nemal som cas vsetko je po starom
tu je vypis z risitu
Logfile of random's system information tool 1.06 (written by random/random)
Run by Bohus at 2010-01-13 21:07:41
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 246 GB (83%) free of 297 GB
Total RAM: 3326 MB (69% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:08:19, on 13. 1. 2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\system32\schtasks.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Registry Clean Expert\RCHelper.exe
C:\Program Files\Linksys\WUSBF54G\wlMonitor.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Pidgin\pidgin.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hp\kbd\kbd.exe
C:\Users\Public\Downloads\RSIT.exe
C:\Program Files\trend micro\Bohus.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - (no file)
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files\HP\HP UT\bin\hppusg.exe" "C:\Program Files\HP\HP UT"
O4 - HKLM\..\Run: [PrnStatusMX] C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [RegClean Expert Scheduler] "C:\Program Files\Registry Clean Expert\RCHelper.exe" /startup
O4 - Global Startup: Linksys Wireless Network Monitor.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MIF269~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NICSer_WUSBF54G - Unknown owner - C:\Program Files\Linksys\WUSBF54G\NICServ.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Speedy Online Updater (SpeedyUpdate) - Unknown owner - C:\Windows\PeerNet\UpdateSrv.exe
--
End of file - 6790 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]
PDFCreator Toolbar Helper
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-03-26 5369856]
"hpsysdrv"=c:\hp\support\hpsysdrv.exe [2007-04-18 65536]
"KBD"=C:\HP\KBD\KbdStub.EXE [2006-12-08 65536]
"OsdMaestro"=C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-07-12 178712]
"SunJavaUpdateReg"=C:\Windows\system32\jureg.exe [2007-04-07 54936]
"NvSvc"=C:\Windows\system32\nvsvc.dll [2008-01-10 92704]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-01-10 8530464]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-01-10 88608]
"HPUsageTracking"=C:\Program Files\HP\HP UT\bin\hppusg.exe [2007-11-02 36864]
"PrnStatusMX"=C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [2007-08-29 1077248]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2007-07-17 55824]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-10 136600]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"=C:\Windows\SMINST\launcher.exe [2007-11-15 44168]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-18 202240]
"RegClean Expert Scheduler"=C:\Program Files\Registry Clean Expert\RCHelper.exe [2009-11-28 609016]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Linksys Wireless Network Monitor.lnk - C:\Program Files\Linksys\WUSBF54G\wlMonitor.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -
======List of files/folders created in the last 3 months======
2010-01-13 21:07:41 ----D---- C:\rsit
2010-01-13 21:07:41 ----D---- C:\Program Files\trend micro
2010-01-13 20:55:17 ----D---- C:\Windows\pss
2010-01-10 16:08:05 ----A---- C:\ComboFix.txt
2010-01-10 16:01:25 ----D---- C:\$RECYCLE.BIN
2010-01-10 15:59:01 ----D---- C:\Windows\temp
2010-01-10 15:51:52 ----A---- C:\Windows\NIRCMD.exe
2010-01-10 15:51:52 ----A---- C:\Windows\MBR.exe
2010-01-10 15:51:50 ----A---- C:\Windows\zip.exe
2010-01-10 15:51:50 ----A---- C:\Windows\SWREG.exe
2010-01-10 15:51:50 ----A---- C:\Windows\sed.exe
