Preventivka s možným problémem
Napsal: 14 zář 2013 12:26
Nevím jestli to souvisí s nějakou havětí v pc, ale mám i určité nepříjemnosti v pc. Když počítač probouzím z úsporného režimu, tak se to neděje, ale když ho zapínám z úplného vypnutí, tak ano. Jde o to, že po zapnutí podezřele dlouho trvá, než ikonka antiviru u hodin zezelená z červené barvy a ikonka připojení k síti se připojí (prostě jsou tam neobvykle dlouho červené ikonky). A pak ještě když jdu po zapnutí pc na nějakou stránku, která používá diskuzní systém disqus.com, tak mi počítač vždycky na několik sekund (třeba i půl minuty, jen tipuji, neměřím to) vytuhne a nedá se s ním nic dělat. Tak nevím jestli z to může nějaká havěť, nebo nějaký doplněk ve Firefoxu, nebo si stránka stahuje data z přetížených serverů.
Logfile of random's system information tool 1.06 (written by random/random)
Run by aldik at 2013-09-14 13:15:13
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 41 GB (42%) free of 99 GB
Total RAM: 3326 MB (52% free)
HijackThis download failed
======Scheduled tasks folder======
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-942989333-4141668800-2953325523-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-942989333-4141668800-2953325523-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-942989333-4141668800-2953325523-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-942989333-4141668800-2953325523-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-06-20 995176]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"VX6000"=C:\Windows\vVX6000.exe [2010-05-20 764784]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"SkyDrive"=C:\Users\aldik\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2013-08-14 257136]
"Google Update"=C:\Users\aldik\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-06 116648]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-18 125952]
"3943E1C2C50B9EDE4FDAF065822DB80C29DCA610._service_run"=C:\Program Files\Google\Chrome\Application\chrome.exe [2013-09-02 829392]
"Facebook Update"=C:\Users\aldik\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-30 138096]
"googletalk"=C:\Users\aldik\AppData\Roaming\Google\Google Talk\googletalk.exe [2007-01-01 3739648]
"cz.seznam.software.autoupdate"=C:\Users\aldik\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-08-28 3671904]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
C:\Program Files\Microsoft LifeCam\LifeExp.exe [2010-05-20 119152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VX6000]
C:\Windows\vVX6000.exe [2010-05-20 764784]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2013-09-14 13:15:13 ----D---- C:\rsit
2013-09-14 13:15:13 ----D---- C:\Program Files\trend micro
2013-09-09 08:42:19 ----HD---- C:\SkyDriveTemp
2013-08-28 11:00:25 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-08-26 17:29:07 ----D---- C:\Users\aldik\AppData\Roaming\vlc
2013-08-23 12:38:20 ----A---- C:\Windows\system32\vbscript.dll
2013-08-23 12:38:20 ----A---- C:\Windows\system32\mshtmled.dll
2013-08-23 12:38:18 ----A---- C:\Windows\system32\jsproxy.dll
2013-08-23 12:38:18 ----A---- C:\Windows\system32\ieui.dll
2013-08-23 12:38:17 ----A---- C:\Windows\system32\msfeeds.dll
2013-08-23 12:38:17 ----A---- C:\Windows\system32\ieUnatt.exe
2013-08-23 12:38:16 ----A---- C:\Windows\system32\wininet.dll
2013-08-23 12:38:16 ----A---- C:\Windows\system32\jscript.dll
2013-08-23 12:38:15 ----A---- C:\Windows\system32\url.dll
2013-08-23 12:38:15 ----A---- C:\Windows\system32\jscript9.dll
2013-08-23 12:38:13 ----A---- C:\Windows\system32\iertutil.dll
2013-08-23 12:38:12 ----A---- C:\Windows\system32\urlmon.dll
2013-08-23 12:38:11 ----A---- C:\Windows\system32\ieframe.dll
2013-08-23 12:38:09 ----A---- C:\Windows\system32\mshtml.dll
2013-08-18 14:53:51 ----D---- C:\Users\aldik\AppData\Roaming\Mp3tag
2013-08-17 10:24:02 ----D---- C:\Program Files\Mozilla Firefox
2013-08-15 10:08:45 ----A---- C:\Windows\system32\icaapi.dll
2013-08-15 10:08:19 ----A---- C:\Windows\system32\tzres.dll
2013-08-15 10:08:16 ----A---- C:\Windows\system32\rpcrt4.dll
2013-08-15 10:08:14 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-08-15 10:08:13 ----A---- C:\Windows\system32\ntkrnlpa.exe
2013-08-15 10:08:13 ----A---- C:\Windows\system32\ntdll.dll
2013-08-15 10:08:02 ----A---- C:\Windows\system32\wintrust.dll
2013-08-15 10:08:02 ----A---- C:\Windows\system32\cryptsvc.dll
2013-08-15 10:08:02 ----A---- C:\Windows\system32\cryptnet.dll
2013-08-15 10:08:02 ----A---- C:\Windows\system32\crypt32.dll
======List of files/folders modified in the last 1 months======
2013-09-14 13:15:14 ----D---- C:\Windows\Prefetch
2013-09-14 13:15:13 ----RD---- C:\Program Files
2013-09-14 13:15:09 ----D---- C:\Windows\Temp
2013-09-14 10:59:42 ----SHD---- C:\System Volume Information
2013-09-14 10:51:45 ----D---- C:\Users\aldik\AppData\Roaming\Seznam.cz
2013-09-13 10:12:31 ----D---- C:\Windows\system32\catroot
