786480]
"SpywareTerminatorUpdater"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2012-03-27 3669680]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-05-05 39408]
"Google Update"=C:\Users\Magda\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-02 136176]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-02-13 3481408]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2009-09-24 825864]
"NortonOnlineBackupReminder"=C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [2009-07-24 588648]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-01-03 37296]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-06 4241512]
"WinampAgent"=C:\Program Files (x86)\Winamp\winampa.exe [2011-12-09 74752]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Acer VCM.lnk - C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 271360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2012-04-04 18:36:15 ----D---- C:\rsit
2012-04-04 18:36:15 ----D---- C:\Program Files\trend micro
2012-04-04 17:42:17 ----D---- C:\Program Files (x86)\Crawler
2012-04-04 17:42:08 ----A---- C:\Windows\system32\drivers\stflt.sys
2012-04-04 17:42:07 ----D---- C:\Users\Magda\AppData\Roaming\Spyware Terminator
2012-04-04 17:42:07 ----D---- C:\ProgramData\Spyware Terminator
2012-04-04 17:41:07 ----D---- C:\Program Files (x86)\Spyware Terminator
2012-03-22 14:09:16 ----D---- C:\Users\Magda\AppData\Roaming\PhotoFiltre Studio X
2012-03-22 14:09:12 ----D---- C:\Program Files (x86)\PhotoFiltre Studio X
2012-03-18 10:50:36 ----N---- C:\Windows\system32\MpSigStub.exe
2012-03-14 22:41:19 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-03-14 22:41:18 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-03-14 22:41:17 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-03-14 07:30:21 ----A---- C:\Windows\system32\win32k.sys
2012-03-14 07:30:16 ----A---- C:\Windows\system32\DWrite.dll
2012-03-14 07:30:15 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-03-14 07:29:18 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-03-14 07:29:18 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-03-14 07:29:17 ----A---- C:\Windows\system32\rdpwsx.dll
2012-03-14 07:29:13 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-03-14 07:29:13 ----A---- C:\Windows\system32\rdpcore.dll
2012-03-14 07:29:12 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-03-14 07:29:12 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-03-09 14:45:44 ----D---- C:\Program Files (x86)\Mad Scientist Productions
2012-03-09 14:16:39 ----D---- C:\Users\Magda\AppData\Roaming\WinRAR
2012-03-09 14:16:31 ----D---- C:\Program Files\WinRAR
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\url.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\wininet.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\wextract.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\webcheck.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\vbscript.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\urlmon.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\url.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\pngfilt.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\occache.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\msrating.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\msls31.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\mshtmler.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\mshtmled.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\mshtml.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\mshta.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\msfeedssync.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\msfeeds.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\licmgr10.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\jsproxy.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\jscript9.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\jscript.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\inseng.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\imgutil.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iexpress.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieUnatt.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieui.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iesysprep.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iesetup.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iertutil.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iernonce.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iepeers.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieframe.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iedkcs32.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieapfltr.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieapfltr.dat
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieakui.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieaksie.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieakeng.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ie4uinit.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\icardie.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\dxtrans.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\dxtmsft.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\admparse.dll
