VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Preventivka - Kontrola

https://forum.viry.cz:443/viewtopic.php?t=124955

Stránka 1 z 1

Preventivka - Kontrola

Napsal: 11 říj 2012 19:40
od )aguar
Dobrý den. Chtěl bych Vás požádat o kontrolu.
A mám jeden problém. Po spuštění PC a načtení OS začne disk za pár minut pracovat-celkem dost. Zkoušel jsem přes HWmonitor zjistit co by to mohlo být, ale je tam toho tolik, že jsem na to nepřišel.


LOG:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Rada at 2012-10-11 20:34:13
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 20 GB (40%) free of 50 GB
Total RAM: 4094 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:34:16, on 11.10.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
D:\Programy\DriverMax\drivermax.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
D:\Programy\Razer\Copperhead\razerhid.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
D:\Programy\Winamp\winampa.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
D:\Programy\Razer\Copperhead\razertra.exe
D:\Programy\Razer\Copperhead\razerofa.exe
D:\Programy\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Rada.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Copperhead] D:\Programy\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [WinampAgent] D:\Programy\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [AlcoholAutomount] "D:\Programy\Alcohol 52\AxAutoMntSrv.exe" -automount
O4 - HKCU\..\Run: [DriverMax_RESTART] "D:\Programy\DriverMax\drivermax.exe" -RESTART
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{9E913569-BF74-436B-862E-4A24A86352BE}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD RAIDXpert (AMD_RAIDXpert) - AMD - C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FreemakeVideoCapture - Freemake - D:\Programy\Freemake\CaptureLib\CaptureLibService.exe
O23 - Service: FSPro Filter Service (fsproflt) - FSPro Labs - C:\Windows\SysWOW64\fsproflt.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9198 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe" -s
"C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe"
\??\C:\Windows\system32\conhost.exe "143950434420996803391965474676-855687453-237819855786218941635368394-81388498
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"D:\Programy\Freemake\CaptureLib\CaptureLibService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
C:\Windows\SysWOW64\fsproflt.exe
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"D:\Programy\DriverMax\drivermax.exe" -RESTART
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe"
"D:\Programy\Razer\Copperhead\razerhid.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"D:\Programy\Winamp\winampa.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"D:\Programy\Razer\Copperhead\razertra.exe"
"D:\Programy\Razer\Copperhead\razerofa.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\sysWOW64\wbem\wmiprvse.exe -secured -Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Windows\system32\WinMsgBalloonServer.exe"
\\.\pipe\raidxpertPipe1
taskeng.exe {A96E7A43-23A8-4691-AAAA-D9E66F5EC14F}
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"D:\Programy\Mozilla Firefox\firefox.exe"
C:\Windows\system32\wbem\WmiApSrv.exe
"C:\Users\Rada\Desktop\DL\RSITx64.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544

=========Mozilla firefox=========

ProfilePath - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ovkzj8a8.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.235 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.235 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