2010-01-10 15:51:50 ----A---- C:\Windows\PEV.exe
2010-01-10 15:51:50 ----A---- C:\Windows\grep.exe
2010-01-10 15:51:49 ----A---- C:\Windows\SWSC.exe
2010-01-10 15:51:45 ----D---- C:\Windows\ERDNT
2010-01-10 15:51:36 ----D---- C:\ComboFix
2010-01-10 15:51:09 ----AD---- C:\Qoobox
2010-01-10 15:50:53 ----A---- C:\Windows\SWXCACLS.exe
2010-01-10 15:36:43 ----D---- C:\Config.Msi
2010-01-08 00:01:08 ----D---- C:\Program Files\ESET
2010-01-06 22:41:29 ----A---- C:\Windows\uinst001.exe
2010-01-06 21:53:46 ----D---- C:\Program Files\Registry Medic
2009-12-31 09:19:32 ----A---- C:\grldr.bak
2009-12-16 20:51:22 ----D---- C:\c71c766cfcf2bcecbe61532ac962cdee
2009-12-16 17:53:17 ----D---- C:\Program Files\VS Revo Group
2009-12-15 22:17:34 ----D---- C:\202372f489139ec994
2009-12-14 23:52:52 ----D---- C:\b4fc72164cfa449bbd2bdafd4d
2009-12-14 22:51:17 ----D---- C:\Windows\system32\eu-ES
2009-12-14 22:51:17 ----D---- C:\Windows\system32\ca-ES
2009-12-14 22:51:11 ----D---- C:\Windows\system32\vi-VN
2009-12-14 22:47:07 ----D---- C:\Windows\system32\SPReview
2009-12-14 22:34:49 ----A---- C:\Windows\system32\scavenge.dll
2009-12-14 22:34:42 ----A---- C:\Windows\system32\compcln.exe
2009-12-14 22:31:16 ----A---- C:\Windows\system32\EhStorAPI.dll
2009-12-14 22:31:14 ----A---- C:\Windows\system32\EhStorShell.dll
2009-12-14 22:31:14 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2009-12-14 22:31:14 ----A---- C:\Windows\system32\EhStorAuthn.dll
2009-12-14 22:31:09 ----A---- C:\Windows\system32\IasMigReader.exe
2009-12-14 22:31:08 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2009-12-14 22:31:08 ----A---- C:\Windows\system32\fdBthProxy.dll
2009-12-14 22:31:08 ----A---- C:\Windows\system32\fdBth.dll
2009-12-14 22:31:01 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2009-12-14 22:31:01 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2009-12-14 22:31:01 ----A---- C:\Windows\system32\DevicePairing.dll
2009-12-14 22:30:50 ----A---- C:\Windows\system32\iscsilog.dll
2009-12-14 22:30:39 ----A---- C:\Windows\system32\WcnNetsh.dll
2009-12-14 22:30:38 ----A---- C:\Windows\system32\wcnwiz2.dll
2009-12-14 22:30:37 ----A---- C:\Windows\system32\WscEapPr.dll
2009-12-14 22:30:27 ----A---- C:\Windows\system32\spwizui.dll
2009-12-14 22:30:27 ----A---- C:\Windows\system32\spinstall.exe
2009-12-14 22:30:27 ----A---- C:\Windows\system32\sperror.dll
2009-12-14 22:30:27 ----A---- C:\Windows\system32\spcmsg.dll
2009-12-14 22:30:26 ----A---- C:\Windows\system32\spreview.exe
2009-12-14 22:19:42 ----D---- C:\Windows\system32\EventProviders
2009-12-14 20:55:26 ----D---- C:\ProgramData\Windows Genuine Advantage
2009-11-29 11:35:55 ----A---- C:\Windows\ntbtlog.txt
2009-11-28 09:56:20 ----D---- C:\Program Files\ESET NOD32 Antivirus
2009-11-27 23:43:50 ----D---- C:\Users\Bohus\AppData\Roaming\iExpert Software
2009-11-27 23:43:25 ----D---- C:\Program Files\Registry Clean Expert
2009-11-27 22:16:55 ----D---- C:\ProgramData\WindowsSearch
2009-10-30 17:40:29 ----D---- C:\Program Files\Hamachi
2009-10-25 22:19:38 ----D---- C:\Program Files\Perl
2009-10-25 21:47:01 ----D---- C:\Users\Bohus\AppData\Roaming\gtk-2.0
2009-10-25 21:46:31 ----D---- C:\Users\Bohus\AppData\Roaming\.purple
2009-10-25 21:46:14 ----D---- C:\Program Files\Pidgin
2009-10-25 21:46:12 ----D---- C:\Program Files\Common Files\GTK
2009-10-21 20:21:38 ----D---- C:\Program Files\Last.fm
2009-10-19 21:21:58 ----D---- C:\Users\Bohus\AppData\Roaming\MiniDm