2012-03-08 11:22:12 ----D---- C:\Users\Magda\AppData\Roaming\BSplayer
2012-03-07 19:18:46 ----D---- C:\Program Files (x86)\Microsoft WSE
2012-03-07 19:10:07 ----D---- C:\Program Files (x86)\Electronic Arts
2012-03-07 19:07:23 ----A---- C:\Windows\UC.PIF
2012-03-07 19:07:23 ----A---- C:\Windows\RAR.PIF
2012-03-07 19:07:23 ----A---- C:\Windows\PKZIP.PIF
2012-03-07 19:07:22 ----D---- C:\Users\Magda\AppData\Roaming\GHISLER
2012-03-07 19:07:22 ----D---- C:\totalcmd
2012-03-07 19:07:22 ----A---- C:\Windows\PKUNZIP.PIF
2012-03-07 19:07:22 ----A---- C:\Windows\NOCLOSE.PIF
2012-03-07 19:07:22 ----A---- C:\Windows\LHA.PIF
2012-03-07 19:07:22 ----A---- C:\Windows\ARJ.PIF
2012-03-07 19:04:25 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-03-07 19:03:53 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2012-03-07 19:03:04 ----D---- C:\Users\Magda\AppData\Roaming\DAEMON Tools Lite
2012-03-07 19:02:42 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-03-05 16:09:26 ----D---- C:\Windows\system32\SPReview
2012-03-05 16:08:52 ----D---- C:\Windows\system32\EventProviders
2012-03-05 16:04:10 ----A---- C:\Windows\system32\MRT.exe
2012-03-05 09:20:22 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-03-05 08:42:20 ----D---- C:\Program Files (x86)\MSXML 4.0
======List of files/folders modified in the last 1 month======
2012-04-04 18:36:22 ----D---- C:\Windows\Prefetch
2012-04-04 18:36:20 ----D---- C:\Windows\Temp
2012-04-04 18:36:15 ----RD---- C:\Program Files
2012-04-04 17:46:29 ----D---- C:\Windows\system32\config
2012-04-04 17:42:17 ----RD---- C:\Program Files (x86)
2012-04-04 17:42:08 ----D---- C:\Windows\system32\drivers
2012-04-04 17:42:07 ----HD---- C:\ProgramData
2012-04-03 21:49:12 ----SHD---- C:\System Volume Information
2012-04-02 20:20:44 ----D---- C:\Windows\System32
2012-04-02 20:20:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-04-02 20:20:43 ----D---- C:\Windows\inf
2012-03-30 11:23:29 ----RSD---- C:\Windows\assembly
2012-03-30 11:23:29 ----D---- C:\Windows\Microsoft.NET
2012-03-29 17:37:50 ----SHD---- C:\Windows\Installer
2012-03-24 09:08:07 ----D---- C:\Windows\SysWOW64
2012-03-22 14:09:17 ----D---- C:\Users\Magda\AppData\Roaming\Identities
2012-03-20 07:57:22 ----D---- C:\Windows\winsxs
2012-03-19 12:25:09 ----D---- C:\Windows\system32\NDF
2012-03-18 22:17:23 ----D---- C:\ProgramData\Adobe
2012-03-18 22:15:28 ----D---- C:\ProgramData\McAfee
2012-03-18 22:15:28 ----D---- C:\Program Files\Common Files
2012-03-18 22:15:28 ----D---- C:\Program Files (x86)\Common Files
2012-03-18 22:14:55 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-03-18 16:15:54 ----SD---- C:\ProgramData\Microsoft
2012-03-18 16:13:29 ----SD---- C:\Users\Magda\AppData\Roaming\Microsoft
2012-03-18 10:50:34 ----D---- C:\Windows\system32\catroot2
2012-03-14 22:41:25 ----D---- C:\Windows\system32\catroot
2012-03-13 20:04:34 ----D---- C:\Users\Magda\AppData\Roaming\Adobe
2012-03-11 07:45:18 ----AD---- C:\ProgramData\TEMP
2012-03-11 07:41:33 ----D---- C:\Windows\system32\Tasks
2012-03-11 07:34:11 ----D---- C:\Windows\system32\wdi
2012-03-10 17:15:25 ----D---- C:\Windows\rescache
2012-03-10 17:11:51 ----D---- C:\Windows\Logs
2012-03-09 10:25:48 ----D---- C:\Windows
2012-03-09 10:21:03 ----D---- C:\Windows\SYSWOW64\migration
2012-03-09 10:21:03 ----D---- C:\Windows\SYSWOW64\en-US
2012-03-09 10:21:02 ----D---- C:\Windows\system32\migration
2012-03-09 10:21:02 ----D---- C:\Windows\system32\en-US
2012-03-09 10:21:02 ----D---- C:\Windows\PolicyDefinitions
2012-03-09 10:21:00 ----D---- C:\Program Files\Internet Explorer
2012-03-09 10:21:00 ----D---- C:\Program Files (x86)\Internet Explorer
2012-03-08 11:22:02 ----D---- C:\Program Files (x86)\Webteh
2012-03-07 19:10:00 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-03-07 19:05:01 ----D---- C:\Windows\system32\DriverStore
2012-03-06 17:15:14 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-03-06 17:15:03 ----A---- C:\Windows\system32\aswBoot.exe
2012-03-05 16:27:37 ----D---- C:\Program Files\Windows Sidebar
2012-03-05 16:27:37 ----D---- C:\Program Files\Windows Mail
2012-03-05 16:27:37 ----D---- C:\Program Files\DVD Maker
2012-03-05 16:27:37 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-03-05 16:27:37 ----D---- C:\Program Files (x86)\Windows Portable Devices
2012-03-05 16:27:37 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-03-05 16:27:37 ----D---- C:\Program Files (x86)\Windows Media Player
2012-03-05 16:27:37 ----D---- C:\Program Files (x86)\Windows Mail
2012-03-05 16:27:36 ----D---- C:\Program Files\Windows Portable Devices
2012-03-05 16:27:36 ----D---- C:\Program Files\Windows Photo Viewer
2012-03-05 16:27:36 ----D---- C:\Program Files\Windows Media Player
2012-03-05 16:27:36 ----D---- C:\Program Files\Windows Journal
2012-03-05 16:27:36 ----D---- C:\Program Files\Common Files\System
2012-03-05 16:27:35 ----D---- C:\Windows\servicing
2012-03-05 16:27:35 ----D---- C:\Windows\ehome
2012-03-05 16:27:35 ----D---- C:\Program Files\Windows Defender
2012-03-05 16:27:31 ----D---- C:\Windows\SYSWOW64\da-DK
2012-03-05 16:27:30 ----D---- C:\Windows\SYSWOW64\Setup
2012-03-05 16:27:30 ----D---- C:\Windows\SYSWOW64\oobe
2012-03-05 16:27:30 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\wbem
