Pomalý boot a systém, divná aktivita HDD, sítě
Napsal: 27 srp 2012 11:27
Zdravím,
v poslední době se setkávám se symptomy podobné viru (HDD aktivita, síť, podivné procesy, dlouhý boot atp.). Níže přikládám log, děkuji za rady:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Michal Charvat at 2012-08-27 12:24:51
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 402 GB (58%) free of 699 GB
Total RAM: 8127 MB (65% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:24:58, on 27.8.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal
Running processes:
C:\Users\Michal Charvat\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe
C:\Program Files (x86)\GIGABYTE\GHOST(6980)\GHOSTOPEN.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\WinSCP\WinSCP.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Michal Charvat.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKLM\..\Run: [Tilt] C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe
O4 - HKLM\..\Run: [ghost] C:\Program Files (x86)\GIGABYTE\GHOST(6980)\ghostopen.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ManicTime] C:\Program Files (x86)\ManicTime\ManicTime.exe /minimized /name:
O4 - HKCU\..\Run: [TrayStatus] "C:\Program Files (x86)\TrayStatus\TrayStatus.exe"
O4 - Startup: Dropbox.lnk = C:\Users\Michal Charvat\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Bluetooth.lnk = ?
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/ ... erCtrl.cab
O16 - DPF: {8CFCF42C-1C64-47D6-AEEC-F9D001832ED3} (DellSystem.Scanner) - http://xserv.dell.com/DellDriverScanner/DellSystem.CAB
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... .5.5.0.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9AE2576B-34AC-481D-8C62-79071480C87A}: NameServer = 4.2.2.2,4.2.2.3
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: CyberGhost VPN Client (CGVPNCliSrvc) - mobile concepts GmbH - C:\Program Files\CyberGhost VPN\CGVPNCliService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\WINDOWS\SysWOW64\NLSSRV32.EXE
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: TurboBoost - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\WINDOWS\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: DW WLAN Tray Service (wltrysvc) - Dell Inc. - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10906 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\WINDOWS\system32\services.exe
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\lsm.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 15883504
\??\C:\WINDOWS\system32\conhost.exe "16126834131866303698-14331897961413868289-1021171841-18492178211512487253334472296
"C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe"
C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
atieclxx
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PCNETSERVICE\Binn\sqlservr.exe" -sPCNETSERVICE
C:\WINDOWS\System32\svchost.exe -k HPZ12
"C:\Program Files\Raxco\PerfectDisk\PDAgent.exe"
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"taskhost.exe"
"C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PCNETSERVICE\Binn\sqlagent.EXE" -i PCNETSERVICE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\Explorer.EXE
WLIDSvcM.exe 2356
"C:\WINDOWS\system32\Dwm.exe"
\??\C:\WINDOWS\system32\conhost.exe "444445365-1223136889-100717402096500148318096829351113934796-914751758-1183046987
"C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k bthsvcs
"C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe"
"C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE"
"C:\Program Files\Saitek\SD6\Software\ProfilerU.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Saitek\SD6\Software\SaiMfd.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Dell\QuickSet\quickset.exe"
"C:\Program Files (x86)\ManicTime\ManicTime.exe" /minimized /name:
"C:\Program Files (x86)\TrayStatus\TrayStatus.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Users\Michal Charvat\AppData\Roaming\Dropbox\bin\Dropbox.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe"
"C:\Program Files (x86)\GIGABYTE\GHOST(6980)\GHOSTOPEN.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
taskeng.exe {0619B88D-4099-4FA0-8A83-C968963E9D75}
"C:\Program Files\PowerPlanAssistant\PowerPlanAssistant.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe"
"C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe"
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" -- "http://www.wikipedia.org/wiki/Internati ... r_Identity"
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --extension-process --renderer-print-preview --channel="2484.1.623553535\782387253" /prefetch:3
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --extension-process --renderer-print-preview --channel="2484.2.843033632\1526381984" /prefetch:3
"C:\WINDOWS\system32\taskmgr.exe" /1
"C:\Program Files\HWiNFO64\HWiNFO64.EXE"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2484.10.340274576\349033896" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2484.11.1705525923\214019449" --reduce-gpu-sandbox --disable-image-transport-surface --gpu-vendor-id=0x1002 --gpu-device-id=0x68c1 --gpu-driver-version=8.982.0.0 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files\Dell Support Center\uaclauncher.exe" -silentenumeration -st SystemToolsDailyTest --ignoresecondarysplash --runsilently
"C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe"
"C:\Program Files (x86)\WinSCP\WinSCP.exe"
"C:\WINDOWS\system32\SnippingTool.exe"
/QuitInfo:0000000000000828;000000000000081C;
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/HttpPipeliningCompatibility/disable_test/IdleSktToImpact/idle_timeout_10/NetworkConnectivity/disable_network_stats/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="2484.94.584317858\1600496553" /prefetch:3
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/HttpPipeliningCompatibility/disable_test/IdleSktToImpact/idle_timeout_10/NetworkConnectivity/disable_network_stats/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="2484.95.163185494\1210406718" /prefetch:3
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=service --lang=cs
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi-broker --channel="2484.97.1098191519\1334237276" --lang=cs /prefetch:14
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" "C:\Users\Michal Charvat\Downloads\eTicket_4667.pdf"
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" --channel=3228.0036F788.1759526595 --type=renderer "C:\Users\Michal Charvat\Downloads\eTicket_4667.pdf"
C:\WINDOWS\splwow64.exe 8192
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/HttpPipeliningCompatibility/disable_test/IdleSktToImpact/idle_timeout_10/NetworkConnectivity/disable_network_stats/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="2484.98.1534977475\1256402066" /prefetch:3
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/HttpPipeliningCompatibility/disable_test/IdleSktToImpact/idle_timeout_10/NetworkConnectivity/disable_network_stats/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="2484.99.1930234416\536558341" /prefetch:3
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe21_ Global\UsGthrCtrlFltPipeMssGthrPipe21 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Users\Michal Charvat\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3847059355-3794568477-1451639886-1000Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3847059355-3794568477-1451639886-1000UA.job
C:\WINDOWS\tasks\PCDoctorBackgroundMonitorTask-Delay.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-08-05 545264]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-08-05 193520]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-08-05 453104]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-08-05 157680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDA57003-0068-4ed2-9D32-4D1EC707D94D}]
Microsoft Web Test Recorder 10.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2010-03-19 61360]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [2010-02-02 5712896]
"ProfilerU"=C:\Program Files\Saitek\SD6\Software\ProfilerU.exe [2010-09-06 310272]
"SaiMfd"=C:\Program Files\Saitek\SD6\Software\SaiMfd.exe [2010-09-06 158208]
"POWER PLAN ASSISTANT"=C:\Program Files\PowerPlanAssistant\PowerPlanAssistantLauncher.exe [2012-07-26 30208]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-23 1890088]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-03-07 4081008]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-06-17 487424]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2010-01-06 3179288]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ManicTime"=C:\Program Files (x86)\ManicTime\ManicTime.exe [2012-08-06 249712]
"TrayStatus"=C:\Program Files (x86)\TrayStatus\TrayStatus.exe [2011-05-18 283032]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Webcam Central]
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2009-06-24 409744]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Michal Charvat\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-14 116648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HTC Sync Loader]
C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17 651264]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Remote PC Server.lnk]
C:\PROGRA~2\REMOTE~1.3\REMOTE~1.EXE [2011-09-19 92160]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-06-07 56128]
"KeePass 2 PreLoad"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2012-05-01 1895424]
"Tilt"=C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe [2011-04-20 729088]
"ghost"=C:\Program Files (x86)\GIGABYTE\GHOST(6980)\ghostopen.exe [2010-02-08 192000]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-08-06 642216]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2012-04-18 421888]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Users\Michal Charvat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Michal Charvat\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll [2012-05-14 249344]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - C:\WINDOWS\NOTEPAD.EXE %1
