Preventivní kontrola

[martin06]

Zdravím, potřeboval bych vědět, jestli je vše v pořádku. Díky

Logfile of random's system information tool 1.09 (written by random/random)
Run by Martin at 2013-01-02 18:08:13
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 50 GB (56%) free of 90 GB
Total RAM: 4095 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:08:20, on 2.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Martin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - (no file)
O2 - BHO: (no name) - {BA3295CF-17ED-4F49-9E95-D999A0ADBFDC} - (no file)
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - (no file)
O3 - Toolbar: (no name) - {0124123D-61B4-456f-AF86-78C53A0790C5} - (no file)
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-757773035-3011624175-3059935028-1005\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-757773035-3011624175-3059935028-1005\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8221A87D-77D6-4B8B-8303-96EB1069FE39}: NameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\..\{F002CBF7-C926-4284-9981-1BD684F9E5B0}: NameServer = 10.94.3.65
O17 - HKLM\System\CS1\Services\Tcpip\..\{8221A87D-77D6-4B8B-8303-96EB1069FE39}: NameServer = 8.8.8.8
O17 - HKLM\System\CS2\Services\Tcpip\..\{8221A87D-77D6-4B8B-8303-96EB1069FE39}: NameServer = 8.8.8.8
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - Unknown owner - C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10293 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE 0x250
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\1.3.21.124\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.21.124\GoogleCrashHandler64.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\IoctlSvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000006e8
C:\Windows\system32\svchost.exe -k HPService
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe"
"C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Windows\system32\wuauclt.exe"
taskeng.exe {53660B8E-D014-4020-8D5A-9A31D74A1FEC}
C:\Windows\System32\svchost.exe -k swprv
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3428.1.392523824\322969657" --gpu-vendor-id=0x10de --gpu-device-id=0x0641 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.1070 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/1/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwnd10/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warmest_socket/ --renderer-print-preview --disable-accelerated-2d-canvas --channel="3428.4.1753238715\360905341" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3428.5.138102016\1203229323" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
taskeng.exe {30D100FE-60BE-425A-B12C-32212A25BDC3}
"C:\Users\Martin\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ooammx7e.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.135 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.135 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_135.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.10.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

C:\Program Files\Nightly\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Nightly\components\
binary.manifest
browsercomps.dll