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\sppui
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\migwiz
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\manifeststore
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\es-ES
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\en
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\Dism
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-03-05 16:27:12 ----D---- C:\Windows\system32\da-DK
2012-03-05 16:27:09 ----D---- C:\Windows\system32\Setup
2012-03-05 16:27:09 ----D---- C:\Windows\system32\oobe
2012-03-05 16:27:09 ----D---- C:\Windows\system32\manifeststore
2012-03-05 16:27:09 ----D---- C:\Windows\system32\cs-CZ
2012-03-05 16:27:09 ----D---- C:\Windows\system32\AdvancedInstallers
2012-03-05 16:27:08 ----D---- C:\Windows\system32\sppui
2012-03-05 16:27:08 ----D---- C:\Windows\system32\es-ES
2012-03-05 16:27:08 ----D---- C:\Windows\system32\drivers\en-US
2012-03-05 16:27:07 ----D---- C:\Windows\system32\wbem
2012-03-05 16:27:07 ----D---- C:\Windows\system32\migwiz
2012-03-05 16:27:07 ----D---- C:\Windows\system32\Dism
2012-03-05 16:26:47 ----RSD---- C:\Windows\Fonts
2012-03-05 16:26:46 ----D---- C:\Windows\AppPatch
2012-03-05 16:26:31 ----D---- C:\Windows\system32\Boot
2012-03-05 16:22:06 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2012-03-05 16:22:05 ----A---- C:\Windows\system32\msclmd.dll
2012-03-05 16:04:14 ----D---- C:\Windows\debug
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-03-06 53080]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-06 819032]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-06 337240]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-06 59224]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-03-07 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-13 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-06 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-06 69976]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2012-04-04 51496]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-03-01 1593384]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2009-08-10 686080]
R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2009-03-25 25608]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-08-25 10611552]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-05 18432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-09-17 292912]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-05 16896]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-13 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-13 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-04-27 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-27 80384]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-06-30 52264]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-06-30 98344]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-06-30 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-06-30 21160]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-11-13 67072]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2009-09-14 6952960]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-13 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-13 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-23 216576]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-06 44768]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-17 864032]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-02-26 841248]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 IviRegMgr;IviRegMgr; C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-11-05 144640]
R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 RS_Service;Raw Socket Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [2010-01-29 260640]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2012-03-27 1148632]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-02 135664]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-02 135664]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-05-05 182768]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-11-05 50432]
S3 Partner Service;Partner Service; C:\ProgramData\Partner\Partner.exe [2010-05-05 332272]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-03 1255736]
-----------------EOF-----------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by Magda at 2012-04-04 18:36:15
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 178 GB (77%) free of 231 GB
Total RAM: 3997 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:36:22, on 4.4.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
C:\Program Files (x86)\Launch Manager\LManager.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Magda.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5i4711u36q
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... tbid=60747
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1750559
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5i4711u36q
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5i4711u36q
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll (file missing)
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Magda\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Acer VCM.lnk = ?