======List of files/folders created in the last 1 month======
2012-08-27 12:24:51 ----D---- C:\rsit
2012-08-27 12:24:51 ----D---- C:\Program Files\trend micro
2012-08-27 11:00:10 ----ASH---- C:\hiberfil.sys
2012-08-26 15:35:03 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2012-08-25 11:28:19 ----D---- C:\Program Files (x86)\DOSBox-0.74
2012-08-24 23:16:43 ----D---- C:\Program Files (x86)\MozBackup
2012-08-24 18:25:44 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Thunderbird
2012-08-24 15:04:30 ----D---- C:\Program Files (x86)\hMailServer
2012-08-24 14:40:01 ----D---- C:\Users\Michal Charvat\AppData\Roaming\IsolatedStorage
2012-08-24 14:39:01 ----D---- C:\ProgramData\Encryptomatic, LLC
2012-08-24 14:38:08 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Encryptomatic, LLC
2012-08-24 12:46:53 ----D---- C:\Program Files (x86)\odf-converter-integrator
2012-08-24 12:12:49 ----D---- C:\Users\Michal Charvat\AppData\Roaming\MyPhoneExplorer
2012-08-24 12:12:44 ----D---- C:\Program Files (x86)\MyPhoneExplorer
2012-08-24 12:04:33 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Mozilla
2012-08-24 12:04:29 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2012-08-23 14:04:09 ----D---- C:\ProgramData\PC-Doctor for Windows
2012-08-23 11:33:20 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Apple Computer
2012-08-22 22:47:13 ----D---- C:\ProgramData\Temp
2012-08-22 22:47:03 ----D---- C:\ProgramData\Ask
2012-08-22 22:26:00 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Ustream Producer
2012-08-22 22:25:59 ----D---- C:\ProgramData\Telestream
2012-08-22 22:22:32 ----D---- C:\Program Files (x86)\QuickTime
2012-08-22 22:22:30 ----D---- C:\ProgramData\Apple Computer
2012-08-22 22:21:11 ----D---- C:\ProgramData\Apple
2012-08-22 22:06:27 ----D---- C:\ProgramData\SplitMediaLabs
2012-08-22 22:05:42 ----D---- C:\Users\Michal Charvat\AppData\Roaming\SplitMediaLabs
2012-08-20 20:34:59 ----D---- C:\Program Files (x86)\Dead City
2012-08-19 17:30:34 ----D---- C:\Program Files (x86)\SpeedFan
2012-08-19 14:29:17 ----A---- C:\WINDOWS\system32\drivers\AmdTools64.sys
2012-08-19 14:29:16 ----D---- C:\Program Files (x86)\AMD GPU Clock Tool
2012-08-18 21:57:55 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Screaming Bee
2012-08-18 21:56:33 ----D---- C:\ProgramData\Screaming Bee
2012-08-18 12:35:01 ----D---- C:\Users\Michal Charvat\AppData\Roaming\SUPERAntiSpyware.com
2012-08-18 12:34:48 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2012-08-18 12:34:48 ----D---- C:\Program Files\SUPERAntiSpyware
2012-08-18 12:19:19 ----D---- C:\Users\Michal Charvat\AppData\Roaming\ATI
2012-08-18 12:19:19 ----D---- C:\ProgramData\ATI
2012-08-18 12:13:35 ----D---- C:\Program Files (x86)\AMD APP
2012-08-18 12:13:32 ----D---- C:\Program Files\Common Files\ATI Technologies
2012-08-18 12:12:51 ----D---- C:\Program Files (x86)\ATI Technologies
2012-08-18 12:12:44 ----D---- C:\Program Files\ATI Technologies
2012-08-18 12:12:43 ----D---- C:\Program Files\ATI
2012-08-18 12:12:06 ----D---- C:\AMD
2012-08-18 12:04:13 ----SHD---- C:\$RECYCLE.BIN
2012-08-18 11:56:45 ----D---- C:\WINDOWS\temp
2012-08-18 11:56:44 ----A---- C:\ComboFix.txt
2012-08-18 11:45:08 ----A---- C:\WINDOWS\zip.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\SWSC.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\SWREG.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\sed.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\PEV.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\NIRCMD.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\MBR.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\grep.exe
2012-08-18 11:45:00 ----D---- C:\Qoobox
2012-08-18 11:44:47 ----D---- C:\WINDOWS\erdnt
2012-08-18 11:24:36 ----A---- C:\WINDOWS\system32\drivers\iaStor.sys
2012-08-17 15:14:52 ----A---- C:\WINDOWS\system32\sfcdetails.txt
2012-08-17 11:00:13 ----D---- C:\WINDOWS\SoftwareDistribution
2012-08-17 10:50:33 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2012-08-17 10:49:35 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2012-08-17 10:49:35 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2012-08-17 10:49:35 ----A---- C:\WINDOWS\system32\url.dll
2012-08-17 10:49:35 ----A---- C:\WINDOWS\system32\mshtmled.dll
2012-08-17 10:49:35 ----A---- C:\WINDOWS\system32\iertutil.dll
2012-08-17 10:49:34 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2012-08-17 10:49:34 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2012-08-17 10:49:34 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2012-08-17 10:49:34 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2012-08-17 10:49:34 ----A---- C:\WINDOWS\system32\urlmon.dll
2012-08-17 10:49:34 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2012-08-17 10:49:34 ----A---- C:\WINDOWS\system32\ieui.dll
2012-08-17 10:49:32 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2012-08-17 10:49:32 ----A---- C:\WINDOWS\system32\wininet.dll
2012-08-17 10:49:32 ----A---- C:\WINDOWS\system32\jscript9.dll
2012-08-17 10:49:31 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2012-08-17 10:49:31 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2012-08-17 10:49:31 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2012-08-17 10:49:31 ----A---- C:\WINDOWS\system32\jsproxy.dll
2012-08-17 10:49:31 ----A---- C:\WINDOWS\system32\jscript.dll
2012-08-17 10:49:30 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2012-08-17 10:49:29 ----A---- C:\WINDOWS\system32\mshtml.dll
2012-08-17 10:49:28 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2012-08-17 10:49:28 ----A---- C:\WINDOWS\system32\ieframe.dll
2012-08-17 10:09:18 ----D---- C:\0ee683450aa1c20f17befa4eb0fc4a
2012-08-17 10:07:21 ----A---- C:\WINDOWS\system32\fix.bat
2012-08-16 17:56:22 ----N---- C:\bootsqm.dat
2012-08-16 15:35:55 ----A---- C:\WINDOWS\system32\monitor.lnk
2012-08-15 12:31:15 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2012-08-15 12:31:15 ----A---- C:\WINDOWS\system32\srcore.dll
2012-08-15 12:31:13 ----A---- C:\WINDOWS\SYSWOW64\win32spl.dll
2012-08-15 12:31:13 ----A---- C:\WINDOWS\system32\win32spl.dll
2012-08-15 12:31:13 ----A---- C:\WINDOWS\system32\spoolsv.exe
2012-08-15 12:31:13 ----A---- C:\WINDOWS\splwow64.exe
2012-08-15 12:31:11 ----A---- C:\WINDOWS\SYSWOW64\netapi32.dll
2012-08-15 12:31:11 ----A---- C:\WINDOWS\SYSWOW64\browcli.dll
2012-08-15 12:31:11 ----A---- C:\WINDOWS\system32\netapi32.dll
2012-08-15 12:31:11 ----A---- C:\WINDOWS\system32\browser.dll
2012-08-15 12:31:11 ----A---- C:\WINDOWS\system32\browcli.dll
2012-08-15 12:31:10 ----A---- C:\WINDOWS\system32\win32k.sys
2012-08-15 12:31:10 ----A---- C:\WINDOWS\system32\localspl.dll
2012-08-14 10:05:22 ----D---- C:\Program Files (x86)\OpenCandy
2012-08-14 10:04:25 ----D---- C:\Users\Michal Charvat\AppData\Roaming\OpenCandy
2012-08-14 09:11:14 ----A---- C:\WINDOWS\system32\drivers\vpchbus.sys
2012-08-14 09:11:14 ----A---- C:\WINDOWS\system32\drivers\vpcusb.sys
2012-08-14 09:11:12 ----A---- C:\WINDOWS\system32\vpchbuspipe.dll
2012-08-14 08:58:47 ----D---- C:\Program Files\OpenCandy
2012-08-13 10:22:14 ----A---- C:\WINDOWS\system32\WdfCoInstaller01005.dll
2012-08-13 10:22:14 ----A---- C:\WINDOWS\system32\drivers\WdfCoInstaller01005.dll
2012-08-13 10:22:14 ----A---- C:\WINDOWS\system32\drivers\ssadwh.sys
2012-08-13 10:22:14 ----A---- C:\WINDOWS\system32\drivers\ssadcm.sys
2012-08-13 10:13:12 ----A---- C:\WINDOWS\system32\drivers\sscdwh.sys
2012-08-13 10:13:12 ----A---- C:\WINDOWS\system32\drivers\sscdcm.sys
2012-08-12 23:53:02 ----SHD---- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2012-08-12 12:56:37 ----A---- C:\Users\Michal Charvat\AppData\Roaming\minecraft_server.jar
2012-08-10 21:04:53 ----D---- C:\Program Files (x86)\FSFDT
2012-08-09 17:55:30 ----N---- C:\WINDOWS\SYSWOW64\mwgfxcopy.exe
2012-08-09 17:55:30 ----N---- C:\WINDOWS\SYSWOW64\mwgfx24.dll
2012-08-09 17:55:30 ----N---- C:\WINDOWS\SYSWOW64\mwgfx.dll
2012-08-09 17:55:30 ----N---- C:\WINDOWS\SYSWOW64\mwdds.dll
2012-08-09 17:55:30 ----N---- C:\WINDOWS\SYSWOW64\mwace.dll
2012-08-09 17:55:30 ----D---- C:\Graphics
2012-08-09 16:57:12 ----A---- C:\WINDOWS\SYSWOW64\VB5DB.DLL
2012-08-09 16:47:29 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2012-08-09 16:47:19 ----D---- C:\Users\Michal Charvat\AppData\Roaming\DAEMON Tools Lite
2012-08-09 16:45:45 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-08-09 16:32:16 ----D---- C:\WINDOWS\cs
2012-08-08 21:40:18 ----D---- C:\Program Files\CyberGhost VPN
2012-08-08 15:11:58 ----D---- C:\Program Files (x86)\Windows Live
2012-08-08 15:11:45 ----D---- C:\WINDOWS\PCHEALTH
2012-08-08 12:58:03 ----D---- C:\Users\Michal Charvat\AppData\Roaming\WorldPainter
2012-08-08 12:57:59 ----D---- C:\Program Files\WorldPainter
2012-08-08 12:54:39 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Avanti
2012-08-08 12:54:29 ----D---- C:\Program Files (x86)\Ambient
2012-08-08 12:34:09 ----D---- C:\Users\Michal Charvat\AppData\Roaming\pymclevel
2012-08-07 12:40:20 ----A---- C:\WINDOWS\SYSWOW64\dx7vb.dll
2012-08-07 12:40:20 ----A---- C:\WINDOWS\SYSWOW64\d3drm.dll
2012-08-07 12:40:18 ----A---- C:\WINDOWS\SYSWOW64\dx8vb.dll
2012-08-07 11:39:30 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Nitro PDF
2012-08-07 11:38:54 ----D---- C:\ProgramData\Nitro PDF
2012-08-07 09:32:22 ----D---- C:\Program Files\Paint.NET
2012-08-06 15:28:47 ----D---- C:\Program Files (x86)\Microsoft
2012-08-05 20:20:13 ----N---- C:\WINDOWS\system32\stapi64.dll
2012-08-05 20:19:45 ----A---- C:\WINDOWS\system32\ctapo64.dll
2012-08-05 20:19:45 ----A---- C:\WINDOWS\system32\AESTEC64.dll
2012-08-05 20:19:45 ----A---- C:\WINDOWS\system32\AESTAR64.dll
2012-08-05 20:19:45 ----A---- C:\WINDOWS\system32\AESTAC64.dll