D:\Programy\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

D:\Programy\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

D:\Programy\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ovkzj8a8.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
Complitly - C:\Users\Rada\AppData\Roaming\Complitly\64\Complitly64.dll [2012-05-22 169688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-13 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-13 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-09-04 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-09-04 157672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-04-24 12480616]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-03-11 9569096]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21 1174016]
"AlcoholAutomount"=D:\Programy\Alcohol 52\AxAutoMntSrv.exe [2010-08-20 33120]
"DriverMax_RESTART"=D:\Programy\DriverMax\drivermax.exe [2012-09-03 11325376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverMax]
D:\Programy\DriverMax\drivermax.exe [2012-09-03 11325376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverMax_RESTART]
D:\Programy\DriverMax\drivermax.exe [2012-09-03 11325376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorShield]
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2012-03-28 2786480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Xvid]
D:\Programy\Xvid\CheckUpdate.exe [2011-01-17 8192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AML Device Install.lnk]
C:\PROGRA~2\AMDAVT~1\bin\kdbsync.exe [2012-01-31 10752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Rada^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.lnk]
D:\Programy\OPENOF~1.ORG\program\QUICKS~1.EXE [2012-04-19 1199104]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"Copperhead"=D:\Programy\Razer\Copperhead\razerhid.exe [2009-11-19 135168]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-08-21 4282728]
"WinampAgent"=D:\Programy\Winamp\winampa.exe [2011-10-26 74752]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-03-09 636032]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AVer HID Receiver.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\fsproflt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\fsproflt]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.FFDS"=ff_vfw.dll
"vidc.XVID"=xvidvfw.dll
"VIDC.FPS1"=frapsv64.dll
"MSVideo8"=VfWWDM32.dll
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"VIDC.ACDV"=ACDV.dll
"vidc.x264"=C:\PROGRA~1\X264VF~1\X264VF~1.DLL
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"vidc.xtor"=DxtoryCodec64.dll
"VIDC.LAGS"=lagarith.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-10-11 20:34:13 ----D---- C:\rsit
2012-10-11 20:34:13 ----D---- C:\Program Files\trend micro
2012-10-11 20:22:00 ----A---- C:\Windows\system32\coinst_9.001.dll
2012-10-11 20:21:59 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2012-10-11 20:21:59 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2012-10-11 20:21:59 ----A---- C:\Windows\system32\atiuxp64.dll
2012-10-11 20:21:58 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2012-10-11 20:21:58 ----A---- C:\Windows\system32\atiumd6a.dll
2012-10-11 20:21:57 ----A---- C:\Windows\system32\atiumd64.dll
2012-10-11 20:21:56 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2012-10-11 20:21:56 ----A---- C:\Windows\SYSWOW64\atisamu32.dll
2012-10-11 20:21:56 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2012-10-11 20:21:56 ----A---- C:\Windows\system32\atiu9p64.dll
2012-10-11 20:21:56 ----A---- C:\Windows\system32\atitmm64.dll
2012-10-11 20:21:56 ----A---- C:\Windows\system32\atisamu64.dll
2012-10-11 20:21:55 ----A---- C:\Windows\system32\atio6axx.dll
2012-10-11 20:21:53 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2012-10-11 20:21:53 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2012-10-11 20:21:53 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2012-10-11 20:21:53 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2012-10-11 20:21:53 ----A---- C:\Windows\system32\atimuixx.dll