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.co ... .5.1.0.cab
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\Partner.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11193 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
"C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\PLFSetI.exe"
"C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Launch Manager\LManager.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\Winamp\winampa.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe"
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" /INSTALL
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantExperimentA/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/ --extension-process --renderer-print-preview --channel=3524.053E8700.1320463090 /prefetch:3
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheListSize/CacheListSize_13/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantExperimentA/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel=3524.065F11C0.438814585 /prefetch:3
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheListSize/CacheListSize_13/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantExperimentA/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/Disabled/ --renderer-print-preview --channel=3524.0664E1C0.1299628821 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\Magda\AppData\Local\Google\Chrome\APPLIC~1\180102~1.142\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Magda\AppData\Local\Google\Chrome\Application\18.0.1025.142\gcswf32.dll" --lang=cs --channel=3524.081A35F0.1857075769 --flash-broker=2148 /prefetch:4
"C:\Users\Magda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheListSize/CacheListSize_13/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantExperimentA/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/Disabled/ --renderer-print-preview --channel=3524.0A157C40.90296356 /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Magda\Downloads\RSITX64.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-487761364-2999805323-891229571-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-487761364-2999805323-891229571-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-06 1211776]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\Partner64.dll [2010-05-05 750064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-03-17 253040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
&Crawler Toolbar Helper - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2012-03-21 1237240]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\progra~1\mcafee\msk\mskapbho.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\Partner.dll [2010-05-05 433648]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-06 1003704]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-17 192112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-06 1211776]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-03-17 253040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-06 1003704]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-17 192112]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler Toolbar - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2012-03-21 1237240]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2009-07-19 503864]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-09-17 1842472]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-02-26 818720]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 415256]
"PLFSetI"=C:\Windows\PLFSetI.exe [2012-03-02 206208]
"SpywareTerminatorShield"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2012-03-27 2786480]
"SpywareTerminatorUpdater"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2012-03-27 3669680]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-05-05 39408]
"Google Update"=C:\Users\Magda\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-02 136176]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-02-13 3481408]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2009-09-24 825864]
"NortonOnlineBackupReminder"=C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [2009-07-24 588648]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-01-03 37296]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-06 4241512]
"WinampAgent"=C:\Program Files (x86)\Winamp\winampa.exe [2011-12-09 74752]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Acer VCM.lnk - C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 271360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2012-04-04 18:36:15 ----D---- C:\rsit
2012-04-04 18:36:15 ----D---- C:\Program Files\trend micro