2012-08-05 20:19:44 ----A---- C:\WINDOWS\system32\stlang64.dll
2012-08-05 20:19:44 ----A---- C:\WINDOWS\system32\idt64mp1.exe
2012-08-05 20:19:10 ----A---- C:\WINDOWS\system32\drivers\stwrt64.sys
2012-08-05 20:19:08 ----A---- C:\WINDOWS\system32\stcplx64.dll
2012-08-05 20:19:08 ----A---- C:\WINDOWS\system32\stapo64.dll
2012-08-05 20:19:08 ----A---- C:\WINDOWS\system32\st646289.dll
2012-08-05 20:18:42 ----D---- C:\Program Files\IDT
2012-08-05 19:12:00 ----D---- C:\ProgramData\Raxco
2012-08-05 19:11:59 ----D---- C:\Program Files\Raxco
2012-08-05 19:11:59 ----D---- C:\Program Files\Common Files\Raxco
2012-08-05 19:09:36 ----D---- C:\Program Files\Recuva
2012-08-05 19:02:13 ----A---- C:\WINDOWS\system32\ctppld64.dll
2012-08-05 19:02:13 ----A---- C:\WINDOWS\system32\ctapo32.dll
2012-08-05 19:02:13 ----A---- C:\WINDOWS\system32\AESTCo64.dll
2012-08-05 18:46:03 ----ASH---- C:\pagefile.sys
2012-08-05 18:43:04 ----D---- C:\Users\Michal Charvat\AppData\Roaming\ESET
2012-08-05 18:42:21 ----D---- C:\ProgramData\ESET
2012-08-05 18:42:21 ----D---- C:\Program Files\ESET
2012-08-05 18:39:31 ----A---- C:\WINDOWS\system32\javaws.exe
2012-08-05 18:39:27 ----A---- C:\WINDOWS\system32\javaw.exe
2012-08-05 18:39:27 ----A---- C:\WINDOWS\system32\java.exe
2012-08-05 18:39:04 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2012-08-05 18:38:54 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2012-08-05 18:38:54 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2012-08-05 18:38:47 ----D---- C:\Program Files (x86)\Java
2012-08-05 18:23:50 ----D---- C:\Program Files\Synaptics
2012-08-05 17:58:50 ----D---- C:\Program Files\Saitek
2012-08-05 13:44:00 ----D---- C:\Nová složka
2012-07-29 23:49:42 ----D---- C:\ProgramData\IsolatedStorage
2012-07-28 06:09:20 ----A---- C:\WINDOWS\SYSWOW64\atiumdag.dll
2012-07-28 06:07:44 ----A---- C:\WINDOWS\system32\drivers\atikmdag.sys
2012-07-28 05:43:12 ----A---- C:\WINDOWS\system32\coinst_8.982.dll
2012-07-28 05:19:34 ----A---- C:\WINDOWS\system32\atio6axx.dll
2012-07-28 04:50:10 ----A---- C:\WINDOWS\SYSWOW64\atioglxx.dll
2012-07-28 04:15:50 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2012-07-28 04:15:42 ----A---- C:\WINDOWS\SYSWOW64\aticfx32.dll
2012-07-28 04:13:56 ----A---- C:\WINDOWS\system32\aticfx64.dll
2012-07-28 04:10:40 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2012-07-28 04:10:34 ----A---- C:\WINDOWS\system32\atieclxx.exe
2012-07-28 04:09:44 ----A---- C:\WINDOWS\system32\atiesrxx.exe
2012-07-28 04:08:20 ----A---- C:\WINDOWS\system32\atitmm64.dll
2012-07-28 04:08:04 ----A---- C:\WINDOWS\system32\atimuixx.dll
2012-07-28 04:07:58 ----A---- C:\WINDOWS\system32\atiedu64.dll
2012-07-28 04:07:52 ----A---- C:\WINDOWS\SYSWOW64\ati2edxx.dll
2012-07-28 04:07:10 ----A---- C:\WINDOWS\SYSWOW64\atidxx32.dll
2012-07-28 03:51:12 ----A---- C:\WINDOWS\system32\atidxx64.dll
2012-07-28 03:41:32 ----A---- C:\WINDOWS\system32\atiumd6a.dll
2012-07-28 03:35:10 ----A---- C:\WINDOWS\system32\aticalrt64.dll
2012-07-28 03:35:08 ----A---- C:\WINDOWS\SYSWOW64\aticalrt.dll
2012-07-28 03:35:02 ----A---- C:\WINDOWS\system32\aticalcl64.dll
2012-07-28 03:35:00 ----A---- C:\WINDOWS\SYSWOW64\aticalcl.dll
2012-07-28 03:34:48 ----A---- C:\WINDOWS\system32\aticaldd64.dll
2012-07-28 03:32:32 ----A---- C:\WINDOWS\SYSWOW64\atiumdva.dll
2012-07-28 03:30:10 ----A---- C:\WINDOWS\SYSWOW64\aticaldd.dll
2012-07-28 03:25:52 ----A---- C:\WINDOWS\system32\atiumd64.dll
2012-07-28 03:15:32 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2012-07-28 03:15:22 ----A---- C:\WINDOWS\SYSWOW64\atiadlxy.dll
2012-07-28 03:15:12 ----A---- C:\WINDOWS\system32\atig6pxx.dll
2012-07-28 03:15:08 ----A---- C:\WINDOWS\SYSWOW64\atiglpxx.dll
2012-07-28 03:15:08 ----A---- C:\WINDOWS\system32\atiglpxx.dll
2012-07-28 03:15:04 ----A---- C:\WINDOWS\system32\atig6txx.dll
2012-07-28 03:14:56 ----A---- C:\WINDOWS\SYSWOW64\atigktxx.dll
2012-07-28 03:14:46 ----A---- C:\WINDOWS\system32\drivers\atikmpag.sys
2012-07-28 03:13:54 ----A---- C:\WINDOWS\system32\atiuxp64.dll
2012-07-28 03:13:48 ----A---- C:\WINDOWS\SYSWOW64\atiuxpag.dll
2012-07-28 03:13:40 ----A---- C:\WINDOWS\system32\atiu9p64.dll
2012-07-28 03:13:32 ----A---- C:\WINDOWS\SYSWOW64\atiu9pag.dll
2012-07-28 03:12:54 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2012-07-28 03:08:42 ----A---- C:\WINDOWS\system32\atimpc64.dll
2012-07-28 03:08:42 ----A---- C:\WINDOWS\system32\amdpcom64.dll
2012-07-28 03:08:36 ----A---- C:\WINDOWS\SYSWOW64\atimpc32.dll
2012-07-28 03:08:36 ----A---- C:\WINDOWS\SYSWOW64\amdpcom32.dll
2012-07-28 02:54:00 ----A---- C:\WINDOWS\WLXPGSS.SCR
======List of files/folders modified in the last 1 month======
2012-08-27 12:24:51 ----RD---- C:\Program Files
2012-08-27 11:37:18 ----D---- C:\Users\Michal Charvat\AppData\Roaming\.minecraft
2012-08-27 11:11:57 ----D---- C:\WINDOWS\system32\config
2012-08-27 11:00:52 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Dropbox
2012-08-27 10:59:51 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2012-08-26 19:51:35 ----D---- C:\Users\Michal Charvat\AppData\Roaming\teamspeak2
2012-08-26 17:41:05 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Skype
2012-08-26 17:20:24 ----D---- C:\Users\Michal Charvat\AppData\Roaming\TS3Client
2012-08-26 15:39:25 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Mumble
2012-08-26 15:35:38 ----D---- C:\WINDOWS\inf
2012-08-26 15:35:17 ----AD---- C:\WINDOWS
2012-08-26 15:35:03 ----AD---- C:\WINDOWS\System32
2012-08-25 23:02:53 ----D---- C:\Users\Michal Charvat\AppData\Roaming\KeePass
2012-08-25 18:00:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-08-25 14:02:56 ----D---- C:\WINDOWS\Microsoft.NET
2012-08-25 14:02:55 ----RSD---- C:\WINDOWS\assembly
2012-08-25 12:46:00 ----D---- C:\Games
2012-08-25 11:28:19 ----RD---- C:\Program Files (x86)
2012-08-24 23:12:30 ----SHD---- C:\System Volume Information
2012-08-24 22:58:12 ----D---- C:\WINDOWS\Prefetch
2012-08-24 22:55:32 ----D---- C:\Config.Msi
2012-08-24 22:53:44 ----SHD---- C:\WINDOWS\Installer
2012-08-24 22:49:45 ----D---- C:\WINDOWS\system32\catroot2
2012-08-24 22:48:44 ----D---- C:\ProgramData
2012-08-24 22:48:10 ----D---- C:\WINDOWS\system32\Tasks
2012-08-24 22:42:43 ----D---- C:\WINDOWS\SysWOW64
2012-08-24 22:36:41 ----D---- C:\Users\Michal Charvat\AppData\Roaming\uTorrent
2012-08-24 22:34:35 ----D---- C:\Program Files\CCleaner
2012-08-24 22:16:25 ----D---- C:\WINDOWS\winsxs
2012-08-24 22:12:55 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2012-08-24 22:12:30 ----RSD---- C:\WINDOWS\Fonts
2012-08-24 22:07:04 ----D---- C:\ProgramData\Microsoft Help
2012-08-24 22:05:51 ----SD---- C:\ProgramData\Microsoft
2012-08-24 22:05:51 ----D---- C:\Program Files (x86)\Microsoft Office
2012-08-24 22:05:19 ----D---- C:\WINDOWS\ShellNew
2012-08-24 22:05:17 ----D---- C:\Program Files (x86)\MSBuild
2012-08-24 22:02:19 ----A---- C:\WINDOWS\win.ini
2012-08-24 22:00:37 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-08-24 21:46:56 ----SD---- C:\Users\Michal Charvat\AppData\Roaming\Microsoft
2012-08-24 16:40:32 ----D---- C:\Users\Michal Charvat\AppData\Roaming\FileZilla
2012-08-24 08:55:15 ----D---- C:\ProgramData\PCDr
2012-08-23 14:04:10 ----D---- C:\Program Files\Dell Support Center
2012-08-23 14:04:09 ----D---- C:\ProgramData\Dell
2012-08-23 14:02:57 ----D---- C:\WINDOWS\Tasks
2012-08-23 11:56:43 ----D---- C:\Program Files (x86)\Common Files
2012-08-22 22:49:07 ----D---- C:\WINDOWS\system32\drivers
2012-08-22 22:49:07 ----D---- C:\WINDOWS\system32\catroot
2012-08-22 22:49:06 ----D---- C:\WINDOWS\system32\DriverStore
2012-08-22 22:23:24 ----D---- C:\Program Files (x86)\Internet Explorer
2012-08-22 22:19:42 ----D---- C:\Program Files (x86)\Adobe
2012-08-22 22:16:09 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Adobe
2012-08-21 16:29:51 ----D---- C:\Users\Michal Charvat\AppData\Roaming\ICQ
2012-08-18 12:13:32 ----D---- C:\Program Files\Common Files
2012-08-18 11:54:29 ----A---- C:\WINDOWS\system.ini
2012-08-18 11:54:25 ----D---- C:\WINDOWS\system32\drivers\etc
2012-08-18 11:51:57 ----D---- C:\WINDOWS\SYSWOW64\drivers
2012-08-18 11:51:57 ----D---- C:\WINDOWS\AppPatch
2012-08-18 11:24:33 ----D---- C:\Program Files (x86)\Intel
2012-08-17 23:10:19 ----D---- C:\Program Files (x86)\DriverCleanerDotNET
2012-08-17 14:22:13 ----D---- C:\WINDOWS\Logs
2012-08-17 14:22:13 ----D---- C:\WINDOWS\debug
2012-08-17 11:23:20 ----D---- C:\WINDOWS\SYSWOW64\migration
2012-08-17 11:23:20 ----D---- C:\WINDOWS\system32\migration
2012-08-17 11:23:20 ----D---- C:\Program Files\Internet Explorer
2012-08-16 19:46:38 ----D---- C:\Program Files (x86)\WinSCP
2012-08-15 23:05:16 ----A---- C:\WINDOWS\system32\MRT.exe
2012-08-15 14:51:38 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2012-08-14 18:12:24 ----D---- C:\WINDOWS\SYSWOW64\directx
2012-08-14 18:12:09 ----HD---- C:\WINDOWS\msdownld.tmp
2012-08-14 17:21:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-08-14 16:45:01 ----D---- C:\Program Files (x86)\Google
2012-08-14 11:58:18 ----D---- C:\ProgramData\Samsung
2012-08-14 11:06:32 ----D---- C:\Program Files (x86)\ManicTime
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\zh-TW
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\tr-TR
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\ro-RO
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\pt-PT
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\pt-BR
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\nl-NL
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\nb-NO
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\ja-JP
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\it-IT
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\fr-FR
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\fi-FI
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\en-US
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\el-GR
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\de-DE