2012-10-11 20:21:53 ----A---- C:\Windows\system32\atimpc64.dll
2012-10-11 20:21:53 ----A---- C:\Windows\system32\amdpcom64.dll
2012-10-11 20:21:52 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2012-10-11 20:21:52 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2012-10-11 20:21:52 ----A---- C:\Windows\system32\atiicdxx.dat
2012-10-11 20:21:52 ----A---- C:\Windows\system32\atiglpxx.dll
2012-10-11 20:21:52 ----A---- C:\Windows\system32\atig6txx.dll
2012-10-11 20:21:52 ----A---- C:\Windows\system32\atig6pxx.dll
2012-10-11 20:21:52 ----A---- C:\Windows\system32\atiesrxx.exe
2012-10-11 20:21:52 ----A---- C:\Windows\system32\atiedu64.dll
2012-10-11 20:21:52 ----A---- C:\Windows\system32\atieclxx.exe
2012-10-11 20:21:51 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2012-10-11 20:21:51 ----A---- C:\Windows\system32\atidxx64.dll
2012-10-11 20:21:50 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2012-10-11 20:21:50 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2012-10-11 20:21:50 ----A---- C:\Windows\system32\atidemgy.dll
2012-10-11 20:21:50 ----A---- C:\Windows\system32\aticfx64.dll
2012-10-11 20:21:50 ----A---- C:\Windows\system32\aticalrt64.dll
2012-10-11 20:21:50 ----A---- C:\Windows\system32\aticaldd64.dll
2012-10-11 20:21:49 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2012-10-11 20:21:48 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2012-10-11 20:21:48 ----A---- C:\Windows\system32\aticalcl64.dll
2012-10-11 20:21:48 ----A---- C:\Windows\system32\atiapfxx.exe
2012-10-11 20:21:47 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2012-10-11 20:21:47 ----A---- C:\Windows\SYSWOW64\ati2edxx.dll
2012-10-11 20:21:47 ----A---- C:\Windows\SYSWOW64\amdave32.dll
2012-10-11 20:21:47 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2012-10-11 20:21:47 ----A---- C:\Windows\system32\amdave64.dll
2012-10-11 12:11:23 ----A---- C:\Windows\system32\MRT.exe
2012-10-11 11:59:35 ----A---- C:\Windows\system32\browserchoice.exe
2012-10-11 11:54:14 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-10-11 11:54:14 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-10-11 11:54:14 ----A---- C:\Windows\system32\mshtmled.dll
2012-10-11 11:54:13 ----A---- C:\Windows\SYSWOW64\url.dll
2012-10-11 11:54:13 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-10-11 11:54:13 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-10-11 11:54:13 ----A---- C:\Windows\system32\url.dll
2012-10-11 11:54:13 ----A---- C:\Windows\system32\ieUnatt.exe
2012-10-11 11:54:13 ----A---- C:\Windows\system32\ieui.dll
2012-10-11 11:54:12 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-10-11 11:54:12 ----A---- C:\Windows\system32\urlmon.dll
2012-10-11 11:54:11 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-10-11 11:54:11 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-10-11 11:54:11 ----A---- C:\Windows\system32\wininet.dll
2012-10-11 11:54:11 ----A---- C:\Windows\system32\msfeeds.dll
2012-10-11 11:54:11 ----A---- C:\Windows\system32\jscript9.dll
2012-10-11 11:54:10 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-10-11 11:54:10 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-10-11 11:54:10 ----A---- C:\Windows\system32\vbscript.dll
2012-10-11 11:54:10 ----A---- C:\Windows\system32\jsproxy.dll
2012-10-11 11:54:09 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-10-11 11:54:09 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-10-11 11:54:09 ----A---- C:\Windows\system32\jscript.dll
2012-10-11 11:54:09 ----A---- C:\Windows\system32\iertutil.dll
2012-10-11 11:54:08 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-10-11 11:54:06 ----A---- C:\Windows\system32\mshtml.dll
2012-10-11 11:54:06 ----A---- C:\Windows\system32\ieframe.dll
2012-10-11 11:54:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-10-11 11:48:09 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-10-11 11:48:09 ----A---- C:\Windows\system32\imagehlp.dll