C:\Program Files\Nightly\searchplugins\
amazondotcom.xml
bing.xml
eBay.xml
google.xml
twitter.xml
wikipedia.xml
yahoo.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-12-18 551400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-12-18 209384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2012-07-27 66496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA3295CF-17ED-4F49-9E95-D999A0ADBFDC}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0124123D-61B4-456f-AF86-78C53A0790C5}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93}
{0124123D-61B4-456f-AF86-78C53A0790C5}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-05-23 7833120]
"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-05-23 1833504]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite 4.30.3 Setup]
C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1L2AM0FA\daemon4303-lite.exe [2012-12-17 7321032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]
D:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2012-12-17 1354736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Acrobat Assistant.lnk]
C:\PROGRA~2\Adobe\ACROBA~1.0CE\Distillr\acrotray.exe [2003-07-17 217180]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe [2009-09-20 270336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"VirtualCloneDrive"=C:\Program Files (x86)\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2012-12-18 384800]
"NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe []
"NBKeyScan"=C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-02 18:08:14 ----D---- C:\Program Files\trend micro
2013-01-02 18:08:13 ----D---- C:\rsit
2013-01-02 17:52:37 ----D---- C:\Program Files (x86)\NirSoft
2013-01-01 16:26:47 ----D---- C:\Program Files (x86)\Rockstar Games
2012-12-27 23:28:30 ----A---- C:\Windows\SYSWOW64\drivers\DrvAgent64.SYS
2012-12-27 21:19:16 ----D---- C:\Windows\SYSWOW64\directx
2012-12-25 20:39:59 ----D---- C:\Users\Martin\AppData\Roaming\HP
2012-12-25 20:39:59 ----D---- C:\ProgramData\WEBREG
2012-12-25 20:31:05 ----D---- C:\ProgramData\HP Product Assistant
2012-12-25 20:28:42 ----D---- C:\Program Files (x86)\HP
2012-12-25 20:28:41 ----HD---- C:\Config.Msi
2012-12-25 20:26:01 ----N---- C:\Windows\hpomdl19.dat
2012-12-25 20:26:01 ----A---- C:\Windows\hpoins19.dat
2012-12-25 20:25:46 ----D---- C:\ProgramData\HP
2012-12-25 20:25:36 ----A---- C:\Windows\system32\hpzids40.dll
2012-12-25 20:25:36 ----A---- C:\Windows\system32\hpowiav1.dll
2012-12-25 20:25:36 ----A---- C:\Windows\system32\hpovst01.dll
2012-12-25 20:25:36 ----A---- C:\Windows\system32\hpotscl1.dll
2012-12-25 10:49:13 ----D---- C:\Program Files\CPUID
2012-12-25 10:32:03 ----D---- C:\Program Files (x86)\Lavalys
2012-12-22 17:23:35 ----D---- C:\Users\Martin\AppData\Roaming\TS3Client
2012-12-22 17:22:17 ----D---- C:\Program Files\TeamSpeak 3 Client
2012-12-22 16:00:33 ----D---- C:\Users\Martin\AppData\Roaming\Nero
2012-12-22 15:54:02 ----A---- C:\Windows\Irremote.ini
2012-12-22 15:53:04 ----D---- C:\ProgramData\Nero
2012-12-22 15:53:04 ----D---- C:\Program Files (x86)\Nero
2012-12-22 14:59:53 ----A---- C:\Windows\SYSWOW64\TwnLib20.dll
2012-12-22 14:59:39 ----A---- C:\Windows\SYSWOW64\picn20.dll
2012-12-22 14:59:37 ----A---- C:\Windows\SYSWOW64\imagx5.dll
2012-12-22 14:59:37 ----A---- C:\Windows\SYSWOW64\imagr5.dll
2012-12-22 14:59:34 ----A---- C:\Windows\SYSWOW64\ImagXpr5.dll
2012-12-22 14:59:32 ----A---- C:\Windows\SYSWOW64\NeroCheck.exe
2012-12-22 14:59:28 ----D---- C:\Program Files (x86)\Ahead
2012-12-22 00:28:59 ----D---- C:\Program Files (x86)\AGEIA Technologies
2012-12-22 00:26:01 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2012-12-22 00:26:01 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2012-12-22 00:26:01 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2012-12-22 00:26:01 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2012-12-22 00:26:01 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2012-12-22 00:26:01 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2012-12-22 00:26:01 ----A---- C:\Windows\system32\nvopencl.dll
2012-12-22 00:26:01 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-12-22 00:26:00 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2012-12-22 00:26:00 ----A---- C:\Windows\system32\nvoglv64.dll
2012-12-22 00:26:00 ----A---- C:\Windows\system32\nvcuda.dll
2012-12-22 00:26:00 ----A---- C:\Windows\system32\nvcompiler.dll
2012-12-22 00:26:00 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-12-22 00:25:58 ----A---- C:\Windows\system32\nvcuvid.dll
2012-12-22 00:24:18 ----D---- C:\NVIDIA
2012-12-21 19:45:11 ----D---- C:\Users\Martin\AppData\Roaming\DC++
2012-12-21 19:44:42 ----D---- C:\Program Files (x86)\DC++
2012-12-21 16:33:17 ----A---- C:\Windows\SYSWOW64\CmdLineExt_x64.dll
2012-12-21 16:16:12 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-12-21 13:54:52 ----RHD---- C:\Users\Martin\AppData\Roaming\SecuROM
2012-12-21 13:05:42 ----D---- C:\Windows\SYSWOW64\xlive
2012-12-21 13:05:42 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2012-12-21 11:41:13 ----D---- C:\Users\Martin\AppData\Roaming\GHISLER
2012-12-21 11:41:13 ----D---- C:\Program Files (x86)\totalcmd
2012-12-18 22:44:41 ----D---- C:\Users\Martin\AppData\Roaming\WinRAR
2012-12-18 22:44:35 ----D---- C:\Program Files\WinRAR
2012-12-18 09:57:48 ----D---- C:\Users\Martin\AppData\Roaming\NVIDIA