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\cs-CZ
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\zh-CN
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\th-TH
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\sv-SE
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\ru-RU
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\pl-PL
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\ko-KR
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\hu-HU
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\he-IL
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\es-ES
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\drivers\en-US
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\da-DK
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\ar-SA
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\en-US
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2012-08-13 10:09:12 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Samsung
2012-08-12 23:54:47 ----D---- C:\ProgramData\TuneUp Software
2012-08-12 10:19:31 ----D---- C:\WINDOWS\system32\NDF
2012-08-08 15:13:06 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2012-08-07 11:25:47 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Downloaded Installations
2012-08-05 18:39:21 ----D---- C:\Program Files\Java
2012-08-05 18:38:48 ----A---- C:\WINDOWS\SYSWOW64\npDeployJava1.dll
2012-08-05 18:38:48 ----A---- C:\WINDOWS\SYSWOW64\deployJava1.dll
2012-08-05 18:26:49 ----D---- C:\WINDOWS\Minidump
2012-08-05 18:22:07 ----D---- C:\Program Files\PowerPlanAssistant
2012-08-05 17:57:43 ----D---- C:\Program Files\SmartTechnology
2012-08-05 17:26:12 ----D---- C:\WINDOWS\pss
2012-08-05 14:12:55 ----D---- C:\WINDOWS\symbols
2012-08-05 13:58:29 ----D---- C:\ProgramData\dbg
2012-08-05 13:45:00 ----D---- C:\symbols
2012-07-31 19:27:42 ----D---- C:\Program Files\TeamSpeak 3 Client
2012-07-30 14:16:48 ----A---- C:\WINDOWS\SYSWOW64\Redemption.dll
2012-07-28 18:34:25 ----D---- C:\WINDOWS\system32\LogFiles
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 epfwwfp;epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [2012-03-14 62496]
R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2012-05-30 569152]
R0 rdyboost;ReadyBoost; C:\WINDOWS\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2012-08-09 560184]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [2012-03-14 38288]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Program Files\HWiNFO64\HWiNFO64A.SYS [2012-02-07 30592]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 DefragFS;DefragFS; C:\WINDOWS\system32\drivers\DefragFS.sys [2011-12-02 140816]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2012-03-14 187632]
R2 PDFSFilter;PDFsFilter; C:\WINDOWS\system32\DRIVERS\PDFsFilter.sys [2012-05-10 82160]
R2 TurboB;Turbo Boost UI Monitor driver; C:\WINDOWS\system32\DRIVERS\TurboB.sys [2009-11-02 13784]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2012-07-28 10278912]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2012-07-28 368640]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdW76.sys [2012-05-14 96896]
R3 BCM42RLY;BCM42RLY; C:\WINDOWS\system32\drivers\BCM42RLY.sys [2010-02-02 22520]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\WINDOWS\system32\DRIVERS\bcmwl664.sys [2010-02-02 3058168]
R3 BcmVWL;Broadcom Virtual Wireless; C:\WINDOWS\system32\DRIVERS\bcmvwl64.sys [2010-02-03 20984]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btusbflt;Bluetooth USB Filter; C:\WINDOWS\system32\drivers\btusbflt.sys [2010-03-30 53800]
R3 btwaudio;Bluetooth Audio Device Service; C:\WINDOWS\system32\drivers\btwaudio.sys [2010-03-30 98344]
R3 btwavdt;Bluetooth AVDT Service; C:\WINDOWS\system32\DRIVERS\btwavdt.sys [2010-03-30 132648]
R3 btwl2cap;Bluetooth L2CAP Service; C:\WINDOWS\system32\DRIVERS\btwl2cap.sys [2010-03-30 35104]
R3 btwrchid;btwrchid; C:\WINDOWS\system32\DRIVERS\btwrchid.sys [2010-03-30 21160]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\WINDOWS\system32\DRIVERS\CtClsFlt.sys [2009-06-15 172704]
R3 HECIx64;Intel(R) Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECIx64.sys [2010-03-17 56344]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SaiMini;SaiMini; C:\WINDOWS\system32\DRIVERS\SaiMini.sys [2010-09-07 22792]
R3 SaiNtBus;SaiNtBus; C:\WINDOWS\system32\drivers\SaiBus.sys [2010-09-07 50056]
R3 smbusp;Intel(R) SMBus 2.0 Driver; C:\WINDOWS\system32\DRIVERS\intelsmb.sys [2010-01-20 36224]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [2010-06-17 515584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-12-23 301104]
R3 tap0901;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2011-12-15 31232]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AmdTools64;AMD Special Tools Driver; C:\WINDOWS\system32\DRIVERS\AmdTools64.sys [2008-04-28 47160]
S3 atillk64;atillk64; \??\C:\Program Files (x86)\AMD GPU Clock Tool\atillk64.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\WINDOWS\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 HTCAND64;HTC Device Driver; C:\WINDOWS\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;HTC NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 ManyCam;ManyCam Virtual Webcam; C:\WINDOWS\system32\DRIVERS\mcvidrv_x64.sys [2012-01-11 34304]
S3 mcaudrv_simple;ManyCam Virtual Microphone; C:\WINDOWS\system32\drivers\mcaudrv_x64.sys [2012-02-22 28160]
S3 PcdrNdisuio;PCDRNDISUIO Usermode I/O Protocol; syswow64\drivers\pcdrndisuio.sys []
S3 PCDSRVC{1E208CE0-FB7451FF-06020200}_0;PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - PCDR Kernel Mode Service Helper Driver; \??\c:\program files\dell support center\pcdsrvc_x64.pkms [2012-08-17 25584]
S3 pciide;pciide; C:\WINDOWS\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RTL8167;Realtek 8167 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 SaiK0836;SaiK0836; C:\WINDOWS\system32\DRIVERS\SaiK0836.sys [2010-07-08 172040]
S3 ScreamBAudioSvc;ScreamBee Audio; C:\WINDOWS\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\WINDOWS\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\WINDOWS\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
S3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\WINDOWS\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 VSPerfDrv100;Performance Tools Driver 10.0; \??\C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440]
S3 WimFltr;WimFltr; C:\WINDOWS\system32\DRIVERS\wimfltr.sys [2006-11-01 151656]
S3 WinUsb;WinUsb; C:\WINDOWS\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2012-07-28 239616]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-12-29 873248]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-03-07 913144]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-05-30 13632]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-17 268824]
R2 MSSQL$PCNETSERVICE;MSSQL$PCNETSERVICE; C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PCNETSERVICE\Binn\sqlservr.exe [2002-12-17 7520337]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2009-07-14 27136]
R2 PDAgent;PDAgent; C:\Program Files\Raxco\PerfectDisk\PDAgent.exe [2012-05-24 1899896]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2012-06-20 76888]
R2 SQLAgent$PCNETSERVICE;SQLAgent$PCNETSERVICE; C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PCNETSERVICE\Binn\sqlagent.EXE [2002-12-17 311872]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-06-17 258048]
R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-07-16 2673064]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-17 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 PDEngine;PDEngine; C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe [2012-05-24 3312504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-12 140672]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 CGVPNCliSrvc;CyberGhost VPN Client; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2012-05-04 2438696]
S3 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-14 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-14 116648]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-02-01 160256]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 nlsX86cc;Nalpeiron Licensing Service; C:\WINDOWS\SysWOW64\NLSSRV32.EXE [2012-07-25 69640]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-03-23 87040]
S3 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-08-23 529744]
S3 TurboBoost;TurboBoost; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\WINDOWS\system32\Wat\WatAdminSvc.exe [2012-05-14 1255736]
S4 NetMsmqActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
v poslední době se setkávám se symptomy podobné viru (HDD aktivita, síť, podivné procesy, dlouhý boot atp.). Níže přikládám log, děkuji za rady:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Michal Charvat at 2012-08-27 12:24:51
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 402 GB (58%) free of 699 GB
Total RAM: 8127 MB (65% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:24:58, on 27.8.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal
Running processes:
C:\Users\Michal Charvat\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe
C:\Program Files (x86)\GIGABYTE\GHOST(6980)\GHOSTOPEN.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\WinSCP\WinSCP.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Michal Charvat.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKLM\..\Run: [Tilt] C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe
O4 - HKLM\..\Run: [ghost] C:\Program Files (x86)\GIGABYTE\GHOST(6980)\ghostopen.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ManicTime] C:\Program Files (x86)\ManicTime\ManicTime.exe /minimized /name:
O4 - HKCU\..\Run: [TrayStatus] "C:\Program Files (x86)\TrayStatus\TrayStatus.exe"
O4 - Startup: Dropbox.lnk = C:\Users\Michal Charvat\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Bluetooth.lnk = ?