2012-10-11 11:48:09 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-10-11 11:48:08 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-10-11 11:48:08 ----A---- C:\Windows\system32\wmi.dll
2012-10-11 11:45:12 ----SHD---- C:\Config.Msi
2012-10-11 11:42:48 ----A---- C:\Windows\system32\KernelBase.dll
2012-10-11 11:42:48 ----A---- C:\Windows\system32\kernel32.dll
2012-10-11 11:42:47 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-10-11 11:42:47 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-10-11 11:42:47 ----A---- C:\Windows\system32\wow64win.dll
2012-10-11 11:42:47 ----A---- C:\Windows\system32\wow64.dll
2012-10-11 11:42:47 ----A---- C:\Windows\system32\winsrv.dll
2012-10-11 11:42:47 ----A---- C:\Windows\system32\conhost.exe
2012-10-11 11:42:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-10-11 11:42:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-11 11:42:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-11 11:42:46 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-11 11:42:46 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-10-11 11:42:46 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-10-11 11:42:46 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-10-11 11:42:46 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-10-11 11:42:46 ----A---- C:\Windows\system32\wow64cpu.dll
2012-10-11 11:42:46 ----A---- C:\Windows\system32\ntvdm64.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-10-11 11:42:45 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-10-11 11:42:44 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-10-11 11:42:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-10-11 11:42:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-10-11 11:42:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-11 11:42:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-10-11 11:42:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-10-11 11:42:43 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-10-11 11:42:43 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-10-11 11:42:43 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-10-11 11:42:43 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-10-11 11:42:43 ----A---- C:\Windows\SYSWOW64\user.exe
2012-10-11 11:42:11 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-10-11 11:42:11 ----A---- C:\Windows\system32\tzres.dll
2012-10-11 11:41:47 ----A---- C:\Windows\system32\ntshrui.dll
2012-10-11 11:41:46 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-10-11 11:41:43 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2012-10-11 11:41:42 ----A---- C:\Windows\system32\cdosys.dll
2012-10-11 11:41:37 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-10-11 11:41:37 ----A---- C:\Windows\system32\webio.dll
2012-10-11 11:41:31 ----A---- C:\Windows\system32\schannel.dll
2012-10-11 11:41:30 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-10-11 11:41:30 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2012-10-11 11:41:30 ----A---- C:\Windows\system32\ncrypt.dll
2012-10-11 11:41:30 ----A---- C:\Windows\system32\lsasrv.dll
2012-10-11 11:41:30 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-10-11 11:41:30 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-10-11 11:41:30 ----A---- C:\Windows\system32\drivers\cng.sys
2012-10-11 11:41:29 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-10-11 11:41:29 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-10-11 11:41:29 ----A---- C:\Windows\system32\sspisrv.dll
2012-10-11 11:41:29 ----A---- C:\Windows\system32\sspicli.dll
2012-10-11 11:41:29 ----A---- C:\Windows\system32\secur32.dll
2012-10-11 11:41:29 ----A---- C:\Windows\system32\lsass.exe
2012-10-11 11:41:26 ----A---- C:\Windows\system32\win32k.sys
2012-10-11 11:41:24 ----A---- C:\Windows\system32\shell32.dll
2012-10-11 11:41:23 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-10-11 11:41:20 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-10-11 11:41:20 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-10-11 11:41:20 ----A---- C:\Windows\system32\quartz.dll