2012-12-18 09:52:34 ----D---- C:\ProgramData\NVIDIA
2012-12-18 09:52:20 ----A---- C:\Windows\system32\nvvsvc.exe
2012-12-18 09:52:20 ----A---- C:\Windows\system32\nvsvcr.dll
2012-12-18 09:52:20 ----A---- C:\Windows\system32\nvsvc64.dll
2012-12-18 09:52:20 ----A---- C:\Windows\system32\nvshext.dll
2012-12-18 09:52:20 ----A---- C:\Windows\system32\nvmctray.dll
2012-12-18 09:52:20 ----A---- C:\Windows\system32\nvcpl.dll
2012-12-18 09:51:55 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2012-12-18 09:51:55 ----A---- C:\Windows\system32\OpenCL.dll
2012-12-18 09:51:47 ----D---- C:\ProgramData\NVIDIA Corporation
2012-12-18 09:50:44 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2012-12-18 09:50:44 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2012-12-18 09:50:44 ----A---- C:\Windows\system32\nvdispgenco64.dll
2012-12-18 09:50:44 ----A---- C:\Windows\system32\nvdispco64.dll
2012-12-18 09:50:44 ----A---- C:\Windows\system32\nvapi64.dll
2012-12-18 09:50:34 ----D---- C:\Program Files\NVIDIA Corporation
2012-12-18 00:39:20 ----A---- C:\Windows\system32\npDeployJava1.dll
2012-12-18 00:39:20 ----A---- C:\Windows\system32\javaws.exe
2012-12-18 00:39:20 ----A---- C:\Windows\system32\deployJava1.dll
2012-12-18 00:39:12 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2012-12-18 00:39:12 ----A---- C:\Windows\system32\javaw.exe
2012-12-18 00:39:12 ----A---- C:\Windows\system32\java.exe
2012-12-18 00:39:03 ----D---- C:\Program Files\Java
2012-12-17 21:36:20 ----D---- C:\Call Of Duty Modern Warfare 2
2012-12-17 21:30:05 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2012-12-17 20:36:48 ----D---- C:\Users\Martin\AppData\Roaming\Avira
2012-12-17 20:31:14 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2012-12-17 20:31:14 ----A---- C:\Windows\system32\drivers\avipbb.sys
2012-12-17 20:31:14 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2012-12-17 20:31:13 ----D---- C:\ProgramData\Avira
2012-12-17 20:31:13 ----D---- C:\Program Files (x86)\Avira
2012-12-17 17:58:50 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-12-17 17:58:16 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-12-17 17:58:16 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-12-17 17:58:16 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-12-17 17:58:16 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-12-17 17:58:16 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-12-17 17:58:16 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-12-17 17:58:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-12-17 17:58:16 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-12-17 17:58:16 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-12-17 17:58:16 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-12-17 17:58:16 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-12-17 17:58:16 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-12-17 17:58:16 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-12-17 17:58:16 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-12-17 17:58:15 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2012-12-17 17:58:15 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2012-12-17 17:58:15 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-12-17 17:58:15 ----A---- C:\Windows\system32\XAudio2_6.dll
2012-12-17 17:58:15 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2012-12-17 17:58:15 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-12-17 17:58:14 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2012-12-17 17:58:14 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2012-12-17 17:58:14 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2012-12-17 17:58:14 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-12-17 17:58:14 ----A---- C:\Windows\system32\xactengine3_6.dll
2012-12-17 17:58:14 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2012-12-17 17:58:13 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2012-12-17 17:58:13 ----A---- C:\Windows\system32\xactengine3_5.dll
2012-12-17 17:58:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2012-12-17 17:58:12 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2012-12-17 17:58:11 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2012-12-17 17:58:11 ----A---- C:\Windows\system32\d3dcsx_42.dll
2012-12-17 17:58:10 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2012-12-17 17:58:10 ----A---- C:\Windows\system32\d3dx11_42.dll
2012-12-17 17:58:09 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2012-12-17 17:58:09 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-12-17 17:58:08 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2012-12-17 17:58:08 ----A---- C:\Windows\system32\D3DX9_42.dll
2012-12-17 17:58:07 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2012-12-17 17:58:07 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2012-12-17 17:58:07 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-12-17 17:58:07 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-12-17 17:58:05 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-12-17 17:58:05 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-12-17 17:58:04 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-12-17 17:58:04 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2012-12-17 17:58:04 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2012-12-17 17:58:04 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-12-17 17:58:04 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-12-17 17:58:04 ----A---- C:\Windows\system32\xactengine3_4.dll