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/ ... erCtrl.cab
O16 - DPF: {8CFCF42C-1C64-47D6-AEEC-F9D001832ED3} (DellSystem.Scanner) - http://xserv.dell.com/DellDriverScanner/DellSystem.CAB
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... .5.5.0.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9AE2576B-34AC-481D-8C62-79071480C87A}: NameServer = 4.2.2.2,4.2.2.3
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: CyberGhost VPN Client (CGVPNCliSrvc) - mobile concepts GmbH - C:\Program Files\CyberGhost VPN\CGVPNCliService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\WINDOWS\SysWOW64\NLSSRV32.EXE
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: TurboBoost - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\WINDOWS\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: DW WLAN Tray Service (wltrysvc) - Dell Inc. - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10906 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\WINDOWS\system32\services.exe
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\lsm.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 15883504
\??\C:\WINDOWS\system32\conhost.exe "16126834131866303698-14331897961413868289-1021171841-18492178211512487253334472296
"C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe"
C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
atieclxx
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PCNETSERVICE\Binn\sqlservr.exe" -sPCNETSERVICE
C:\WINDOWS\System32\svchost.exe -k HPZ12
"C:\Program Files\Raxco\PerfectDisk\PDAgent.exe"
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"taskhost.exe"
"C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PCNETSERVICE\Binn\sqlagent.EXE" -i PCNETSERVICE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\Explorer.EXE
WLIDSvcM.exe 2356
"C:\WINDOWS\system32\Dwm.exe"
\??\C:\WINDOWS\system32\conhost.exe "444445365-1223136889-100717402096500148318096829351113934796-914751758-1183046987
"C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k bthsvcs
"C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe"
"C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE"
"C:\Program Files\Saitek\SD6\Software\ProfilerU.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Saitek\SD6\Software\SaiMfd.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Dell\QuickSet\quickset.exe"
"C:\Program Files (x86)\ManicTime\ManicTime.exe" /minimized /name:
"C:\Program Files (x86)\TrayStatus\TrayStatus.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Users\Michal Charvat\AppData\Roaming\Dropbox\bin\Dropbox.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe"
"C:\Program Files (x86)\GIGABYTE\GHOST(6980)\GHOSTOPEN.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
taskeng.exe {0619B88D-4099-4FA0-8A83-C968963E9D75}
"C:\Program Files\PowerPlanAssistant\PowerPlanAssistant.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe"
"C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe"
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" -- "http://www.wikipedia.org/wiki/Internati ... r_Identity"
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --extension-process --renderer-print-preview --channel="2484.1.623553535\782387253" /prefetch:3
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --extension-process --renderer-print-preview --channel="2484.2.843033632\1526381984" /prefetch:3
"C:\WINDOWS\system32\taskmgr.exe" /1
"C:\Program Files\HWiNFO64\HWiNFO64.EXE"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2484.10.340274576\349033896" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2484.11.1705525923\214019449" --reduce-gpu-sandbox --disable-image-transport-surface --gpu-vendor-id=0x1002 --gpu-device-id=0x68c1 --gpu-driver-version=8.982.0.0 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files\Dell Support Center\uaclauncher.exe" -silentenumeration -st SystemToolsDailyTest --ignoresecondarysplash --runsilently
"C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe"
"C:\Program Files (x86)\WinSCP\WinSCP.exe"
"C:\WINDOWS\system32\SnippingTool.exe"
/QuitInfo:0000000000000828;000000000000081C;
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/HttpPipeliningCompatibility/disable_test/IdleSktToImpact/idle_timeout_10/NetworkConnectivity/disable_network_stats/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="2484.94.584317858\1600496553" /prefetch:3
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/HttpPipeliningCompatibility/disable_test/IdleSktToImpact/idle_timeout_10/NetworkConnectivity/disable_network_stats/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="2484.95.163185494\1210406718" /prefetch:3
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=service --lang=cs
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi-broker --channel="2484.97.1098191519\1334237276" --lang=cs /prefetch:14
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" "C:\Users\Michal Charvat\Downloads\eTicket_4667.pdf"
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" --channel=3228.0036F788.1759526595 --type=renderer "C:\Users\Michal Charvat\Downloads\eTicket_4667.pdf"
C:\WINDOWS\splwow64.exe 8192
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/HttpPipeliningCompatibility/disable_test/IdleSktToImpact/idle_timeout_10/NetworkConnectivity/disable_network_stats/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="2484.98.1534977475\1256402066" /prefetch:3
"C:\Users\Michal Charvat\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/HttpPipeliningCompatibility/disable_test/IdleSktToImpact/idle_timeout_10/NetworkConnectivity/disable_network_stats/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/17/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpdyImpact/spdy3/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="2484.99.1930234416\536558341" /prefetch:3
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe21_ Global\UsGthrCtrlFltPipeMssGthrPipe21 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Users\Michal Charvat\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3847059355-3794568477-1451639886-1000Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3847059355-3794568477-1451639886-1000UA.job
C:\WINDOWS\tasks\PCDoctorBackgroundMonitorTask-Delay.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-08-05 545264]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-08-05 193520]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-08-05 453104]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-08-05 157680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDA57003-0068-4ed2-9D32-4D1EC707D94D}]
Microsoft Web Test Recorder 10.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2010-03-19 61360]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [2010-02-02 5712896]
"ProfilerU"=C:\Program Files\Saitek\SD6\Software\ProfilerU.exe [2010-09-06 310272]
"SaiMfd"=C:\Program Files\Saitek\SD6\Software\SaiMfd.exe [2010-09-06 158208]
"POWER PLAN ASSISTANT"=C:\Program Files\PowerPlanAssistant\PowerPlanAssistantLauncher.exe [2012-07-26 30208]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-23 1890088]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-03-07 4081008]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-06-17 487424]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2010-01-06 3179288]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ManicTime"=C:\Program Files (x86)\ManicTime\ManicTime.exe [2012-08-06 249712]
"TrayStatus"=C:\Program Files (x86)\TrayStatus\TrayStatus.exe [2011-05-18 283032]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Webcam Central]
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2009-06-24 409744]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Michal Charvat\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-14 116648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HTC Sync Loader]
C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17 651264]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Remote PC Server.lnk]
C:\PROGRA~2\REMOTE~1.3\REMOTE~1.EXE [2011-09-19 92160]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-06-07 56128]
"KeePass 2 PreLoad"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2012-05-01 1895424]
"Tilt"=C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe [2011-04-20 729088]
"ghost"=C:\Program Files (x86)\GIGABYTE\GHOST(6980)\ghostopen.exe [2010-02-08 192000]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-08-06 642216]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2012-04-18 421888]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Users\Michal Charvat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Michal Charvat\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll [2012-05-14 249344]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - C:\WINDOWS\NOTEPAD.EXE %1
======List of files/folders created in the last 1 month======
2012-08-27 12:24:51 ----D---- C:\rsit
2012-08-27 12:24:51 ----D---- C:\Program Files\trend micro
2012-08-27 11:00:10 ----ASH---- C:\hiberfil.sys
2012-08-26 15:35:03 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2012-08-25 11:28:19 ----D---- C:\Program Files (x86)\DOSBox-0.74
2012-08-24 23:16:43 ----D---- C:\Program Files (x86)\MozBackup