2012-04-04 17:42:17 ----D---- C:\Program Files (x86)\Crawler
2012-04-04 17:42:08 ----A---- C:\Windows\system32\drivers\stflt.sys
2012-04-04 17:42:07 ----D---- C:\Users\Magda\AppData\Roaming\Spyware Terminator
2012-04-04 17:42:07 ----D---- C:\ProgramData\Spyware Terminator
2012-04-04 17:41:07 ----D---- C:\Program Files (x86)\Spyware Terminator
2012-03-22 14:09:16 ----D---- C:\Users\Magda\AppData\Roaming\PhotoFiltre Studio X
2012-03-22 14:09:12 ----D---- C:\Program Files (x86)\PhotoFiltre Studio X
2012-03-18 10:50:36 ----N---- C:\Windows\system32\MpSigStub.exe
2012-03-14 22:41:19 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-03-14 22:41:18 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-03-14 22:41:17 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-03-14 07:30:21 ----A---- C:\Windows\system32\win32k.sys
2012-03-14 07:30:16 ----A---- C:\Windows\system32\DWrite.dll
2012-03-14 07:30:15 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-03-14 07:29:18 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-03-14 07:29:18 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-03-14 07:29:17 ----A---- C:\Windows\system32\rdpwsx.dll
2012-03-14 07:29:13 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-03-14 07:29:13 ----A---- C:\Windows\system32\rdpcore.dll
2012-03-14 07:29:12 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-03-14 07:29:12 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-03-09 14:45:44 ----D---- C:\Program Files (x86)\Mad Scientist Productions
2012-03-09 14:16:39 ----D---- C:\Users\Magda\AppData\Roaming\WinRAR
2012-03-09 14:16:31 ----D---- C:\Program Files\WinRAR
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\url.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-03-09 10:02:25 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\wininet.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\wextract.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\webcheck.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\vbscript.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\urlmon.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\url.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\pngfilt.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\occache.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\msrating.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\msls31.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\mshtmler.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\mshtmled.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\mshtml.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\mshta.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\msfeedssync.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\msfeeds.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\licmgr10.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\jsproxy.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\jscript9.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\jscript.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\inseng.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\imgutil.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iexpress.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieUnatt.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieui.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iesysprep.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iesetup.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iertutil.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iernonce.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iepeers.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieframe.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\iedkcs32.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieapfltr.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieapfltr.dat
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieakui.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieaksie.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ieakeng.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\ie4uinit.exe
2012-03-09 10:02:25 ----A---- C:\Windows\system32\icardie.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\dxtrans.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\dxtmsft.dll
2012-03-09 10:02:25 ----A---- C:\Windows\system32\admparse.dll
2012-03-08 11:22:12 ----D---- C:\Users\Magda\AppData\Roaming\BSplayer
2012-03-07 19:18:46 ----D---- C:\Program Files (x86)\Microsoft WSE
2012-03-07 19:10:07 ----D---- C:\Program Files (x86)\Electronic Arts
2012-03-07 19:07:23 ----A---- C:\Windows\UC.PIF
2012-03-07 19:07:23 ----A---- C:\Windows\RAR.PIF