2012-12-17 17:58:03 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-12-17 17:58:03 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-12-17 17:58:02 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-12-17 17:58:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-12-17 17:58:02 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-12-17 17:58:02 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-12-17 17:58:01 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-12-17 17:58:01 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-12-17 17:58:00 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2012-12-17 17:58:00 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2012-12-17 17:58:00 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2012-12-17 17:58:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2012-12-17 17:58:00 ----A---- C:\Windows\system32\XAudio2_3.dll
2012-12-17 17:58:00 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2012-12-17 17:58:00 ----A---- C:\Windows\system32\xactengine3_3.dll
2012-12-17 17:58:00 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2012-12-17 17:57:59 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-12-17 17:57:59 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-12-17 17:57:59 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-12-17 17:57:59 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-12-17 17:57:58 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-12-17 17:57:58 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-12-17 17:57:57 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2012-12-17 17:57:57 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2012-12-17 17:57:57 ----A---- C:\Windows\system32\d3dx10_39.dll
2012-12-17 17:57:57 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2012-12-17 17:57:56 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2012-12-17 17:57:56 ----A---- C:\Windows\system32\D3DX9_39.dll
2012-12-17 17:57:55 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-12-17 17:57:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-12-17 17:57:55 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-12-17 17:57:55 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-12-17 17:57:55 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-12-17 17:57:55 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-12-17 17:57:55 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-12-17 17:57:55 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-12-17 17:57:54 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-12-17 17:57:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-12-17 17:57:54 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-12-17 17:57:54 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-12-17 17:57:52 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-12-17 17:57:52 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-12-17 17:57:51 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-12-17 17:57:51 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-12-17 17:57:51 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-12-17 17:57:51 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-12-17 17:57:51 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-12-17 17:57:51 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-12-17 17:57:49 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-12-17 17:57:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-12-17 17:57:49 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-12-17 17:57:49 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-12-17 17:57:47 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-12-17 17:57:47 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-12-17 17:57:46 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-12-17 17:57:46 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-12-17 17:57:46 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-12-17 17:57:46 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-12-17 17:57:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-12-17 17:57:45 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-12-17 17:57:44 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-12-17 17:57:44 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-12-17 17:57:43 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-12-17 17:57:43 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-12-17 17:57:42 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-12-17 17:57:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-12-17 17:57:42 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-12-17 17:57:42 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-12-17 17:57:39 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-12-17 17:57:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-12-17 17:57:39 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-12-17 17:57:39 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-12-17 17:57:39 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-12-17 17:57:39 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-12-17 17:57:38 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-12-17 17:57:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-12-17 17:57:38 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-12-17 17:57:38 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-12-17 17:57:36 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-12-17 17:57:36 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-12-17 17:57:35 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-12-17 17:57:35 ----A---- C:\Windows\system32\xinput1_3.dll