2013-09-13 10:12:28 ----D---- C:\Windows\winsxs
2013-09-07 11:34:41 ----SD---- C:\Users\aldik\AppData\Roaming\Microsoft
2013-09-06 13:04:16 ----D---- C:\Program Files\Opera
2013-09-05 06:53:32 ----D---- C:\Windows\system32\catroot2
2013-08-30 14:23:44 ----SHD---- C:\Windows\Installer
2013-08-30 14:23:39 ----D---- C:\Users\aldik\AppData\Roaming\Mozilla
2013-08-30 10:00:15 ----D---- C:\Windows\System32
2013-08-29 14:08:28 ----D---- C:\Users\aldik\AppData\Roaming\Skype
2013-08-27 11:26:14 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-08-23 14:23:28 ----D---- C:\Windows\Microsoft.NET
2013-08-23 14:23:26 ----RSD---- C:\Windows\assembly
2013-08-23 13:09:06 ----D---- C:\Windows\rescache
2013-08-23 12:51:17 ----D---- C:\Windows\system32\migration
2013-08-23 12:51:17 ----D---- C:\Windows\system32\drivers
2013-08-23 12:51:17 ----D---- C:\Windows\system32\cs-CZ
2013-08-23 12:51:17 ----D---- C:\Program Files\Internet Explorer
2013-08-23 12:50:06 ----D---- C:\Windows\system32\MRT
2013-08-23 12:47:37 ----A---- C:\Windows\system32\mrt.exe
2013-08-23 12:40:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-08-23 12:40:56 ----D---- C:\Windows\inf
2013-08-18 20:36:34 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-08-16 20:48:51 ----D---- C:\Users\aldik\AppData\Roaming\FileZilla
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Asapi;Asapi; C:\Windows\system32\drivers\Asapi.sys [2000-01-08 10240]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-06-18 107392]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-10 236544]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2013-02-19 10919200]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2006-11-02 47104]
R3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-10 73216]
R3 VX6000;Microsoft LifeCam VX-6000; C:\Windows\system32\DRIVERS\VX6000Xp.sys [2010-05-20 2074480]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S3 ax7cdo6t;ax7cdo6t; C:\Windows\system32\drivers\ax7cdo6t.sys []
S3 cpuz136;cpuz136; \??\C:\Users\aldik\AppData\Local\Temp\cpuz136\cpuz136_x32.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-06-10 24576]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2012-12-07 23040]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2010-05-20 139632]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-06-20 22208]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-31 634656]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-10 1258856]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-06-20 295376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-06 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-21 162408]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-06 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-08-17 117656]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-04-18 754856]
-----------------EOF-----------------
Logfile of random's system information tool 1.06 (written by random/random)
Run by aldik at 2013-09-14 13:15:13
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 41 GB (42%) free of 99 GB
Total RAM: 3326 MB (52% free)
HijackThis download failed
======Scheduled tasks folder======
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-942989333-4141668800-2953325523-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-942989333-4141668800-2953325523-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-942989333-4141668800-2953325523-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-942989333-4141668800-2953325523-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-06-20 995176]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"VX6000"=C:\Windows\vVX6000.exe [2010-05-20 764784]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"SkyDrive"=C:\Users\aldik\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2013-08-14 257136]
"Google Update"=C:\Users\aldik\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-06 116648]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-18 125952]
"3943E1C2C50B9EDE4FDAF065822DB80C29DCA610._service_run"=C:\Program Files\Google\Chrome\Application\chrome.exe [2013-09-02 829392]
"Facebook Update"=C:\Users\aldik\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-30 138096]
"googletalk"=C:\Users\aldik\AppData\Roaming\Google\Google Talk\googletalk.exe [2007-01-01 3739648]
"cz.seznam.software.autoupdate"=C:\Users\aldik\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-08-28 3671904]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
C:\Program Files\Microsoft LifeCam\LifeExp.exe [2010-05-20 119152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VX6000]
C:\Windows\vVX6000.exe [2010-05-20 764784]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2013-09-14 13:15:13 ----D---- C:\rsit
2013-09-14 13:15:13 ----D---- C:\Program Files\trend micro
2013-09-09 08:42:19 ----HD---- C:\SkyDriveTemp
2013-08-28 11:00:25 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-08-26 17:29:07 ----D---- C:\Users\aldik\AppData\Roaming\vlc