2009-10-19 21:17:27 ----D---- C:\Program Files\IEPro
======List of files/folders modified in the last 3 months======
2010-01-13 21:08:06 ----D---- C:\Windows\System32
2010-01-13 21:08:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-01-13 21:08:05 ----D---- C:\Windows\inf
2010-01-13 21:07:55 ----D---- C:\Windows\Prefetch
2010-01-13 21:07:41 ----D---- C:\Program Files
2010-01-13 21:02:27 ----D---- C:\Windows\SMINST
2010-01-13 20:55:17 ----D---- C:\Windows
2010-01-11 20:18:29 ----D---- C:\Users\Bohus\AppData\Roaming\Skype
2010-01-11 20:10:36 ----D---- C:\Users\Bohus\AppData\Roaming\skypePM
2010-01-10 23:24:32 ----D---- C:\Users\Bohus\AppData\Roaming\uTorrent
2010-01-10 22:44:11 ----D---- C:\Users\Bohus\AppData\Roaming\vlc
2010-01-10 22:43:30 ----D---- C:\Users\Bohus\AppData\Roaming\dvdcss
2010-01-10 19:18:40 ----SHD---- C:\System Volume Information
2010-01-10 16:08:08 ----D---- C:\Windows\system32\drivers
2010-01-10 16:01:28 ----A---- C:\Windows\system.ini
2010-01-10 15:59:18 ----D---- C:\Windows\system32\config
2010-01-10 15:59:18 ----D---- C:\Boot
2010-01-10 15:58:39 ----D---- C:\Windows\Tasks
2010-01-10 15:56:20 ----D---- C:\Windows\AppPatch
2010-01-10 15:56:19 ----D---- C:\Program Files\Common Files
2010-01-10 15:36:51 ----SHD---- C:\Windows\Installer
2010-01-10 15:36:44 ----D---- C:\Program Files\HP
2010-01-08 00:01:08 ----D---- C:\ProgramData\ESET
2010-01-06 22:02:01 ----D---- C:\ProgramData\Reprise
2010-01-06 22:01:28 ----D---- C:\Users\Bohus\AppData\Roaming\Right Hemisphere
2010-01-06 22:00:48 ----D---- C:\Windows\system32\Tasks
2010-01-06 18:56:52 ----D---- C:\Windows\Minidump
2010-01-06 16:21:42 ----D---- C:\Program Files\Mozilla Firefox
2010-01-05 21:43:31 ----D---- C:\Program Files\Winamp
2010-01-05 21:32:45 ----D---- C:\BMW M3 Challenge
2009-12-31 20:35:22 ----D---- C:\Windows\system32\XPSViewer
2009-12-31 20:35:14 ----D---- C:\Windows\system32\sk-SK
2009-12-31 20:34:57 ----D---- C:\Program Files\Windows Defender
2009-12-31 20:34:33 ----D---- C:\Windows\system32\en
2009-12-31 20:33:54 ----D---- C:\Windows\system32\en-US
2009-12-31 20:33:49 ----D---- C:\Windows\system32\wbem
2009-12-31 20:33:27 ----D---- C:\Program Files\Common Files\System
2009-12-31 20:33:09 ----D---- C:\Program Files\Movie Maker
2009-12-31 20:32:56 ----D---- C:\Windows\servicing
2009-12-31 20:32:47 ----D---- C:\Program Files\Windows Journal
2009-12-31 20:32:31 ----D---- C:\Windows\system32\setup
2009-12-31 20:32:08 ----D---- C:\Windows\IME
2009-12-31 20:31:59 ----D---- C:\Program Files\Windows Sidebar
2009-12-31 20:31:58 ----D---- C:\Windows\system32\migration
2009-12-31 20:31:45 ----D---- C:\Windows\system32\oobe
2009-12-31 20:31:33 ----D---- C:\Windows\system32\SLUI
2009-12-31 20:30:54 ----D---- C:\Program Files\Windows Photo Gallery
2009-12-31 20:30:46 ----D---- C:\Program Files\Windows Collaboration
2009-12-31 20:30:37 ----D---- C:\Windows\system32\AdvancedInstallers
2009-12-31 20:30:26 ----D---- C:\Program Files\Windows Mail
2009-12-31 20:29:12 ----D---- C:\Windows\system32\migwiz
2009-12-31 20:29:08 ----D---- C:\Program Files\Windows Media Player
2009-12-31 20:28:08 ----D---- C:\Program Files\Internet Explorer
2009-12-31 20:27:30 ----D---- C:\Windows\system32\zh-TW
2009-12-31 20:27:30 ----D---- C:\Windows\system32\zh-CN
2009-12-31 20:27:30 ----D---- C:\Windows\system32\uk-UA
2009-12-31 20:27:29 ----D---- C:\Windows\system32\tr-TR
2009-12-31 20:27:29 ----D---- C:\Windows\system32\th-TH