2012-10-11 11:41:20 ----A---- C:\Windows\system32\qdvd.dll
2012-10-11 11:41:18 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-10-11 11:41:16 ----A---- C:\Windows\system32\OxpsConverter.exe
2012-10-11 11:41:04 ----A---- C:\Windows\system32\drivers\ndis.sys
2012-10-11 11:41:03 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2012-10-11 11:41:02 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-10-11 11:41:02 ----A---- C:\Windows\system32\DWrite.dll
2012-10-11 11:41:00 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-10-11 11:41:00 ----A---- C:\Windows\system32\drivers\netio.sys
2012-10-11 11:40:59 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2012-10-11 11:40:57 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-10-11 11:40:56 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-10-11 11:40:56 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-10-11 11:40:54 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-10-11 11:40:54 ----A---- C:\Windows\system32\msi.dll
2012-10-11 11:40:52 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2012-10-11 11:40:52 ----A---- C:\Windows\system32\msxml6.dll
2012-10-11 11:40:52 ----A---- C:\Windows\system32\msxml3.dll
2012-10-11 11:40:51 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2012-10-11 11:40:49 ----A---- C:\Windows\system32\localspl.dll
2012-10-11 11:40:46 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-10-11 11:40:46 ----A---- C:\Windows\system32\ntdll.dll
2012-10-11 11:40:42 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-10-11 11:40:42 ----A---- C:\Windows\system32\kerberos.dll
2012-10-11 11:40:40 ----A---- C:\Windows\system32\rdpcorets.dll
2012-10-11 11:40:40 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-10-11 11:40:39 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-10-11 11:40:39 ----A---- C:\Windows\system32\EncDec.dll
2012-10-11 11:40:38 ----A---- C:\Windows\SYSWOW64\srclient.dll
2012-10-11 11:40:38 ----A---- C:\Windows\system32\srcore.dll
2012-10-11 11:40:36 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-10-11 11:40:36 ----A---- C:\Windows\system32\rdpcore.dll
2012-10-11 11:40:36 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-10-11 11:40:27 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-10-11 11:40:27 ----A---- C:\Windows\system32\rdpwsx.dll
2012-10-11 11:40:27 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-10-11 11:40:26 ----A---- C:\Windows\system32\drivers\afd.sys
2012-10-11 11:40:25 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-10-11 11:40:25 ----A---- C:\Windows\system32\msvcrt.dll
2012-10-11 11:40:24 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2012-10-11 11:40:24 ----A---- C:\Windows\system32\d3d10level9.dll
2012-10-11 11:40:23 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-10-11 11:40:22 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-10-11 11:40:22 ----A---- C:\Windows\SYSWOW64\browcli.dll
2012-10-11 11:40:22 ----A---- C:\Windows\system32\netapi32.dll
2012-10-11 11:40:22 ----A---- C:\Windows\system32\browser.dll
2012-10-11 11:40:22 ----A---- C:\Windows\system32\browcli.dll
2012-10-11 11:40:20 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-10-11 11:40:20 ----A---- C:\Windows\system32\wintrust.dll
2012-10-11 11:40:19 ----A---- C:\Windows\system32\csrsrv.dll
2012-10-11 11:40:16 ----A---- C:\Windows\system32\profsvc.dll
2012-10-11 11:40:06 ----A---- C:\Windows\system32\crypt32.dll
2012-10-11 11:40:05 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-10-11 11:40:05 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2012-10-11 11:40:05 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-10-11 11:40:05 ----A---- C:\Windows\system32\cryptsvc.dll
2012-10-11 11:40:05 ----A---- C:\Windows\system32\cryptnet.dll
2012-10-11 11:39:43 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-10-11 11:39:43 ----A---- C:\Windows\system32\win32spl.dll
2012-10-11 11:39:43 ----A---- C:\Windows\system32\spoolsv.exe
2012-10-11 11:39:42 ----A---- C:\Windows\splwow64.exe