2013-08-23 12:38:20 ----A---- C:\Windows\system32\vbscript.dll
2013-08-23 12:38:20 ----A---- C:\Windows\system32\mshtmled.dll
2013-08-23 12:38:18 ----A---- C:\Windows\system32\jsproxy.dll
2013-08-23 12:38:18 ----A---- C:\Windows\system32\ieui.dll
2013-08-23 12:38:17 ----A---- C:\Windows\system32\msfeeds.dll
2013-08-23 12:38:17 ----A---- C:\Windows\system32\ieUnatt.exe
2013-08-23 12:38:16 ----A---- C:\Windows\system32\wininet.dll
2013-08-23 12:38:16 ----A---- C:\Windows\system32\jscript.dll
2013-08-23 12:38:15 ----A---- C:\Windows\system32\url.dll
2013-08-23 12:38:15 ----A---- C:\Windows\system32\jscript9.dll
2013-08-23 12:38:13 ----A---- C:\Windows\system32\iertutil.dll
2013-08-23 12:38:12 ----A---- C:\Windows\system32\urlmon.dll
2013-08-23 12:38:11 ----A---- C:\Windows\system32\ieframe.dll
2013-08-23 12:38:09 ----A---- C:\Windows\system32\mshtml.dll
2013-08-18 14:53:51 ----D---- C:\Users\aldik\AppData\Roaming\Mp3tag
2013-08-17 10:24:02 ----D---- C:\Program Files\Mozilla Firefox
2013-08-15 10:08:45 ----A---- C:\Windows\system32\icaapi.dll
2013-08-15 10:08:19 ----A---- C:\Windows\system32\tzres.dll
2013-08-15 10:08:16 ----A---- C:\Windows\system32\rpcrt4.dll
2013-08-15 10:08:14 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-08-15 10:08:13 ----A---- C:\Windows\system32\ntkrnlpa.exe
2013-08-15 10:08:13 ----A---- C:\Windows\system32\ntdll.dll
2013-08-15 10:08:02 ----A---- C:\Windows\system32\wintrust.dll
2013-08-15 10:08:02 ----A---- C:\Windows\system32\cryptsvc.dll
2013-08-15 10:08:02 ----A---- C:\Windows\system32\cryptnet.dll
2013-08-15 10:08:02 ----A---- C:\Windows\system32\crypt32.dll
======List of files/folders modified in the last 1 months======
2013-09-14 13:15:14 ----D---- C:\Windows\Prefetch
2013-09-14 13:15:13 ----RD---- C:\Program Files
2013-09-14 13:15:09 ----D---- C:\Windows\Temp
2013-09-14 10:59:42 ----SHD---- C:\System Volume Information
2013-09-14 10:51:45 ----D---- C:\Users\aldik\AppData\Roaming\Seznam.cz
2013-09-13 10:12:31 ----D---- C:\Windows\system32\catroot
2013-09-13 10:12:28 ----D---- C:\Windows\winsxs
2013-09-07 11:34:41 ----SD---- C:\Users\aldik\AppData\Roaming\Microsoft
2013-09-06 13:04:16 ----D---- C:\Program Files\Opera
2013-09-05 06:53:32 ----D---- C:\Windows\system32\catroot2
2013-08-30 14:23:44 ----SHD---- C:\Windows\Installer
2013-08-30 14:23:39 ----D---- C:\Users\aldik\AppData\Roaming\Mozilla
2013-08-30 10:00:15 ----D---- C:\Windows\System32
2013-08-29 14:08:28 ----D---- C:\Users\aldik\AppData\Roaming\Skype
2013-08-27 11:26:14 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-08-23 14:23:28 ----D---- C:\Windows\Microsoft.NET
2013-08-23 14:23:26 ----RSD---- C:\Windows\assembly
2013-08-23 13:09:06 ----D---- C:\Windows\rescache
2013-08-23 12:51:17 ----D---- C:\Windows\system32\migration
2013-08-23 12:51:17 ----D---- C:\Windows\system32\drivers
2013-08-23 12:51:17 ----D---- C:\Windows\system32\cs-CZ
2013-08-23 12:51:17 ----D---- C:\Program Files\Internet Explorer
2013-08-23 12:50:06 ----D---- C:\Windows\system32\MRT
2013-08-23 12:47:37 ----A---- C:\Windows\system32\mrt.exe
2013-08-23 12:40:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-08-23 12:40:56 ----D---- C:\Windows\inf
2013-08-18 20:36:34 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-08-16 20:48:51 ----D---- C:\Users\aldik\AppData\Roaming\FileZilla
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Asapi;Asapi; C:\Windows\system32\drivers\Asapi.sys [2000-01-08 10240]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-06-18 107392]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-10 236544]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2013-02-19 10919200]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2006-11-02 47104]
R3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-10 73216]
R3 VX6000;Microsoft LifeCam VX-6000; C:\Windows\system32\DRIVERS\VX6000Xp.sys [2010-05-20 2074480]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S3 ax7cdo6t;ax7cdo6t; C:\Windows\system32\drivers\ax7cdo6t.sys []
S3 cpuz136;cpuz136; \??\C:\Users\aldik\AppData\Local\Temp\cpuz136\cpuz136_x32.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-06-10 24576]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2012-12-07 23040]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2010-05-20 139632]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-06-20 22208]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-31 634656]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-10 1258856]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-06-20 295376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-06 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-21 162408]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-06 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-08-17 117656]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-04-18 754856]
-----------------EOF-----------------