2009-12-31 20:27:29 ----D---- C:\Windows\system32\sv-SE
2009-12-31 20:27:29 ----D---- C:\Windows\system32\sr-Latn-CS
2009-12-31 20:27:28 ----D---- C:\Windows\system32\sl-SI
2009-12-31 20:27:28 ----D---- C:\Windows\system32\ru-RU
2009-12-31 20:27:28 ----D---- C:\Windows\system32\ro-RO
2009-12-31 20:27:28 ----D---- C:\Windows\system32\pt-PT
2009-12-31 20:27:27 ----D---- C:\Windows\system32\pt-BR
2009-12-31 20:27:27 ----D---- C:\Windows\system32\pl-PL
2009-12-31 20:27:27 ----D---- C:\Windows\system32\nl-NL
2009-12-31 20:27:27 ----D---- C:\Windows\system32\nb-NO
2009-12-31 20:27:26 ----D---- C:\Windows\system32\lv-LV
2009-12-31 20:27:26 ----D---- C:\Windows\system32\lt-LT
2009-12-31 20:27:26 ----D---- C:\Windows\system32\ko-KR
2009-12-31 20:27:26 ----D---- C:\Windows\system32\ja-JP
2009-12-31 20:27:25 ----D---- C:\Windows\system32\it-IT
2009-12-31 20:27:25 ----D---- C:\Windows\system32\hu-HU
2009-12-31 20:27:25 ----D---- C:\Windows\system32\hr-HR
2009-12-31 20:27:25 ----D---- C:\Windows\system32\he-IL
2009-12-31 20:27:24 ----D---- C:\Windows\system32\fr-FR
2009-12-31 20:27:24 ----D---- C:\Windows\system32\fi-FI
2009-12-31 20:27:24 ----D---- C:\Windows\system32\et-EE
2009-12-31 20:27:24 ----D---- C:\Windows\system32\es-ES
2009-12-31 20:27:23 ----D---- C:\Windows\system32\el-GR
2009-12-31 20:27:23 ----D---- C:\Windows\system32\de-DE
2009-12-31 20:27:23 ----D---- C:\Windows\system32\da-DK
2009-12-31 20:27:23 ----D---- C:\Windows\system32\cs-CZ
2009-12-31 20:27:22 ----D---- C:\Windows\system32\bg-BG
2009-12-31 20:27:22 ----D---- C:\Windows\system32\ar-SA
2009-12-31 20:26:41 ----RSD---- C:\Windows\Fonts
2009-12-31 20:26:09 ----D---- C:\Windows\ehome
2009-12-31 20:24:56 ----D---- C:\Program Files\Windows Calendar
2009-12-31 20:24:39 ----D---- C:\Windows\system32\Boot
2009-12-31 20:24:22 ----D---- C:\Windows\system32\manifeststore
2009-12-25 23:23:10 ----D---- C:\Windows\system32\catroot2
2009-12-16 23:18:10 ----D---- C:\Windows\system32\Msdtc
2009-12-16 23:16:56 ----D---- C:\Windows\winsxs
2009-12-16 23:16:55 ----D---- C:\Windows\system32\spool
2009-12-16 23:16:55 ----D---- C:\Windows\rescache
2009-12-16 23:16:55 ----D---- C:\Users\Bohus\AppData\Roaming\Hamachi
2009-12-16 23:16:54 ----D---- C:\Windows\registration
2009-12-16 23:14:28 ----D---- C:\Windows\Logs
2009-12-16 20:52:17 ----D---- C:\Windows\system32\catroot
2009-12-15 06:03:01 ----SD---- C:\Users\Bohus\AppData\Roaming\Microsoft
2009-12-15 00:10:35 ----HD---- C:\Windows\system32\GroupPolicy
2009-12-15 00:10:35 ----D---- C:\ProgramData
2009-12-14 23:01:52 ----D---- C:\Windows\Microsoft.NET
2009-12-14 23:01:50 ----RSD---- C:\Windows\assembly
2009-12-14 22:49:16 ----D---- C:\Windows\system32\RTCOM
2009-12-14 16:53:00 ----D---- C:\Program Files\LogMeIn
2009-12-08 17:58:09 ----D---- C:\Windows\PeerNet
2009-11-29 17:07:33 ----D---- C:\Windows\system32\LogFiles
2009-11-19 23:48:02 ----A---- C:\Windows\NeroDigital.ini
2009-11-17 23:08:33 ----D---- C:\Windows\system
2009-11-17 23:08:33 ----D---- C:\Program Files\Common Files\microsoft shared
2009-11-15 14:57:16 ----D---- C:\Users\Bohus\AppData\Roaming\Adobe
2009-10-17 17:19:31 ----A---- C:\Windows\Antera Wheels.exe
2009-10-17 17:19:31 ----A---- C:\Windows\Antera Wheels.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\Windows\System32\drivers\prodrv06.sys [2004-08-09 53920]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys [2008-07-24 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\Windows\system32\drivers\LMIRfsDriver.sys [2008-07-24 47640]