2012-08-24 18:25:44 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Thunderbird
2012-08-24 15:04:30 ----D---- C:\Program Files (x86)\hMailServer
2012-08-24 14:40:01 ----D---- C:\Users\Michal Charvat\AppData\Roaming\IsolatedStorage
2012-08-24 14:39:01 ----D---- C:\ProgramData\Encryptomatic, LLC
2012-08-24 14:38:08 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Encryptomatic, LLC
2012-08-24 12:46:53 ----D---- C:\Program Files (x86)\odf-converter-integrator
2012-08-24 12:12:49 ----D---- C:\Users\Michal Charvat\AppData\Roaming\MyPhoneExplorer
2012-08-24 12:12:44 ----D---- C:\Program Files (x86)\MyPhoneExplorer
2012-08-24 12:04:33 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Mozilla
2012-08-24 12:04:29 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2012-08-23 14:04:09 ----D---- C:\ProgramData\PC-Doctor for Windows
2012-08-23 11:33:20 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Apple Computer
2012-08-22 22:47:13 ----D---- C:\ProgramData\Temp
2012-08-22 22:47:03 ----D---- C:\ProgramData\Ask
2012-08-22 22:26:00 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Ustream Producer
2012-08-22 22:25:59 ----D---- C:\ProgramData\Telestream
2012-08-22 22:22:32 ----D---- C:\Program Files (x86)\QuickTime
2012-08-22 22:22:30 ----D---- C:\ProgramData\Apple Computer
2012-08-22 22:21:11 ----D---- C:\ProgramData\Apple
2012-08-22 22:06:27 ----D---- C:\ProgramData\SplitMediaLabs
2012-08-22 22:05:42 ----D---- C:\Users\Michal Charvat\AppData\Roaming\SplitMediaLabs
2012-08-20 20:34:59 ----D---- C:\Program Files (x86)\Dead City
2012-08-19 17:30:34 ----D---- C:\Program Files (x86)\SpeedFan
2012-08-19 14:29:17 ----A---- C:\WINDOWS\system32\drivers\AmdTools64.sys
2012-08-19 14:29:16 ----D---- C:\Program Files (x86)\AMD GPU Clock Tool
2012-08-18 21:57:55 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Screaming Bee
2012-08-18 21:56:33 ----D---- C:\ProgramData\Screaming Bee
2012-08-18 12:35:01 ----D---- C:\Users\Michal Charvat\AppData\Roaming\SUPERAntiSpyware.com
2012-08-18 12:34:48 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2012-08-18 12:34:48 ----D---- C:\Program Files\SUPERAntiSpyware
2012-08-18 12:19:19 ----D---- C:\Users\Michal Charvat\AppData\Roaming\ATI
2012-08-18 12:19:19 ----D---- C:\ProgramData\ATI
2012-08-18 12:13:35 ----D---- C:\Program Files (x86)\AMD APP
2012-08-18 12:13:32 ----D---- C:\Program Files\Common Files\ATI Technologies
2012-08-18 12:12:51 ----D---- C:\Program Files (x86)\ATI Technologies
2012-08-18 12:12:44 ----D---- C:\Program Files\ATI Technologies
2012-08-18 12:12:43 ----D---- C:\Program Files\ATI
2012-08-18 12:12:06 ----D---- C:\AMD
2012-08-18 12:04:13 ----SHD---- C:\$RECYCLE.BIN
2012-08-18 11:56:45 ----D---- C:\WINDOWS\temp
2012-08-18 11:56:44 ----A---- C:\ComboFix.txt
2012-08-18 11:45:08 ----A---- C:\WINDOWS\zip.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\SWSC.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\SWREG.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\sed.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\PEV.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\NIRCMD.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\MBR.exe
2012-08-18 11:45:08 ----A---- C:\WINDOWS\grep.exe
2012-08-18 11:45:00 ----D---- C:\Qoobox
2012-08-18 11:44:47 ----D---- C:\WINDOWS\erdnt
2012-08-18 11:24:36 ----A---- C:\WINDOWS\system32\drivers\iaStor.sys
2012-08-17 15:14:52 ----A---- C:\WINDOWS\system32\sfcdetails.txt
2012-08-17 11:00:13 ----D---- C:\WINDOWS\SoftwareDistribution
2012-08-17 10:50:33 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2012-08-17 10:49:35 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2012-08-17 10:49:35 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2012-08-17 10:49:35 ----A---- C:\WINDOWS\system32\url.dll
2012-08-17 10:49:35 ----A---- C:\WINDOWS\system32\mshtmled.dll
2012-08-17 10:49:35 ----A---- C:\WINDOWS\system32\iertutil.dll
2012-08-17 10:49:34 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2012-08-17 10:49:34 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2012-08-17 10:49:34 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2012-08-17 10:49:34 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2012-08-17 10:49:34 ----A---- C:\WINDOWS\system32\urlmon.dll
2012-08-17 10:49:34 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2012-08-17 10:49:34 ----A---- C:\WINDOWS\system32\ieui.dll
2012-08-17 10:49:32 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2012-08-17 10:49:32 ----A---- C:\WINDOWS\system32\wininet.dll
2012-08-17 10:49:32 ----A---- C:\WINDOWS\system32\jscript9.dll
2012-08-17 10:49:31 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2012-08-17 10:49:31 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2012-08-17 10:49:31 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2012-08-17 10:49:31 ----A---- C:\WINDOWS\system32\jsproxy.dll
2012-08-17 10:49:31 ----A---- C:\WINDOWS\system32\jscript.dll
2012-08-17 10:49:30 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2012-08-17 10:49:29 ----A---- C:\WINDOWS\system32\mshtml.dll
2012-08-17 10:49:28 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2012-08-17 10:49:28 ----A---- C:\WINDOWS\system32\ieframe.dll
2012-08-17 10:09:18 ----D---- C:\0ee683450aa1c20f17befa4eb0fc4a
2012-08-17 10:07:21 ----A---- C:\WINDOWS\system32\fix.bat
2012-08-16 17:56:22 ----N---- C:\bootsqm.dat
2012-08-16 15:35:55 ----A---- C:\WINDOWS\system32\monitor.lnk
2012-08-15 12:31:15 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2012-08-15 12:31:15 ----A---- C:\WINDOWS\system32\srcore.dll
2012-08-15 12:31:13 ----A---- C:\WINDOWS\SYSWOW64\win32spl.dll
2012-08-15 12:31:13 ----A---- C:\WINDOWS\system32\win32spl.dll
2012-08-15 12:31:13 ----A---- C:\WINDOWS\system32\spoolsv.exe
2012-08-15 12:31:13 ----A---- C:\WINDOWS\splwow64.exe
2012-08-15 12:31:11 ----A---- C:\WINDOWS\SYSWOW64\netapi32.dll
2012-08-15 12:31:11 ----A---- C:\WINDOWS\SYSWOW64\browcli.dll
2012-08-15 12:31:11 ----A---- C:\WINDOWS\system32\netapi32.dll
2012-08-15 12:31:11 ----A---- C:\WINDOWS\system32\browser.dll
2012-08-15 12:31:11 ----A---- C:\WINDOWS\system32\browcli.dll
2012-08-15 12:31:10 ----A---- C:\WINDOWS\system32\win32k.sys
2012-08-15 12:31:10 ----A---- C:\WINDOWS\system32\localspl.dll
2012-08-14 10:05:22 ----D---- C:\Program Files (x86)\OpenCandy
2012-08-14 10:04:25 ----D---- C:\Users\Michal Charvat\AppData\Roaming\OpenCandy
2012-08-14 09:11:14 ----A---- C:\WINDOWS\system32\drivers\vpchbus.sys
2012-08-14 09:11:14 ----A---- C:\WINDOWS\system32\drivers\vpcusb.sys
2012-08-14 09:11:12 ----A---- C:\WINDOWS\system32\vpchbuspipe.dll
2012-08-14 08:58:47 ----D---- C:\Program Files\OpenCandy
2012-08-13 10:22:14 ----A---- C:\WINDOWS\system32\WdfCoInstaller01005.dll
2012-08-13 10:22:14 ----A---- C:\WINDOWS\system32\drivers\WdfCoInstaller01005.dll
2012-08-13 10:22:14 ----A---- C:\WINDOWS\system32\drivers\ssadwh.sys
2012-08-13 10:22:14 ----A---- C:\WINDOWS\system32\drivers\ssadcm.sys
2012-08-13 10:13:12 ----A---- C:\WINDOWS\system32\drivers\sscdwh.sys
2012-08-13 10:13:12 ----A---- C:\WINDOWS\system32\drivers\sscdcm.sys
2012-08-12 23:53:02 ----SHD---- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2012-08-12 12:56:37 ----A---- C:\Users\Michal Charvat\AppData\Roaming\minecraft_server.jar
2012-08-10 21:04:53 ----D---- C:\Program Files (x86)\FSFDT
2012-08-09 17:55:30 ----N---- C:\WINDOWS\SYSWOW64\mwgfxcopy.exe
2012-08-09 17:55:30 ----N---- C:\WINDOWS\SYSWOW64\mwgfx24.dll
2012-08-09 17:55:30 ----N---- C:\WINDOWS\SYSWOW64\mwgfx.dll
2012-08-09 17:55:30 ----N---- C:\WINDOWS\SYSWOW64\mwdds.dll
2012-08-09 17:55:30 ----N---- C:\WINDOWS\SYSWOW64\mwace.dll
2012-08-09 17:55:30 ----D---- C:\Graphics
2012-08-09 16:57:12 ----A---- C:\WINDOWS\SYSWOW64\VB5DB.DLL
2012-08-09 16:47:29 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2012-08-09 16:47:19 ----D---- C:\Users\Michal Charvat\AppData\Roaming\DAEMON Tools Lite
2012-08-09 16:45:45 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-08-09 16:32:16 ----D---- C:\WINDOWS\cs
2012-08-08 21:40:18 ----D---- C:\Program Files\CyberGhost VPN
2012-08-08 15:11:58 ----D---- C:\Program Files (x86)\Windows Live
2012-08-08 15:11:45 ----D---- C:\WINDOWS\PCHEALTH
2012-08-08 12:58:03 ----D---- C:\Users\Michal Charvat\AppData\Roaming\WorldPainter
2012-08-08 12:57:59 ----D---- C:\Program Files\WorldPainter
2012-08-08 12:54:39 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Avanti
2012-08-08 12:54:29 ----D---- C:\Program Files (x86)\Ambient
2012-08-08 12:34:09 ----D---- C:\Users\Michal Charvat\AppData\Roaming\pymclevel
2012-08-07 12:40:20 ----A---- C:\WINDOWS\SYSWOW64\dx7vb.dll
2012-08-07 12:40:20 ----A---- C:\WINDOWS\SYSWOW64\d3drm.dll
2012-08-07 12:40:18 ----A---- C:\WINDOWS\SYSWOW64\dx8vb.dll
2012-08-07 11:39:30 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Nitro PDF
2012-08-07 11:38:54 ----D---- C:\ProgramData\Nitro PDF
2012-08-07 09:32:22 ----D---- C:\Program Files\Paint.NET
2012-08-06 15:28:47 ----D---- C:\Program Files (x86)\Microsoft
2012-08-05 20:20:13 ----N---- C:\WINDOWS\system32\stapi64.dll
2012-08-05 20:19:45 ----A---- C:\WINDOWS\system32\ctapo64.dll
2012-08-05 20:19:45 ----A---- C:\WINDOWS\system32\AESTEC64.dll
2012-08-05 20:19:45 ----A---- C:\WINDOWS\system32\AESTAR64.dll
2012-08-05 20:19:45 ----A---- C:\WINDOWS\system32\AESTAC64.dll