2012-03-07 19:07:23 ----A---- C:\Windows\PKZIP.PIF
2012-03-07 19:07:22 ----D---- C:\Users\Magda\AppData\Roaming\GHISLER
2012-03-07 19:07:22 ----D---- C:\totalcmd
2012-03-07 19:07:22 ----A---- C:\Windows\PKUNZIP.PIF
2012-03-07 19:07:22 ----A---- C:\Windows\NOCLOSE.PIF
2012-03-07 19:07:22 ----A---- C:\Windows\LHA.PIF
2012-03-07 19:07:22 ----A---- C:\Windows\ARJ.PIF
2012-03-07 19:04:25 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-03-07 19:03:53 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2012-03-07 19:03:04 ----D---- C:\Users\Magda\AppData\Roaming\DAEMON Tools Lite
2012-03-07 19:02:42 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-03-05 16:09:26 ----D---- C:\Windows\system32\SPReview
2012-03-05 16:08:52 ----D---- C:\Windows\system32\EventProviders
2012-03-05 16:04:10 ----A---- C:\Windows\system32\MRT.exe
2012-03-05 09:20:22 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-03-05 08:42:20 ----D---- C:\Program Files (x86)\MSXML 4.0
======List of files/folders modified in the last 1 month======
2012-04-04 18:36:22 ----D---- C:\Windows\Prefetch
2012-04-04 18:36:20 ----D---- C:\Windows\Temp
2012-04-04 18:36:15 ----RD---- C:\Program Files
2012-04-04 17:46:29 ----D---- C:\Windows\system32\config
2012-04-04 17:42:17 ----RD---- C:\Program Files (x86)
2012-04-04 17:42:08 ----D---- C:\Windows\system32\drivers
2012-04-04 17:42:07 ----HD---- C:\ProgramData
2012-04-03 21:49:12 ----SHD---- C:\System Volume Information
2012-04-02 20:20:44 ----D---- C:\Windows\System32
2012-04-02 20:20:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-04-02 20:20:43 ----D---- C:\Windows\inf
2012-03-30 11:23:29 ----RSD---- C:\Windows\assembly
2012-03-30 11:23:29 ----D---- C:\Windows\Microsoft.NET
2012-03-29 17:37:50 ----SHD---- C:\Windows\Installer
2012-03-24 09:08:07 ----D---- C:\Windows\SysWOW64
2012-03-22 14:09:17 ----D---- C:\Users\Magda\AppData\Roaming\Identities
2012-03-20 07:57:22 ----D---- C:\Windows\winsxs
2012-03-19 12:25:09 ----D---- C:\Windows\system32\NDF
2012-03-18 22:17:23 ----D---- C:\ProgramData\Adobe
2012-03-18 22:15:28 ----D---- C:\ProgramData\McAfee
2012-03-18 22:15:28 ----D---- C:\Program Files\Common Files
2012-03-18 22:15:28 ----D---- C:\Program Files (x86)\Common Files
2012-03-18 22:14:55 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-03-18 16:15:54 ----SD---- C:\ProgramData\Microsoft
2012-03-18 16:13:29 ----SD---- C:\Users\Magda\AppData\Roaming\Microsoft
2012-03-18 10:50:34 ----D---- C:\Windows\system32\catroot2
2012-03-14 22:41:25 ----D---- C:\Windows\system32\catroot
2012-03-13 20:04:34 ----D---- C:\Users\Magda\AppData\Roaming\Adobe
2012-03-11 07:45:18 ----AD---- C:\ProgramData\TEMP
2012-03-11 07:41:33 ----D---- C:\Windows\system32\Tasks
2012-03-11 07:34:11 ----D---- C:\Windows\system32\wdi
2012-03-10 17:15:25 ----D---- C:\Windows\rescache
2012-03-10 17:11:51 ----D---- C:\Windows\Logs
2012-03-09 10:25:48 ----D---- C:\Windows
2012-03-09 10:21:03 ----D---- C:\Windows\SYSWOW64\migration
2012-03-09 10:21:03 ----D---- C:\Windows\SYSWOW64\en-US
2012-03-09 10:21:02 ----D---- C:\Windows\system32\migration
2012-03-09 10:21:02 ----D---- C:\Windows\system32\en-US
2012-03-09 10:21:02 ----D---- C:\Windows\PolicyDefinitions
2012-03-09 10:21:00 ----D---- C:\Program Files\Internet Explorer
2012-03-09 10:21:00 ----D---- C:\Program Files (x86)\Internet Explorer
2012-03-08 11:22:02 ----D---- C:\Program Files (x86)\Webteh
2012-03-07 19:10:00 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-03-07 19:05:01 ----D---- C:\Windows\system32\DriverStore
2012-03-06 17:15:14 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-03-06 17:15:03 ----A---- C:\Windows\system32\aswBoot.exe
2012-03-05 16:27:37 ----D---- C:\Program Files\Windows Sidebar
2012-03-05 16:27:37 ----D---- C:\Program Files\Windows Mail
2012-03-05 16:27:37 ----D---- C:\Program Files\DVD Maker
2012-03-05 16:27:37 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-03-05 16:27:37 ----D---- C:\Program Files (x86)\Windows Portable Devices
2012-03-05 16:27:37 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-03-05 16:27:37 ----D---- C:\Program Files (x86)\Windows Media Player
2012-03-05 16:27:37 ----D---- C:\Program Files (x86)\Windows Mail
2012-03-05 16:27:36 ----D---- C:\Program Files\Windows Portable Devices
2012-03-05 16:27:36 ----D---- C:\Program Files\Windows Photo Viewer
2012-03-05 16:27:36 ----D---- C:\Program Files\Windows Media Player
2012-03-05 16:27:36 ----D---- C:\Program Files\Windows Journal
2012-03-05 16:27:36 ----D---- C:\Program Files\Common Files\System
2012-03-05 16:27:35 ----D---- C:\Windows\servicing
2012-03-05 16:27:35 ----D---- C:\Windows\ehome