R3 HCW85BDA;Hauppauge WinTV 885 Video Capture; C:\Windows\system32\drivers\HCW85BDA.sys [2008-03-19 1176064]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-03-26 2103512]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2007-07-17 34960]
R3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys [2008-07-24 10144]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2007-07-17 36240]
R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2009-02-24 116736]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-01-10 8237120]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-10-03 99840]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
R3 ZD1211BU(Linksys A Division of Cisco Systems Inc.);Linksys Wireless-G USB Network Adapter Driver(Linksys A Division of Cisco Systems Inc.); C:\Windows\system32\DRIVERS\zd1211Bu.sys [2005-10-28 402432]
S2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2009-01-03 10976]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2009-01-03 22368]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-10-30 25280]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2008-09-15 17664]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2008-09-15 22016]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2008-02-01 138112]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2008-02-01 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS2.sys [2005-12-12 19072]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\Windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\Windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\Windows\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:\Windows\system32\DRIVERS\s116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:\Windows\system32\DRIVERS\s116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:\Windows\system32\DRIVERS\s116unic.sys [2007-04-03 99080]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2008-09-15 8064]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-10 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2008-09-15 8064]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-18 39936]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\Windows\system32\drivers\LMIRfsClientNP.sys []
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2008-12-15 660768]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 ekrn;ESET Service; C:\Program Files\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-07-12 354840]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-10-22 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-30 935208]
R2 NICSer_WUSBF54G;NICSer_WUSBF54G; C:\Program Files\Linksys\WUSBF54G\NICServ.exe [2005-10-20 530432]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
S2 SpeedyUpdate;Speedy Online Updater; C:\Windows\PeerNet\UpdateSrv.exe [2009-10-14 64512]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-01-05 33800]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-04-20 85096]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-11-09 654848]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-20 136120]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
S4 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2009-10-01 116032]
S4 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2008-07-24 63040]
-----------------EOF-----------------