2012-10-11 11:33:37 ----A---- C:\Windows\system32\packager.dll
2012-10-11 11:33:36 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-10-11 11:28:45 ----A---- C:\Windows\system32\wups2.dll
2012-10-11 11:28:45 ----A---- C:\Windows\system32\wucltux.dll
2012-10-11 11:28:45 ----A---- C:\Windows\system32\wuaueng.dll
2012-10-11 11:28:45 ----A---- C:\Windows\system32\wuauclt.exe
2012-10-11 11:28:36 ----A---- C:\Windows\system32\wups.dll
2012-10-11 11:28:36 ----A---- C:\Windows\system32\wudriver.dll
2012-10-11 11:28:36 ----A---- C:\Windows\system32\wuapi.dll
2012-10-11 11:28:25 ----A---- C:\Windows\system32\wuwebv.dll
2012-10-11 11:28:25 ----A---- C:\Windows\system32\wuapp.exe
2012-10-11 08:57:04 ----D---- C:\ProgramData\ATI
2012-10-11 08:53:26 ----D---- C:\Program Files (x86)\AMD AVT
2012-10-11 08:53:23 ----D---- C:\Program Files\AMD
2012-10-11 08:53:22 ----D---- C:\Program Files (x86)\AMD APP
2012-10-11 08:53:18 ----D---- C:\Program Files\Common Files\ATI Technologies
2012-10-11 08:51:41 ----D---- C:\Program Files (x86)\ATI Technologies
2012-10-11 08:51:40 ----D---- C:\Program Files\ATI
2012-10-11 08:50:40 ----D---- C:\Program Files\ATI Technologies
2012-10-11 08:49:21 ----D---- C:\AMD
2012-10-04 20:26:24 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-10-02 10:16:51 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-10-02 10:16:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-10-02 10:16:51 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-10-02 10:16:51 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-10-02 10:16:50 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-10-02 10:16:50 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-10-02 10:16:49 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-10-02 10:16:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-10-02 10:16:49 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-10-02 10:16:49 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-10-02 10:16:48 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-10-02 10:16:48 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-10-02 10:16:47 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-10-02 10:16:47 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-10-02 10:16:46 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-10-02 10:16:46 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-09-27 18:24:56 ----A---- C:\Users\Rada\AppData\Roaming\Mouse Monitor_Counters.ini
2012-09-27 12:02:35 ----A---- C:\Users\Rada\AppData\Roaming\GPU Monitor_GPU3_Settings.ini
2012-09-27 12:02:30 ----A---- C:\Users\Rada\AppData\Roaming\GPU Monitor_GPU2_Settings.ini
2012-09-27 12:02:22 ----A---- C:\Users\Rada\AppData\Roaming\GPU Monitor_GPU1_Settings.ini
2012-09-27 08:19:02 ----A---- C:\Users\Rada\AppData\Roaming\Mouse Monitor_Settings.ini
2012-09-27 08:14:14 ----A---- C:\Users\Rada\AppData\Roaming\Network Monitor II_Traffic.ini
2012-09-27 08:12:59 ----A---- C:\Users\Rada\AppData\Roaming\Network Monitor II_Settings.ini
2012-09-27 08:11:45 ----A---- C:\Users\Rada\AppData\Roaming\Ping Monitor_Settings.ini
2012-09-27 08:11:28 ----A---- C:\Users\Rada\AppData\Roaming\Top Process Monitor_Settings.ini
2012-09-27 08:09:38 ----A---- C:\Users\Rada\AppData\Roaming\System Monitor II_CPU0_Settings.ini
2012-09-27 08:03:08 ----A---- C:\Users\Rada\AppData\Roaming\GPU Monitor_GPU0_Settings.ini
2012-09-21 10:51:06 ----A---- C:\Windows\unins000.exe
2012-09-21 10:51:06 ----A---- C:\Windows\unins000.dat
2012-09-21 10:51:06 ----A---- C:\Windows\SYSWOW64\lagarith.dll
2012-09-21 10:51:06 ----A---- C:\Windows\system32\lagarith.dll
2012-09-21 09:34:32 ----A---- C:\Windows\SYSWOW64\DxtoryCodec.dll
2012-09-21 09:34:32 ----A---- C:\Windows\system32\DxtoryCodec64.dll
2012-09-20 12:36:20 ----A---- C:\Windows\SYSWOW64\CmdLineExt_x64.dll
2012-09-20 12:34:56 ----D---- C:\Windows\SYSWOW64\xlive
2012-09-20 12:34:55 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2012-09-20 10:01:37 ----D---- C:\Users\Rada\AppData\Roaming\Ulozto File Manager