2012-12-17 17:57:34 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-12-17 17:57:34 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2012-12-17 17:57:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2012-12-17 17:57:34 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-12-17 17:57:34 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-12-17 17:57:34 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-12-17 17:57:32 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2012-12-17 17:57:32 ----A---- C:\Windows\system32\d3dx9_33.dll
2012-12-17 17:57:31 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2012-12-17 17:57:31 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2012-12-17 17:57:31 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2012-12-17 17:57:31 ----A---- C:\Windows\system32\xactengine2_6.dll
2012-12-17 17:57:31 ----A---- C:\Windows\system32\xactengine2_5.dll
2012-12-17 17:57:31 ----A---- C:\Windows\system32\d3dx10.dll
2012-12-17 17:57:29 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2012-12-17 17:57:29 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-12-17 17:57:28 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2012-12-17 17:57:28 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-12-17 17:57:28 ----A---- C:\Windows\system32\xactengine2_4.dll
2012-12-17 17:57:28 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-12-17 17:57:27 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-12-17 17:57:27 ----A---- C:\Windows\system32\d3dx9_31.dll
2012-12-17 17:57:26 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2012-12-17 17:57:26 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2012-12-17 17:57:26 ----A---- C:\Windows\system32\xinput1_2.dll
2012-12-17 17:57:26 ----A---- C:\Windows\system32\xactengine2_3.dll
2012-12-17 17:57:25 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2012-12-17 17:57:25 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2012-12-17 17:57:25 ----A---- C:\Windows\system32\xinput1_1.dll
2012-12-17 17:57:25 ----A---- C:\Windows\system32\xactengine2_2.dll
2012-12-17 17:57:24 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2012-12-17 17:57:24 ----A---- C:\Windows\system32\xactengine2_1.dll
2012-12-17 17:57:16 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-12-17 17:57:16 ----A---- C:\Windows\system32\d3dx9_30.dll
2012-12-17 17:57:15 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2012-12-17 17:57:15 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2012-12-17 17:57:15 ----A---- C:\Windows\system32\xactengine2_0.dll
2012-12-17 17:57:15 ----A---- C:\Windows\system32\x3daudio1_0.dll
2012-12-17 17:57:13 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2012-12-17 17:57:13 ----A---- C:\Windows\system32\d3dx9_29.dll
2012-12-17 17:57:12 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2012-12-17 17:57:12 ----A---- C:\Windows\system32\d3dx9_28.dll
2012-12-17 17:57:11 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2012-12-17 17:57:11 ----A---- C:\Windows\system32\d3dx9_27.dll
2012-12-17 17:57:10 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2012-12-17 17:57:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2012-12-17 17:57:08 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2012-12-17 17:57:08 ----A---- C:\Windows\system32\d3dx9_25.dll
2012-12-17 17:57:07 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2012-12-17 17:57:07 ----A---- C:\Windows\system32\d3dx9_24.dll
2012-12-17 17:05:21 ----D---- C:\Program Files (x86)\Microsoft Works
2012-12-17 17:04:53 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2012-12-17 17:04:41 ----D---- C:\Windows\PCHEALTH
2012-12-17 17:04:41 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-12-17 17:03:19 ----D---- C:\Program Files\Microsoft Office
2012-12-17 17:03:16 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2012-12-17 17:02:50 ----D---- C:\Program Files (x86)\Microsoft Office
2012-12-17 17:02:24 ----RHD---- C:\MSOCache
2012-12-17 16:55:31 ----D---- C:\Program Files (x86)\VirtualCloneDrive
2012-12-17 16:41:59 ----D---- C:\Users\Martin\AppData\Roaming\Opera
2012-12-17 16:41:54 ----D---- C:\Program Files (x86)\Opera
2012-12-17 16:38:19 ----A---- C:\Windows\system32\drivers\sptd.sys
2012-12-17 16:37:52 ----D---- C:\Users\Martin\AppData\Roaming\DAEMON Tools Lite
2012-12-17 15:57:35 ----D---- C:\Program Files\CCleaner
2012-12-17 15:52:26 ----D---- C:\Program Files (x86)\Google
2012-12-17 15:42:46 ----D---- C:\Program Files (x86)\Steam
2012-12-16 15:14:22 ----D---- C:\Users\Martin\AppData\Roaming\Macromedia
2012-12-16 15:14:22 ----D---- C:\Users\Martin\AppData\Roaming\Adobe
2012-12-16 15:12:06 ----D---- C:\Users\Martin\AppData\Roaming\Mozilla
2012-12-16 12:00:16 ----D---- C:\Users\Martin\AppData\Roaming\Identities
2012-12-16 12:00:08 ----SD---- C:\Users\Martin\AppData\Roaming\Microsoft
2012-12-16 12:00:08 ----D---- C:\Users\Martin\AppData\Roaming\Media Center Programs
2012-12-16 11:58:28 ----D---- C:\Windows\system32\appmgmt