2012-03-05 16:27:35 ----D---- C:\Program Files\Windows Defender
2012-03-05 16:27:31 ----D---- C:\Windows\SYSWOW64\da-DK
2012-03-05 16:27:30 ----D---- C:\Windows\SYSWOW64\Setup
2012-03-05 16:27:30 ----D---- C:\Windows\SYSWOW64\oobe
2012-03-05 16:27:30 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\wbem
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\sppui
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\migwiz
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\manifeststore
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\es-ES
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\en
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\Dism
2012-03-05 16:27:29 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-03-05 16:27:12 ----D---- C:\Windows\system32\da-DK
2012-03-05 16:27:09 ----D---- C:\Windows\system32\Setup
2012-03-05 16:27:09 ----D---- C:\Windows\system32\oobe
2012-03-05 16:27:09 ----D---- C:\Windows\system32\manifeststore
2012-03-05 16:27:09 ----D---- C:\Windows\system32\cs-CZ
2012-03-05 16:27:09 ----D---- C:\Windows\system32\AdvancedInstallers
2012-03-05 16:27:08 ----D---- C:\Windows\system32\sppui
2012-03-05 16:27:08 ----D---- C:\Windows\system32\es-ES
2012-03-05 16:27:08 ----D---- C:\Windows\system32\drivers\en-US
2012-03-05 16:27:07 ----D---- C:\Windows\system32\wbem
2012-03-05 16:27:07 ----D---- C:\Windows\system32\migwiz
2012-03-05 16:27:07 ----D---- C:\Windows\system32\Dism
2012-03-05 16:26:47 ----RSD---- C:\Windows\Fonts
2012-03-05 16:26:46 ----D---- C:\Windows\AppPatch
2012-03-05 16:26:31 ----D---- C:\Windows\system32\Boot
2012-03-05 16:22:06 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2012-03-05 16:22:05 ----A---- C:\Windows\system32\msclmd.dll
2012-03-05 16:04:14 ----D---- C:\Windows\debug
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-03-06 53080]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-06 819032]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-06 337240]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-06 59224]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-03-07 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-13 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-06 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-06 69976]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2012-04-04 51496]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-03-01 1593384]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2009-08-10 686080]
R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2009-03-25 25608]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-08-25 10611552]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-05 18432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-09-17 292912]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-05 16896]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-13 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-13 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-04-27 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-27 80384]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-06-30 52264]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-06-30 98344]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-06-30 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-06-30 21160]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-11-13 67072]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2009-09-14 6952960]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-13 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-13 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-23 216576]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-06 44768]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-17 864032]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-02-26 841248]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 IviRegMgr;IviRegMgr; C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-11-05 144640]
R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 RS_Service;Raw Socket Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [2010-01-29 260640]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2012-03-27 1148632]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-02 135664]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-02 135664]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-05-05 182768]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-11-05 50432]
S3 Partner Service;Partner Service; C:\ProgramData\Partner\Partner.exe [2010-05-05 332272]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-03 1255736]
-----------------EOF-----------------