2012-08-05 20:19:44 ----A---- C:\WINDOWS\system32\stlang64.dll
2012-08-05 20:19:44 ----A---- C:\WINDOWS\system32\idt64mp1.exe
2012-08-05 20:19:10 ----A---- C:\WINDOWS\system32\drivers\stwrt64.sys
2012-08-05 20:19:08 ----A---- C:\WINDOWS\system32\stcplx64.dll
2012-08-05 20:19:08 ----A---- C:\WINDOWS\system32\stapo64.dll
2012-08-05 20:19:08 ----A---- C:\WINDOWS\system32\st646289.dll
2012-08-05 20:18:42 ----D---- C:\Program Files\IDT
2012-08-05 19:12:00 ----D---- C:\ProgramData\Raxco
2012-08-05 19:11:59 ----D---- C:\Program Files\Raxco
2012-08-05 19:11:59 ----D---- C:\Program Files\Common Files\Raxco
2012-08-05 19:09:36 ----D---- C:\Program Files\Recuva
2012-08-05 19:02:13 ----A---- C:\WINDOWS\system32\ctppld64.dll
2012-08-05 19:02:13 ----A---- C:\WINDOWS\system32\ctapo32.dll
2012-08-05 19:02:13 ----A---- C:\WINDOWS\system32\AESTCo64.dll
2012-08-05 18:46:03 ----ASH---- C:\pagefile.sys
2012-08-05 18:43:04 ----D---- C:\Users\Michal Charvat\AppData\Roaming\ESET
2012-08-05 18:42:21 ----D---- C:\ProgramData\ESET
2012-08-05 18:42:21 ----D---- C:\Program Files\ESET
2012-08-05 18:39:31 ----A---- C:\WINDOWS\system32\javaws.exe
2012-08-05 18:39:27 ----A---- C:\WINDOWS\system32\javaw.exe
2012-08-05 18:39:27 ----A---- C:\WINDOWS\system32\java.exe
2012-08-05 18:39:04 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2012-08-05 18:38:54 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2012-08-05 18:38:54 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2012-08-05 18:38:47 ----D---- C:\Program Files (x86)\Java
2012-08-05 18:23:50 ----D---- C:\Program Files\Synaptics
2012-08-05 17:58:50 ----D---- C:\Program Files\Saitek
2012-08-05 13:44:00 ----D---- C:\Nová složka
2012-07-29 23:49:42 ----D---- C:\ProgramData\IsolatedStorage
2012-07-28 06:09:20 ----A---- C:\WINDOWS\SYSWOW64\atiumdag.dll
2012-07-28 06:07:44 ----A---- C:\WINDOWS\system32\drivers\atikmdag.sys
2012-07-28 05:43:12 ----A---- C:\WINDOWS\system32\coinst_8.982.dll
2012-07-28 05:19:34 ----A---- C:\WINDOWS\system32\atio6axx.dll
2012-07-28 04:50:10 ----A---- C:\WINDOWS\SYSWOW64\atioglxx.dll
2012-07-28 04:15:50 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2012-07-28 04:15:42 ----A---- C:\WINDOWS\SYSWOW64\aticfx32.dll
2012-07-28 04:13:56 ----A---- C:\WINDOWS\system32\aticfx64.dll
2012-07-28 04:10:40 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2012-07-28 04:10:34 ----A---- C:\WINDOWS\system32\atieclxx.exe
2012-07-28 04:09:44 ----A---- C:\WINDOWS\system32\atiesrxx.exe
2012-07-28 04:08:20 ----A---- C:\WINDOWS\system32\atitmm64.dll
2012-07-28 04:08:04 ----A---- C:\WINDOWS\system32\atimuixx.dll
2012-07-28 04:07:58 ----A---- C:\WINDOWS\system32\atiedu64.dll
2012-07-28 04:07:52 ----A---- C:\WINDOWS\SYSWOW64\ati2edxx.dll
2012-07-28 04:07:10 ----A---- C:\WINDOWS\SYSWOW64\atidxx32.dll
2012-07-28 03:51:12 ----A---- C:\WINDOWS\system32\atidxx64.dll
2012-07-28 03:41:32 ----A---- C:\WINDOWS\system32\atiumd6a.dll
2012-07-28 03:35:10 ----A---- C:\WINDOWS\system32\aticalrt64.dll
2012-07-28 03:35:08 ----A---- C:\WINDOWS\SYSWOW64\aticalrt.dll
2012-07-28 03:35:02 ----A---- C:\WINDOWS\system32\aticalcl64.dll
2012-07-28 03:35:00 ----A---- C:\WINDOWS\SYSWOW64\aticalcl.dll
2012-07-28 03:34:48 ----A---- C:\WINDOWS\system32\aticaldd64.dll
2012-07-28 03:32:32 ----A---- C:\WINDOWS\SYSWOW64\atiumdva.dll
2012-07-28 03:30:10 ----A---- C:\WINDOWS\SYSWOW64\aticaldd.dll
2012-07-28 03:25:52 ----A---- C:\WINDOWS\system32\atiumd64.dll
2012-07-28 03:15:32 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2012-07-28 03:15:22 ----A---- C:\WINDOWS\SYSWOW64\atiadlxy.dll
2012-07-28 03:15:12 ----A---- C:\WINDOWS\system32\atig6pxx.dll
2012-07-28 03:15:08 ----A---- C:\WINDOWS\SYSWOW64\atiglpxx.dll
2012-07-28 03:15:08 ----A---- C:\WINDOWS\system32\atiglpxx.dll
2012-07-28 03:15:04 ----A---- C:\WINDOWS\system32\atig6txx.dll
2012-07-28 03:14:56 ----A---- C:\WINDOWS\SYSWOW64\atigktxx.dll
2012-07-28 03:14:46 ----A---- C:\WINDOWS\system32\drivers\atikmpag.sys
2012-07-28 03:13:54 ----A---- C:\WINDOWS\system32\atiuxp64.dll
2012-07-28 03:13:48 ----A---- C:\WINDOWS\SYSWOW64\atiuxpag.dll
2012-07-28 03:13:40 ----A---- C:\WINDOWS\system32\atiu9p64.dll
2012-07-28 03:13:32 ----A---- C:\WINDOWS\SYSWOW64\atiu9pag.dll
2012-07-28 03:12:54 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2012-07-28 03:08:42 ----A---- C:\WINDOWS\system32\atimpc64.dll
2012-07-28 03:08:42 ----A---- C:\WINDOWS\system32\amdpcom64.dll
2012-07-28 03:08:36 ----A---- C:\WINDOWS\SYSWOW64\atimpc32.dll
2012-07-28 03:08:36 ----A---- C:\WINDOWS\SYSWOW64\amdpcom32.dll
2012-07-28 02:54:00 ----A---- C:\WINDOWS\WLXPGSS.SCR
======List of files/folders modified in the last 1 month======
2012-08-27 12:24:51 ----RD---- C:\Program Files
2012-08-27 11:37:18 ----D---- C:\Users\Michal Charvat\AppData\Roaming\.minecraft
2012-08-27 11:11:57 ----D---- C:\WINDOWS\system32\config
2012-08-27 11:00:52 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Dropbox
2012-08-27 10:59:51 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2012-08-26 19:51:35 ----D---- C:\Users\Michal Charvat\AppData\Roaming\teamspeak2
2012-08-26 17:41:05 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Skype
2012-08-26 17:20:24 ----D---- C:\Users\Michal Charvat\AppData\Roaming\TS3Client
2012-08-26 15:39:25 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Mumble
2012-08-26 15:35:38 ----D---- C:\WINDOWS\inf
2012-08-26 15:35:17 ----AD---- C:\WINDOWS
2012-08-26 15:35:03 ----AD---- C:\WINDOWS\System32
2012-08-25 23:02:53 ----D---- C:\Users\Michal Charvat\AppData\Roaming\KeePass
2012-08-25 18:00:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-08-25 14:02:56 ----D---- C:\WINDOWS\Microsoft.NET
2012-08-25 14:02:55 ----RSD---- C:\WINDOWS\assembly
2012-08-25 12:46:00 ----D---- C:\Games
2012-08-25 11:28:19 ----RD---- C:\Program Files (x86)
2012-08-24 23:12:30 ----SHD---- C:\System Volume Information
2012-08-24 22:58:12 ----D---- C:\WINDOWS\Prefetch
2012-08-24 22:55:32 ----D---- C:\Config.Msi
2012-08-24 22:53:44 ----SHD---- C:\WINDOWS\Installer
2012-08-24 22:49:45 ----D---- C:\WINDOWS\system32\catroot2
2012-08-24 22:48:44 ----D---- C:\ProgramData
2012-08-24 22:48:10 ----D---- C:\WINDOWS\system32\Tasks
2012-08-24 22:42:43 ----D---- C:\WINDOWS\SysWOW64
2012-08-24 22:36:41 ----D---- C:\Users\Michal Charvat\AppData\Roaming\uTorrent
2012-08-24 22:34:35 ----D---- C:\Program Files\CCleaner
2012-08-24 22:16:25 ----D---- C:\WINDOWS\winsxs
2012-08-24 22:12:55 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2012-08-24 22:12:30 ----RSD---- C:\WINDOWS\Fonts
2012-08-24 22:07:04 ----D---- C:\ProgramData\Microsoft Help
2012-08-24 22:05:51 ----SD---- C:\ProgramData\Microsoft
2012-08-24 22:05:51 ----D---- C:\Program Files (x86)\Microsoft Office
2012-08-24 22:05:19 ----D---- C:\WINDOWS\ShellNew
2012-08-24 22:05:17 ----D---- C:\Program Files (x86)\MSBuild
2012-08-24 22:02:19 ----A---- C:\WINDOWS\win.ini
2012-08-24 22:00:37 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-08-24 21:46:56 ----SD---- C:\Users\Michal Charvat\AppData\Roaming\Microsoft
2012-08-24 16:40:32 ----D---- C:\Users\Michal Charvat\AppData\Roaming\FileZilla
2012-08-24 08:55:15 ----D---- C:\ProgramData\PCDr
2012-08-23 14:04:10 ----D---- C:\Program Files\Dell Support Center
2012-08-23 14:04:09 ----D---- C:\ProgramData\Dell
2012-08-23 14:02:57 ----D---- C:\WINDOWS\Tasks
2012-08-23 11:56:43 ----D---- C:\Program Files (x86)\Common Files
2012-08-22 22:49:07 ----D---- C:\WINDOWS\system32\drivers
2012-08-22 22:49:07 ----D---- C:\WINDOWS\system32\catroot
2012-08-22 22:49:06 ----D---- C:\WINDOWS\system32\DriverStore
2012-08-22 22:23:24 ----D---- C:\Program Files (x86)\Internet Explorer
2012-08-22 22:19:42 ----D---- C:\Program Files (x86)\Adobe
2012-08-22 22:16:09 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Adobe
2012-08-21 16:29:51 ----D---- C:\Users\Michal Charvat\AppData\Roaming\ICQ
2012-08-18 12:13:32 ----D---- C:\Program Files\Common Files
2012-08-18 11:54:29 ----A---- C:\WINDOWS\system.ini
2012-08-18 11:54:25 ----D---- C:\WINDOWS\system32\drivers\etc
2012-08-18 11:51:57 ----D---- C:\WINDOWS\SYSWOW64\drivers
2012-08-18 11:51:57 ----D---- C:\WINDOWS\AppPatch
2012-08-18 11:24:33 ----D---- C:\Program Files (x86)\Intel
2012-08-17 23:10:19 ----D---- C:\Program Files (x86)\DriverCleanerDotNET
2012-08-17 14:22:13 ----D---- C:\WINDOWS\Logs
2012-08-17 14:22:13 ----D---- C:\WINDOWS\debug
2012-08-17 11:23:20 ----D---- C:\WINDOWS\SYSWOW64\migration
2012-08-17 11:23:20 ----D---- C:\WINDOWS\system32\migration
2012-08-17 11:23:20 ----D---- C:\Program Files\Internet Explorer
2012-08-16 19:46:38 ----D---- C:\Program Files (x86)\WinSCP
2012-08-15 23:05:16 ----A---- C:\WINDOWS\system32\MRT.exe
2012-08-15 14:51:38 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2012-08-14 18:12:24 ----D---- C:\WINDOWS\SYSWOW64\directx
2012-08-14 18:12:09 ----HD---- C:\WINDOWS\msdownld.tmp
2012-08-14 17:21:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-08-14 16:45:01 ----D---- C:\Program Files (x86)\Google
2012-08-14 11:58:18 ----D---- C:\ProgramData\Samsung
2012-08-14 11:06:32 ----D---- C:\Program Files (x86)\ManicTime
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\zh-TW
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\tr-TR
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\ro-RO
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\pt-PT