======List of files/folders modified in the last 1 month======

2013-01-02 18:08:19 ----D---- C:\Windows\Temp
2013-01-02 18:08:14 ----RD---- C:\Program Files
2013-01-02 18:05:01 ----HD---- C:\ProgramData
2013-01-02 18:04:35 ----SHD---- C:\System Volume Information
2013-01-02 18:00:15 ----D---- C:\Windows
2013-01-02 17:52:37 ----RD---- C:\Program Files (x86)
2013-01-02 17:46:23 ----D---- C:\Windows\Minidump
2013-01-02 11:54:44 ----D---- C:\Windows\system32\config
2013-01-01 21:15:22 ----D---- C:\Windows\Prefetch
2013-01-01 21:08:30 ----SHD---- C:\Windows\Installer
2013-01-01 21:07:59 ----RSD---- C:\Windows\assembly
2013-01-01 16:26:36 ----D---- C:\Windows\winsxs
2012-12-31 13:03:14 ----D---- C:\Windows\Tasks
2012-12-31 13:03:14 ----D---- C:\Windows\system32\Tasks
2012-12-27 23:28:30 ----D---- C:\Windows\SYSWOW64\drivers
2012-12-27 21:29:11 ----D---- C:\Windows\SysWOW64
2012-12-27 21:19:16 ----D---- C:\temp
2012-12-26 15:30:13 ----D---- C:\Windows\pss
2012-12-25 20:39:33 ----A---- C:\Windows\win.ini
2012-12-25 20:38:58 ----D---- C:\Windows\System32
2012-12-25 20:33:16 ----D---- C:\Windows\system32\drivers
2012-12-25 20:33:03 ----D---- C:\Windows\twain_32
2012-12-25 20:31:13 ----D---- C:\Windows\inf
2012-12-25 20:31:07 ----RSD---- C:\Windows\Fonts
2012-12-25 20:29:56 ----D---- C:\Program Files (x86)\Common Files
2012-12-25 20:28:53 ----D---- C:\Windows\system32\DriverStore
2012-12-25 20:28:53 ----D---- C:\Windows\system32\catroot
2012-12-25 20:26:38 ----D---- C:\Program Files\HP
2012-12-24 12:50:53 ----D---- C:\Windows\system32\catroot2
2012-12-22 17:22:33 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-12-22 15:53:03 ----D---- C:\Windows\Cursors
2012-12-19 11:08:38 ----D---- C:\ProgramData\Adobe
2012-12-18 09:53:09 ----RD---- C:\Users
2012-12-18 09:52:19 ----D---- C:\Windows\Help
2012-12-17 21:13:22 ----D---- C:\Windows\system32\LogFiles
2012-12-17 20:59:50 ----SD---- C:\ProgramData\Microsoft
2012-12-17 17:56:28 ----D---- C:\Windows\Logs
2012-12-17 17:06:16 ----D---- C:\ProgramData\Microsoft Help
2012-12-17 17:05:04 ----D---- C:\Program Files (x86)\MSBuild
2012-12-17 17:04:52 ----D---- C:\Windows\ShellNew
2012-12-17 16:31:26 ----D---- C:\ProgramData\G DATA
2012-12-16 15:19:37 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-12-16 15:19:28 ----D---- C:\Program Files (x86)\Windows Media Player
2012-12-16 15:19:22 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-16 12:34:34 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-12-16 12:00:13 ----SHD---- C:\$Recycle.Bin
2012-12-16 11:58:28 ----D---- C:\ProgramData\Skype
2012-12-10 22:22:50 ----D---- C:\Windows\system32\NDF
2012-12-03 16:47:14 ----A---- C:\Windows\system32\nvwgf2umx.dll
2012-12-03 16:47:14 ----A---- C:\Windows\system32\nvd3dumx.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-08-21 19600]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2012-12-18 129216]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2012-11-16 27800]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-16 40816]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2012-12-18 99912]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-05-23 1762080]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-08-23 56320]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-12-17 868848]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2012-12-27 21712]
S3 GdNetMon;G Data Network Monitor; \??\C:\Windows\system32\drivers\GdNetMon64.sys [2012-11-11 31608]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2012-12-18 109344]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2012-12-18 85280]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-01 890216]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-03 1259880]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-11-30 382824]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-31 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-16 250808]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe []
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-31 116648]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-12-22 541760]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-06-28 1255736]

-----------------EOF-----------------

[martin06]