======List of files/folders modified in the last 1 month======

2012-10-11 20:34:16 ----D---- C:\Windows\Temp
2012-10-11 20:34:13 ----RD---- C:\Program Files
2012-10-11 20:29:30 ----D---- C:\Windows
2012-10-11 20:28:09 ----D---- C:\Windows\System32
2012-10-11 20:25:57 ----D---- C:\Windows\system32\catroot
2012-10-11 20:24:40 ----D---- C:\Windows\system32\DriverStore
2012-10-11 20:24:40 ----D---- C:\Windows\inf
2012-10-11 20:23:35 ----D---- C:\Windows\system32\catroot2
2012-10-11 20:23:26 ----D---- C:\Windows\SysWOW64
2012-10-11 20:22:55 ----D---- C:\Windows\system32\drivers
2012-10-11 20:22:40 ----SHD---- C:\System Volume Information
2012-10-11 20:21:08 ----D---- C:\Windows\SoftwareDistribution
2012-10-11 20:20:03 ----AD---- C:\ProgramData\TEMP
2012-10-11 20:20:01 ----D---- C:\Windows\system32\Tasks
2012-10-11 20:15:07 ----D---- C:\Windows\debug
2012-10-11 19:02:19 ----D---- C:\Windows\Microsoft.NET
2012-10-11 19:02:18 ----RSD---- C:\Windows\assembly
2012-10-11 18:51:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-10-11 14:55:42 ----D---- C:\Users\Rada\AppData\Roaming\gtk-2.0
2012-10-11 12:43:31 ----D---- C:\ProgramData\Spyware Terminator
2012-10-11 12:38:30 ----D---- C:\Windows\system32\config
2012-10-11 12:19:16 ----D---- C:\Windows\winsxs
2012-10-11 12:16:29 ----D---- C:\Windows\system32\sk-SK
2012-10-11 12:16:29 ----D---- C:\Windows\system32\en-US
2012-10-11 12:16:29 ----D---- C:\Windows\system32\cs-CZ
2012-10-11 12:16:28 ----D---- C:\Windows\ehome
2012-10-11 12:16:28 ----D---- C:\Program Files\Common Files\System
2012-10-11 12:16:27 ----D---- C:\Windows\SYSWOW64\sk-SK
2012-10-11 12:16:27 ----D---- C:\Windows\SYSWOW64\en-US
2012-10-11 12:16:27 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-10-11 12:16:27 ----D---- C:\Windows\AppPatch
2012-10-11 12:16:26 ----D---- C:\Windows\SYSWOW64\migration
2012-10-11 12:16:26 ----D---- C:\Windows\system32\migration
2012-10-11 12:16:26 ----D---- C:\Program Files\Internet Explorer
2012-10-11 12:16:26 ----D---- C:\Program Files (x86)\Internet Explorer
2012-10-11 12:16:24 ----RSD---- C:\Windows\Fonts
2012-10-11 12:16:24 ----D---- C:\Program Files\Windows Journal
2012-10-11 12:09:37 ----SHD---- C:\Windows\Installer
2012-10-11 08:57:04 ----HD---- C:\ProgramData
2012-10-11 08:53:27 ----D---- C:\ProgramData\AMD
2012-10-11 08:53:26 ----RD---- C:\Program Files (x86)
2012-10-11 08:53:23 ----SD---- C:\Users\Rada\AppData\Roaming\Microsoft
2012-10-11 08:53:23 ----D---- C:\Program Files (x86)\AMD
2012-10-11 08:53:18 ----D---- C:\Program Files\Common Files
2012-10-11 08:53:18 ----D---- C:\Program Files (x86)\Common Files
2012-10-11 08:38:28 ----D---- C:\Users\Rada\AppData\Roaming\Winamp
2012-10-10 13:19:25 ----D---- C:\ProgramData\Freemake
2012-10-10 06:55:32 ----D---- C:\Users\Rada\AppData\Roaming\uTorrent
2012-10-10 06:55:32 ----D---- C:\Users\Rada\AppData\Roaming\Notepad++
2012-10-10 06:55:31 ----D---- C:\Windows\Logs
2012-10-09 22:00:45 ----D---- C:\Users\Rada\AppData\Roaming\Skype
2012-10-04 09:50:25 ----D---- C:\Windows\system32\wdi
2012-10-03 10:15:44 ----D---- C:\Users\Rada\AppData\Roaming\BSplayer
2012-10-02 10:16:53 ----D---- C:\Windows\SYSWOW64\directx
2012-09-27 08:09:11 ----D---- C:\Windows\Prefetch
2012-09-27 07:56:49 ----A---- C:\Users\Rada\AppData\Roaming\GPU MeterV2_Settings.ini
2012-09-25 07:27:01 ----A---- C:\Users\Rada\AppData\Roaming\All CPU Meter_Settings.ini
2012-09-21 23:44:26 ----A---- C:\Users\Rada\AppData\Roaming\GPU Meter_Settings.ini
2012-09-20 12:17:28 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-09-19 12:32:17 ----D---- C:\Windows\system32\LogFiles
2012-09-18 13:33:58 ----D---- C:\Users\Rada\AppData\Roaming\dvdcss
2012-09-13 16:56:24 ----A---- C:\Windows\system32\atiadlxx.dll
2012-09-12 14:48:32 ----D---- C:\Users\Rada\AppData\Roaming\XnView
2012-09-12 13:34:03 ----D---- C:\Windows\LiveKernelReports