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\pt-BR
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\nl-NL
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\nb-NO
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\ja-JP
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\it-IT
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\fr-FR
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\fi-FI
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\en-US
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\el-GR
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\de-DE
2012-08-14 10:58:14 ----D---- C:\WINDOWS\system32\cs-CZ
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\zh-CN
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\th-TH
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\sv-SE
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\ru-RU
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\pl-PL
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\ko-KR
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\hu-HU
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\he-IL
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\es-ES
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\drivers\en-US
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\da-DK
2012-08-14 10:58:13 ----D---- C:\WINDOWS\system32\ar-SA
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\en-US
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2012-08-14 10:15:01 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2012-08-13 10:09:12 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Samsung
2012-08-12 23:54:47 ----D---- C:\ProgramData\TuneUp Software
2012-08-12 10:19:31 ----D---- C:\WINDOWS\system32\NDF
2012-08-08 15:13:06 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2012-08-07 11:25:47 ----D---- C:\Users\Michal Charvat\AppData\Roaming\Downloaded Installations
2012-08-05 18:39:21 ----D---- C:\Program Files\Java
2012-08-05 18:38:48 ----A---- C:\WINDOWS\SYSWOW64\npDeployJava1.dll
2012-08-05 18:38:48 ----A---- C:\WINDOWS\SYSWOW64\deployJava1.dll
2012-08-05 18:26:49 ----D---- C:\WINDOWS\Minidump
2012-08-05 18:22:07 ----D---- C:\Program Files\PowerPlanAssistant
2012-08-05 17:57:43 ----D---- C:\Program Files\SmartTechnology
2012-08-05 17:26:12 ----D---- C:\WINDOWS\pss
2012-08-05 14:12:55 ----D---- C:\WINDOWS\symbols
2012-08-05 13:58:29 ----D---- C:\ProgramData\dbg
2012-08-05 13:45:00 ----D---- C:\symbols
2012-07-31 19:27:42 ----D---- C:\Program Files\TeamSpeak 3 Client
2012-07-30 14:16:48 ----A---- C:\WINDOWS\SYSWOW64\Redemption.dll
2012-07-28 18:34:25 ----D---- C:\WINDOWS\system32\LogFiles
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 epfwwfp;epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [2012-03-14 62496]
R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2012-05-30 569152]
R0 rdyboost;ReadyBoost; C:\WINDOWS\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2012-08-09 560184]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [2012-03-14 38288]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Program Files\HWiNFO64\HWiNFO64A.SYS [2012-02-07 30592]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 DefragFS;DefragFS; C:\WINDOWS\system32\drivers\DefragFS.sys [2011-12-02 140816]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2012-03-14 187632]
R2 PDFSFilter;PDFsFilter; C:\WINDOWS\system32\DRIVERS\PDFsFilter.sys [2012-05-10 82160]
R2 TurboB;Turbo Boost UI Monitor driver; C:\WINDOWS\system32\DRIVERS\TurboB.sys [2009-11-02 13784]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2012-07-28 10278912]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2012-07-28 368640]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdW76.sys [2012-05-14 96896]
R3 BCM42RLY;BCM42RLY; C:\WINDOWS\system32\drivers\BCM42RLY.sys [2010-02-02 22520]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\WINDOWS\system32\DRIVERS\bcmwl664.sys [2010-02-02 3058168]
R3 BcmVWL;Broadcom Virtual Wireless; C:\WINDOWS\system32\DRIVERS\bcmvwl64.sys [2010-02-03 20984]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btusbflt;Bluetooth USB Filter; C:\WINDOWS\system32\drivers\btusbflt.sys [2010-03-30 53800]
R3 btwaudio;Bluetooth Audio Device Service; C:\WINDOWS\system32\drivers\btwaudio.sys [2010-03-30 98344]
R3 btwavdt;Bluetooth AVDT Service; C:\WINDOWS\system32\DRIVERS\btwavdt.sys [2010-03-30 132648]
R3 btwl2cap;Bluetooth L2CAP Service; C:\WINDOWS\system32\DRIVERS\btwl2cap.sys [2010-03-30 35104]
R3 btwrchid;btwrchid; C:\WINDOWS\system32\DRIVERS\btwrchid.sys [2010-03-30 21160]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\WINDOWS\system32\DRIVERS\CtClsFlt.sys [2009-06-15 172704]
R3 HECIx64;Intel(R) Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECIx64.sys [2010-03-17 56344]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SaiMini;SaiMini; C:\WINDOWS\system32\DRIVERS\SaiMini.sys [2010-09-07 22792]
R3 SaiNtBus;SaiNtBus; C:\WINDOWS\system32\drivers\SaiBus.sys [2010-09-07 50056]
R3 smbusp;Intel(R) SMBus 2.0 Driver; C:\WINDOWS\system32\DRIVERS\intelsmb.sys [2010-01-20 36224]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [2010-06-17 515584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-12-23 301104]
R3 tap0901;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2011-12-15 31232]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AmdTools64;AMD Special Tools Driver; C:\WINDOWS\system32\DRIVERS\AmdTools64.sys [2008-04-28 47160]
S3 atillk64;atillk64; \??\C:\Program Files (x86)\AMD GPU Clock Tool\atillk64.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\WINDOWS\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 HTCAND64;HTC Device Driver; C:\WINDOWS\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;HTC NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 ManyCam;ManyCam Virtual Webcam; C:\WINDOWS\system32\DRIVERS\mcvidrv_x64.sys [2012-01-11 34304]
S3 mcaudrv_simple;ManyCam Virtual Microphone; C:\WINDOWS\system32\drivers\mcaudrv_x64.sys [2012-02-22 28160]
S3 PcdrNdisuio;PCDRNDISUIO Usermode I/O Protocol; syswow64\drivers\pcdrndisuio.sys []
S3 PCDSRVC{1E208CE0-FB7451FF-06020200}_0;PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - PCDR Kernel Mode Service Helper Driver; \??\c:\program files\dell support center\pcdsrvc_x64.pkms [2012-08-17 25584]
S3 pciide;pciide; C:\WINDOWS\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RTL8167;Realtek 8167 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 SaiK0836;SaiK0836; C:\WINDOWS\system32\DRIVERS\SaiK0836.sys [2010-07-08 172040]
S3 ScreamBAudioSvc;ScreamBee Audio; C:\WINDOWS\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\WINDOWS\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\WINDOWS\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
S3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\WINDOWS\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 VSPerfDrv100;Performance Tools Driver 10.0; \??\C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440]
S3 WimFltr;WimFltr; C:\WINDOWS\system32\DRIVERS\wimfltr.sys [2006-11-01 151656]
S3 WinUsb;WinUsb; C:\WINDOWS\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2012-07-28 239616]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-12-29 873248]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-03-07 913144]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-05-30 13632]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-17 268824]
R2 MSSQL$PCNETSERVICE;MSSQL$PCNETSERVICE; C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PCNETSERVICE\Binn\sqlservr.exe [2002-12-17 7520337]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2009-07-14 27136]
R2 PDAgent;PDAgent; C:\Program Files\Raxco\PerfectDisk\PDAgent.exe [2012-05-24 1899896]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2012-06-20 76888]
R2 SQLAgent$PCNETSERVICE;SQLAgent$PCNETSERVICE; C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PCNETSERVICE\Binn\sqlagent.EXE [2002-12-17 311872]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-06-17 258048]
R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-07-16 2673064]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-17 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 PDEngine;PDEngine; C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe [2012-05-24 3312504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-12 140672]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 CGVPNCliSrvc;CyberGhost VPN Client; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2012-05-04 2438696]
S3 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-14 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-14 116648]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-02-01 160256]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 nlsX86cc;Nalpeiron Licensing Service; C:\WINDOWS\SysWOW64\NLSSRV32.EXE [2012-07-25 69640]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-03-23 87040]
S3 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-08-23 529744]
S3 TurboBoost;TurboBoost; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\WINDOWS\system32\Wat\WatAdminSvc.exe [2012-05-14 1255736]
S4 NetMsmqActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