info.txt logfile of random's system information tool 1.09 2013-01-02 18:08:22

======Uninstall list======

-->C:\Program Files (x86)\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL
-->C:\Windows\UNNeroShowTime.exe /UNINSTALL
-->C:\Windows\UNNeroVision.exe /UNINSTALL
-->C:\Windows\UNRecode.exe /UNINSTALL
-->MsiExec /X{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}
64 Bit HP CIO Components Installer-->MsiExec.exe /I{55D55008-E5F6-47D6-B16F-B2A40D4D145F}
Adobe Acrobat 6.0 CE Professional-->MsiExec.exe /I{AC76BA86-1033-C470-7760-CE0000000001}
Adobe Flash Player 11 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_135_ActiveX.exe -maintain activex
Adobe Flash Player 11 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_135_Plugin.exe -maintain plugin
Adobe Reader X (10.1.4) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AA1000000001}
Aktualizace NVIDIA 1.11.3-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{7D363929-A3EE-478C-A3BB-FC211AC66427}\NVI2.DLL",UninstallPackage Display.Update
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{3108C217-BE83-42E4-AE9E-A56A2A92E549}\Setup.exe" -runfromtemp -l0x0009 -removeonly
Avira Free Antivirus-->C:\Program Files (x86)\Avira\AntiVir Desktop\setup.exe /REMOVE
Call Of Duty Modern Warfare 2 verze 1.2 CZ-->"C:\Call Of Duty Modern Warfare 2\unins000.exe"
Canon Camera Support Core Library-->C:\Program Files (x86)\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{C3E1AA89-B370-46F4-AEBD-F4EBE7BE38A1} /l1033
Canon RAW Image Task for ZoomBrowser EX-->C:\Program Files (x86)\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{9518F764-C54D-47B2-9E73-154B21E79FD2}
Canon RemoteCapture Task for ZoomBrowser EX-->C:\Program Files (x86)\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{2C164906-E68F-462A-9010-70DD022223EF}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Codec Pack - All In 1 6.0.3.0-->C:\Windows\iun6002.exe "C:\Program Files (x86)\Codec Pack - All In 1\irunin.ini"
Counter-Strike-->"C:\Program Files (x86)\Steam\steam.exe" steam://uninstall/10
CPUID CPU-Z 1.62-->"C:\Program Files\CPUID\CPU-Z\unins000.exe"
CYKLO Czech 2011 NT-->MsiExec.exe /X{EF31EA4D-DB9D-4142-A778-2CDC2484ED4D}
Euro Truck Simulator 2-->"D:\Euro Truck Simulator 2\unins000.exe"
EVEREST Home Edition v2.20-->"C:\Program Files (x86)\Lavalys\EVEREST Home Edition\unins000.exe"
FIFA 13 v1.0-->"D:\FIFA 13\unins000.exe"
Garmin MapSource-->MsiExec.exe /X{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\Installer\setup.exe" --uninstall --multi-install --chrome --system-level --verbose-logging
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000B8301}
Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8301}
HP Customer Participation Program 13.0-->C:\Program Files (x86)\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat -forcereboot
HP Imaging Device Functions 13.0-->C:\Program Files (x86)\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Essential 3.5-->C:\Program Files (x86)\HP\Digital Imaging\PhotosmartEssential\hpzscr01.exe -datfile hpqbud13.dat -forcereboot
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B-->C:\Program Files (x86)\HP\Digital Imaging\{B61ED343-0B14-4241-999C-490CB1A20DA4}\setup\hpzscr40.exe -datfile hposcr19.dat -onestop -forcereboot
HP Smart Web Printing 4.51-->C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat
HP Solution Center 13.0-->C:\Program Files (x86)\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot
HP Update-->MsiExec.exe /X{7059BDA7-E1DB-442C-B7A1-6144596720A4}
ISO Recorder-->MsiExec.exe /I{1235083F-52F9-44CC-9DF5-F9B7802BB9B7}
Java 7 Update 10 (64-bit)-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F86417010FF}
Media Player Classic - Home Cinema 1.6.1.4235 x64-->"C:\Program Files\Media Player Classic - Home Cinema\unins000.exe"
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{FD052FB9-FE90-4438-B355-15EDC89D8FB1}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Czech) 2007-->MsiExec.exe /X{90120000-002A-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Nero 8 Ultra Edition HD-->MsiExec.exe /X{6D45EF03-E8EE-4355-81C3-F918CBCF1029}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Nightly 19.0a1 (x64 en-US)-->C:\Program Files\Nightly\uninstall\helper.exe
NirSoft BlueScreenView-->"C:\Program Files (x86)\NirSoft\BlueScreenView\uninst.exe"
NVIDIA Ovladač 3D Vision 310.70-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{7D363929-A3EE-478C-A3BB-FC211AC66427}\NVI2.DLL",UninstallPackage Display.3DVision
NVIDIA Ovladač řídící jednotky 3D Vision 310.70-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{7D363929-A3EE-478C-A3BB-FC211AC66427}\NVI2.DLL",UninstallPackage Display.NVIRUSB
NVIDIA Ovladače grafiky 310.70-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{7D363929-A3EE-478C-A3BB-FC211AC66427}\NVI2.DLL",UninstallPackage Display.Driver
NVIDIA PhysX-->MsiExec.exe /I{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}
NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask
NVIDIA Systémový software PhysX 9.12.1031-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{7D363929-A3EE-478C-A3BB-FC211AC66427}\NVI2.DLL",UninstallPackage Display.PhysX
OCR Software by I.R.I.S. 13.0-->C:\Program Files (x86)\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
Opera 12.12-->"C:\Program Files (x86)\Opera\Opera.exe" /uninstall
Photo Story 3 for Windows-->MsiExec.exe /I{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -removeonly
Rockstar Games Social Club-->C:\Program Files (x86)\Rockstar Games\Social Club\uninstallRGSCRedistributable.exe
Shop for HP Supplies-->C:\Program Files (x86)\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
System Requirements Lab Detection-->MsiExec.exe /X{A407FC22-36BF-4C82-A516-59D94BC505A9}
TeamSpeak 3 Client-->"C:\Program Files\TeamSpeak 3 Client\uninstall.exe"
TOPO Czech PRO 2011-->MsiExec.exe /X{8C20F904-9288-4A7A-A0C4-1458AA2B295E}
Total Commander 64-bit (Remove or Repair)-->C:\Program Files (x86)\totalcmd\tcunin64.exe
VirtualCloneDrive-->"C:\Program Files (x86)\VirtualCloneDrive\vcd-uninst.exe" /D="C:\Program Files (x86)\VirtualCloneDrive"
WinRAR 4.20 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe

======Hosts File======

127.0.0.1 genuine.microsoft.com
127.0.0.1 mpa.one.microsoft.com
127.0.0.1 sls.microsoft.com

======System event log======

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Cryptographic Services byl změněn na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090714051424.262212-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Windows Modules Installer byl změněn na: stopped
Record Number: 4
Source Name: Service Control Manager
Time Written: 20090714051424.168612-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Software Protection byl změněn na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20090714051424.059412-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Windows Event Log byl změněn na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20090714051424.012612-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Volume Shadow Copy byl změněn na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20090714051423.934612-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247E29-32
Event Code: 8212
Message: Služba Stínová kopie svazku: Modul pro zápis s názvem BITS Writer a ID {4969d978-be47-48b0-b100-f328f07ac1e0} se pokusil o přihlášení během instalace.

Operace:
Inicializace modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {4969d978-be47-48b0-b100-f328f07ac1e0}
Název modulu pro zápis: BITS Writer
Record Number: 5
Source Name: VSS
Time Written: 20120531192242.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20120531192043.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20120531192037.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20120531192031.468750-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247E29-32
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20120531192031.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: 37L4247E29-32
Event Code: 4735
Message: Byla změněna zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247E29-32$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Změněné atributy:
Název účtu SAM: -
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120531192007.125000-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4731
Message: Byla vytvořena zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247E29-32$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Nová skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Atributy:
Název účtu SAM: Backup Operators
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120531192007.125000-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.

Počet prvků: 0
ID zásady: 0x34d03
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120531192006.500000-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0

Typ přihlášení: 0

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x4
Název procesu:

Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120531192002.828125-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4608
Message: Spouští se systém Windows.

Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120531192002.687500-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=170a

-----------------EOF-----------------

[vyosek]

Zdravim

Licenci na tu nejvyssi verzi Windows Ultimate nemate zakoupenou, ze

[martin06]

Zdravím,

tenhle počítač sem si kupoval před Vánocemi, přede mnou udělal test pravosti na stránkách windowsů a vše proběhlo v pořádku.

[vyosek]

A proc jsou tedy zakazana pripojeni na overovaci stranky microsoftu

[martin06]

Jo to kdybych věděl

Jinak ted se mi ukázali 2 modré smrti.

Jedna memory_management a druhý sem nestihl. PC mám momentálně v nouzovém režimu, tak uvidíme, jestli bude padat nebo ne.

/edit ta druhá byla IRQL_NOT_LESS_OR_EQUAL

[vyosek]

Takze ono to asi nebude s temi windows uplne koser, tohle se tam samo nedalo a jen tak pro nic za nic to tam tez asi nebude

A my se tu nelegalnimi OS nezabyvame

[martin06]

Nejsem tu první den, abych nevěděl, že tu nelegální software neřešíte.

Vždy sem měl legální software.

[vyosek]

Njn, ale log hovori jasne, ze jsou tam zakazana pripojeni na overovaci stranky microsoftu a proc by je nekdo zakazoval ze