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 FSProFilter;FSPro File Filter; C:\Windows\System32\Drivers\FSPFltd.sys [2010-07-22 54848]
R0 MxEFUF;Matrox Extio Upper Function Filter; C:\Windows\system32\DRIVERS\MxEFUF64.sys [2010-11-04 143688]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2011-10-13 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-11-23 530488]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-08-21 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-08-21 969200]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-08-21 359464]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-08-21 59728]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-03-11 577824]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-03-11 43248]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2011-10-13 514560]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-02-03 93200]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R2 AODDriver4.1;AODDriver4.1; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-01-03 55936]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-08-21 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]
R2 mmkbd;Dritek USB HID Device Filter Driver; C:\Windows\SysWOW64\Drivers\mmkbd.sys [2007-01-05 55440]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2011-02-11 35344]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2012-06-11 51496]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-09-13 10695168]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-09-13 459776]
R3 AVerAF15;AVerMedia A815; C:\Windows\System32\Drivers\AVerAF15.sys [2009-12-04 312064]
R3 copperhd;Razer Copperhead Driver; C:\Windows\system32\drivers\copperhd.sys [2009-11-10 14336]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-04-24 4028520]
R3 moufiltr;Mouse Filter; C:\Windows\system32\DRIVERS\moufiltr.sys [2006-12-26 7168]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2012-06-05 237968]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-01 535656]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 61883;61883 Unit Device; C:\Windows\system32\DRIVERS\61883.sys [2009-07-14 60288]
S3 acstfnmi;acstfnmi; C:\Windows\system32\drivers\acstfnmi.sys []
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-06-07 231440]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-09-13 10695168]
S3 Avc;Zařízení AVC; C:\Windows\system32\DRIVERS\avc.sys [2009-07-14 48768]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2009-07-14 61440]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2011-10-13 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Microsoft Virtual 3D Video Transport Driver; C:\Windows\system32\drivers\Synth3dVsc.sys [2011-10-13 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-09-13 239616]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-03-09 361984]
R2 AMD_RAIDXpert;AMD RAIDXpert; C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe [2009-09-19 122880]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-08-21 44808]
R2 AVerRemote;AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [2009-10-31 348160]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [2009-12-07 397312]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-03-11 2815496]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2011-10-13 27648]
R2 FreemakeVideoCapture;FreemakeVideoCapture; D:\Programy\Freemake\CaptureLib\CaptureLibService.exe [2012-09-07 8704]
R2 fsproflt;FSPro Filter Service; C:\Windows\SysWOW64\fsproflt.exe [2009-03-09 73392]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-12-17 75136]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2012-03-28 1148632]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2011-10-13 27648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-09 114144]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2011-10-13 27648]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-01-09 419624]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2011-10-13 27648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-02-04 1255736]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]

-----------------EOF-----------------

Re: Preventivka - Kontrola

Napsal: 12 říj 2012 10:31
od Márty84
Zdravim :)

:???: Jak je to s legalitou systemu? Ultimate neni zrovna bezna domaci verze :?:




:!: Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
:arrow: Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s
Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).




:arrow: Stahnete crystal disk info http://www.slunecnice.cz/sw/crystaldiskinfo/
Nainstalujte a spustte jako spravce. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz