Logfile of random's system information tool 1.08 (written by random/random)
Run by Test at 2010-10-27 17:58:35
Microsoft Windows 7 Home Premium
System drive C: has 346 GB (73%) free of 476 GB
Total RAM: 1790 MB (52% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:58:44, on 27.10.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files (x86)\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Test.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MIF5BA~1\Office14\GROOVEEX.DLL
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files (x86)\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NVIDIA driver monitor] C:\Windows\nvsvc32.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [NVIDIA driver monitor] C:\Windows\nvsvc32.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files (x86)\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files (x86)\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MIF5BA~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 6097272091
O17 - HKLM\System\CCS\Services\Tcpip\..\{8D6BA693-9C2A-4BDD-81EB-CF7A158232B4}: NameServer = 89.203.153.10,80.78.146.6
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Stavová služba ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10151 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"
"C:\Program Files (x86)\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup
"C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\Microsoft Security Essentials\msseces.exe" /enable /as
"C:\Program Files\Microsoft Security Essentials\MsMpEng.exe"
"C:\Program Files\Microsoft Security Essentials\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey C64B44E1-3B7F-801C-2864-93C3C93AA827 -Reinvoke
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=1592.7aa8400.736135767 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" 1592 plugin \\.\pipe\gecko-crash-server-pipe.1592
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe27_ Global\UsGthrCtrlFltPipeMssGthrPipe27 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Test\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2010-03-25 6722448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-02-28 688528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-10-12 341600]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MIF5BA~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MIF5BA~1\Office14\URLREDIR.DLL [2010-02-28 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-09-15 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-03-26 10135584]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1448568]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"NVIDIA driver monitor"=C:\Windows\nvsvc32.exe [2010-10-27 81920]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files (x86)\Electronic Arts\EADM\Core.exe [2008-07-22 2772992]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl"=C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe [2007-03-14 71216]
"LanguageShortcut"=C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe [2007-03-14 54832]
"PCSuiteTrayApplication"=C:\Program Files (x86)\Nokia\Nokia PC Suite 6\LaunchApplication.exe [2006-11-28 222720]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2010-09-08 421888]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"TkBellExe"=C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [2010-10-12 202256]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"NVIDIA driver monitor"=C:\Windows\nvsvc32.exe [2010-10-27 81920]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2010-03-25 6722448]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MIF5BA~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Users\Test\Desktop\P17535732.JPG-www.facebook.exe"="C:\Windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-10-27 17:58:35 ----D---- C:\rsit
2010-10-27 17:58:35 ----D---- C:\Program Files\trend micro
2010-10-27 17:54:16 ----RSH---- C:\Windows\nvsvc32.exe
2010-10-22 08:47:53 ----D---- C:\Users\Test\AppData\Roaming\Apple Computer
2010-10-18 19:30:01 ----A---- C:\Windows\SYSWOW64\javaws.exe
2010-10-18 19:30:01 ----A---- C:\Windows\SYSWOW64\javaw.exe
2010-10-18 19:30:01 ----A---- C:\Windows\SYSWOW64\java.exe
2010-10-15 22:22:47 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2010-10-15 22:22:47 ----A---- C:\Windows\SYSWOW64\schannel.dll
2010-10-15 22:22:47 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-10-15 22:22:47 ----A---- C:\Windows\system32\schannel.dll
2010-10-15 22:22:46 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2010-10-15 22:22:46 ----A---- C:\Windows\system32\comctl32.dll
2010-10-15 22:22:42 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2010-10-15 22:22:42 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-15 22:22:41 ----A---- C:\Windows\system32\mshtml.dll
2010-10-15 22:22:40 ----A---- C:\Windows\system32\ieframe.dll
2010-10-15 22:22:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-10-15 22:22:39 ----A---- C:\Windows\system32\iertutil.dll
2010-10-15 22:22:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-10-15 22:22:38 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-10-15 22:22:37 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-10-15 22:22:37 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-10-15 22:22:37 ----A---- C:\Windows\system32\urlmon.dll
2010-10-15 22:22:37 ----A---- C:\Windows\system32\msfeeds.dll
2010-10-15 22:22:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-10-15 22:22:36 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-10-15 22:22:36 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-10-15 22:22:36 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-10-15 22:22:36 ----A---- C:\Windows\system32\wininet.dll
2010-10-15 22:22:36 ----A---- C:\Windows\system32\mstime.dll
2010-10-15 22:22:36 ----A---- C:\Windows\system32\mshtmled.dll
2010-10-15 22:22:36 ----A---- C:\Windows\system32\licmgr10.dll
2010-10-15 22:22:36 ----A---- C:\Windows\system32\iedkcs32.dll
2010-10-15 22:22:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-10-15 22:22:35 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-10-15 22:22:35 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-10-15 22:22:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-10-15 22:22:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-10-15 22:22:35 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-10-15 22:22:35 ----A---- C:\Windows\system32\msfeedssync.exe
2010-10-15 22:22:35 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-10-15 22:22:35 ----A---- C:\Windows\system32\jsproxy.dll
2010-10-15 22:22:35 ----A---- C:\Windows\system32\ieui.dll
2010-10-15 22:22:35 ----A---- C:\Windows\system32\iepeers.dll
2010-10-15 22:22:33 ----A---- C:\Windows\SYSWOW64\ole32.dll
2010-10-15 22:22:33 ----A---- C:\Windows\system32\ole32.dll
2010-10-15 22:22:32 ----A---- C:\Windows\system32\wmp.dll
2010-10-15 22:22:30 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2010-10-15 22:22:30 ----A---- C:\Windows\SYSWOW64\wmp.dll
2010-10-15 22:22:29 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-15 22:22:28 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2010-10-15 22:22:28 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2010-10-15 22:22:28 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2010-10-15 22:22:28 ----A---- C:\Windows\system32\t2embed.dll
2010-10-15 22:22:19 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-15 22:22:19 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-15 22:22:18 ----A---- C:\Windows\SYSWOW64\sscore.dll
2010-10-15 22:22:18 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-15 22:22:18 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-15 22:21:31 ----A---- C:\Windows\system32\win32k.sys
2010-10-14 11:39:00 ----D---- C:\Users\Test\AppData\Roaming\vlc
2010-10-14 11:38:37 ----D---- C:\Program Files (x86)\VideoLAN
2010-10-12 15:05:10 ----A---- C:\Windows\NeroDigital.ini
2010-10-12 10:28:07 ----A---- C:\Windows\SYSWOW64\rmoc3260.dll
2010-10-12 10:28:01 ----A---- C:\Windows\SYSWOW64\pndx5032.dll
2010-10-12 10:28:01 ----A---- C:\Windows\SYSWOW64\pndx5016.dll
2010-10-12 10:27:39 ----A---- C:\Windows\SYSWOW64\pncrt.dll
2010-10-12 10:27:36 ----D---- C:\Program Files (x86)\Real
2010-10-07 19:17:47 ----D---- C:\ProgramData\Real
2010-10-07 19:17:46 ----D---- C:\Users\Test\AppData\Roaming\Real
2010-10-07 10:07:32 ----D---- C:\Windows\Sun
2010-10-06 19:18:35 ----D---- C:\ProgramData\Apple Computer
2010-10-06 19:18:35 ----D---- C:\Program Files (x86)\QuickTime
2010-10-06 19:18:12 ----D---- C:\ProgramData\Apple
2010-10-06 19:18:12 ----D---- C:\Program Files (x86)\Apple Software Update
2010-10-06 19:15:57 ----D---- C:\Program Files\AppleQuicktime
2010-10-04 14:06:27 ----D---- C:\ProgramData\McAfee Security Scan
2010-10-04 14:06:27 ----D---- C:\ProgramData\McAfee
2010-10-04 14:06:23 ----D---- C:\Program Files (x86)\McAfee Security Scan
2010-10-04 11:50:25 ----D---- C:\ProgramData\Sun
2010-10-04 11:37:51 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2010-10-04 11:37:42 ----D---- C:\Program Files (x86)\Java
2010-10-04 09:46:54 ----D---- C:\WindowsOffBackup
2010-10-04 09:38:19 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2010-10-04 09:38:01 ----D---- C:\Windows\PCHEALTH
2010-10-04 09:38:01 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2010-10-04 09:36:45 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2010-10-04 09:36:27 ----D---- C:\Program Files\Microsoft Office
2010-10-04 09:36:17 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2010-10-04 09:36:03 ----D---- C:\Program Files (x86)\Microsoft Office
2010-10-04 09:36:02 ----D---- C:\ProgramData\Microsoft Help
2010-10-04 09:35:46 ----RHD---- C:\MSOCache
2010-10-03 11:15:31 ----D---- C:\MS update
2010-10-03 11:01:40 ----D---- C:\Program Files\Hewlett-Packard
2010-10-03 11:01:33 ----A---- C:\Windows\HPMProp.INI
2010-10-03 11:01:17 ----D---- C:\ProgramData\Hewlett-Packard
2010-10-03 11:00:54 ----A---- C:\Windows\SYSWOW64\hppccompio.dll
2010-10-03 11:00:54 ----A---- C:\Windows\system32\hppmopjl.dll
2010-10-03 11:00:54 ----A---- C:\Windows\system32\hppdcompio.dll
2010-10-03 11:00:54 ----A---- C:\Windows\system32\hpmtp107.dll
2010-10-03 11:00:54 ----A---- C:\Windows\system32\hpmpw081.dll
2010-10-03 11:00:54 ----A---- C:\Windows\system32\hpmpm081.dll
2010-10-03 11:00:54 ----A---- C:\Windows\system32\hpmml107.dll
2010-10-03 11:00:54 ----A---- C:\Windows\system32\hpmja107.dll
2010-10-03 11:00:52 ----A---- C:\Windows\system32\hpcpn107.dll
2010-10-03 11:00:51 ----A---- C:\Windows\SYSWOW64\hpcdmc32.dll
2010-10-03 11:00:51 ----A---- C:\Windows\SYSWOW64\hpcc3107.dll
2010-10-03 11:00:51 ----A---- C:\Windows\system32\FxCompChannel_x64.dll
2010-10-03 10:36:42 ----D---- C:\Windows\SYSWOW64\Wat
2010-10-03 10:36:42 ----D---- C:\Windows\system32\Wat
2010-10-03 10:33:23 ----D---- C:\Program Files (x86)\Microsoft Sync Framework
2010-10-03 10:32:11 ----D---- C:\Program Files (x86)\Microsoft
2010-10-03 10:31:43 ----D---- C:\Program Files (x86)\Windows Live
2010-10-03 10:31:32 ----D---- C:\Program Files (x86)\Windows Live SkyDrive
2010-10-03 10:29:14 ----D---- C:\HP Universal Print Driver PCL6 v5.1.1.8283
2010-10-03 10:19:40 ----D---- C:\HP Universal Print Driver PCL5 v5.1.1.8283
2010-10-03 10:19:34 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-10-03 10:17:51 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2010-10-03 10:17:05 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2010-10-03 10:17:05 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2010-10-03 10:17:04 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2010-10-03 10:17:04 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2010-10-03 10:17:04 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2010-10-03 10:17:04 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-10-03 10:17:04 ----A---- C:\Windows\system32\PresentationHost.exe
2010-10-03 10:17:04 ----A---- C:\Windows\system32\netfxperf.dll
2010-10-03 10:17:04 ----A---- C:\Windows\system32\mscoree.dll
2010-10-03 10:17:04 ----A---- C:\Windows\system32\dfshim.dll
2010-10-03 10:13:56 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-10-03 10:12:45 ----A---- C:\Windows\system32\drivers\ks.sys
2010-10-03 10:08:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2010-10-03 10:08:53 ----A---- C:\Windows\system32\lsasrv.dll
2010-10-03 10:08:53 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-10-03 10:08:52 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2010-10-03 10:08:36 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-10-03 10:08:36 ----A---- C:\Windows\system32\tzres.dll
2010-10-03 10:08:31 ----A---- C:\Windows\system32\cdd.dll
2010-10-03 10:08:25 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2010-10-03 10:08:25 ----A---- C:\Windows\system32\rtutils.dll
2010-10-03 10:08:23 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2010-10-03 10:08:23 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2010-10-03 10:08:23 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-10-03 10:08:19 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-10-03 10:08:15 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2010-10-03 10:08:14 ----A---- C:\Windows\system32\oleaut32.dll
2010-10-03 10:08:12 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2010-10-03 10:08:12 ----A---- C:\Windows\system32\CPFilters.dll
2010-10-03 10:08:11 ----A---- C:\Windows\system32\msdri.dll
2010-10-03 10:08:08 ----A---- C:\Windows\system32\shell32.dll
2010-10-03 10:08:07 ----A---- C:\Windows\SYSWOW64\shell32.dll
2010-10-03 10:08:02 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2010-10-03 10:08:02 ----A---- C:\Windows\system32\ntdll.dll
2010-10-03 10:08:01 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2010-10-03 10:08:01 ----A---- C:\Windows\system32\asycfilt.dll
2010-10-03 10:08:00 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2010-10-03 10:08:00 ----A---- C:\Windows\system32\inetcomm.dll
2010-10-03 10:07:59 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2010-10-03 10:07:59 ----A---- C:\Windows\system32\spoolsv.exe
2010-10-03 10:07:59 ----A---- C:\Windows\system32\msxml3.dll
2010-10-03 10:07:58 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-10-03 10:07:58 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-10-03 10:07:58 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-10-03 10:07:58 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-10-03 10:07:57 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2010-10-03 10:07:57 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2010-10-03 10:07:57 ----A---- C:\Windows\system32\wintrust.dll
2010-10-03 10:07:57 ----A---- C:\Windows\system32\vbscript.dll
2010-10-03 10:07:21 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2010-10-03 10:07:21 ----A---- C:\Windows\SYSWOW64\cabview.dll
2010-10-03 10:07:21 ----A---- C:\Windows\system32\cabview.dll
2010-10-03 10:07:20 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2010-10-03 10:07:20 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2010-10-03 10:07:20 ----A---- C:\Windows\system32\atmlib.dll
2010-10-03 10:07:20 ----A---- C:\Windows\system32\atmfd.dll
======List of files/folders modified in the last 1 months======
2010-10-27 17:58:44 ----D---- C:\Windows\Prefetch
2010-10-27 17:58:35 ----RD---- C:\Program Files
2010-10-27 17:58:26 ----D---- C:\Windows\Temp
2010-10-27 17:57:41 ----D---- C:\Windows\system32\Tasks
2010-10-27 17:54:18 ----D---- C:\Windows\system32\config
2010-10-27 17:54:16 ----D---- C:\Windows
2010-10-26 23:24:51 ----D---- C:\Windows\System32
2010-10-26 23:24:51 ----D---- C:\Windows\inf
2010-10-26 23:24:51 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-21 11:12:42 ----SD---- C:\Users\Test\AppData\Roaming\Microsoft
2010-10-21 09:13:55 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-10-19 22:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 19:30:11 ----SHD---- C:\Windows\Installer
2010-10-18 19:30:10 ----D---- C:\Program Files (x86)\Common Files
2010-10-18 19:30:01 ----D---- C:\Windows\SysWOW64
2010-10-16 00:06:01 ----RSD---- C:\Windows\assembly
2010-10-16 00:06:01 ----D---- C:\Windows\Microsoft.NET
2010-10-15 23:05:08 ----D---- C:\Windows\winsxs
2010-10-15 23:03:44 ----D---- C:\Windows\SYSWOW64\migration
2010-10-15 23:03:44 ----D---- C:\Windows\system32\migration
2010-10-15 23:03:44 ----D---- C:\Windows\system32\drivers
2010-10-15 23:03:44 ----D---- C:\Program Files\Windows Media Player
2010-10-15 23:03:44 ----D---- C:\Program Files\Internet Explorer
2010-10-15 23:03:44 ----D---- C:\Program Files (x86)\Windows Media Player
2010-10-15 23:03:44 ----D---- C:\Program Files (x86)\Internet Explorer
2010-10-15 22:30:28 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-15 22:23:58 ----D---- C:\Program Files (x86)\Adobe
2010-10-15 22:23:10 ----D---- C:\Users\Test\AppData\Roaming\Adobe
2010-10-15 22:22:58 ----A---- C:\Windows\system32\MRT.exe
2010-10-15 22:22:25 ----D---- C:\Windows\system32\catroot
2010-10-15 22:22:16 ----D---- C:\Windows\system32\catroot2
2010-10-14 11:38:37 ----RD---- C:\Program Files (x86)
2010-10-11 16:05:21 ----HD---- C:\ProgramData
2010-10-07 19:37:51 ----AD---- C:\ProgramData\TEMP
2010-10-07 19:37:04 ----D---- C:\Program Files (x86)\Look@LAN
2010-10-07 19:33:44 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-10-07 19:33:23 ----D---- C:\ProgramData\Adobe
2010-10-07 09:15:27 ----D---- C:\Windows\system32\wdi
2010-10-04 09:49:38 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2010-10-04 09:39:00 ----RSD---- C:\Windows\Fonts
2010-10-04 09:38:49 ----D---- C:\Windows\ShellNew
2010-10-04 09:38:40 ----D---- C:\Program Files (x86)\MSBuild
2010-10-04 09:38:01 ----SD---- C:\ProgramData\Microsoft
2010-10-04 09:37:06 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-10-04 09:36:31 ----A---- C:\Windows\win.ini
2010-10-03 12:33:37 ----D---- C:\Windows\rescache
2010-10-03 11:14:35 ----D---- C:\Windows\Downloaded Program Files
2010-10-03 11:11:13 ----D---- C:\Windows\system32\DriverStore
2010-10-03 10:43:45 ----D---- C:\Program Files\Windows Mail
2010-10-03 10:43:45 ----D---- C:\Program Files (x86)\Windows Mail
2010-10-03 10:36:44 ----D---- C:\Windows\SYSWOW64\cs-CZ
2010-10-03 10:36:44 ----D---- C:\Windows\system32\cs-CZ
2010-10-03 10:36:42 ----D---- C:\Windows\ehome
2010-10-03 10:36:40 ----D---- C:\Windows\AppPatch
2010-10-03 10:23:52 ----D---- C:\Windows\Logs
2010-10-03 10:19:40 ----D---- C:\Windows\SYSWOW64\en-US
2010-10-03 10:19:40 ----D---- C:\Windows\system32\en-US
2010-10-03 10:09:35 ----D---- C:\Program Files (x86)\Microsoft Antimalware
2010-10-03 09:52:14 ----D---- C:\Windows\system32\LogFiles
2010-10-03 09:50:54 ----D---- C:\Windows\debug
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-02 834544]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 173984]
R2 {95808DC4-FA4A-4C74-92FE-5B863F82066B};{95808DC4-FA4A-4C74-92FE-5B863F82066B}; \??\C:\Program Files (x86)\CyberLink\PowerDVD\000.fcl [2007-09-19 32240]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2009-02-08 40464]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-03-03 6402560]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-03-03 188928]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-03-26 2307616]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 40832]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-04-02 82816]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
S3 ayp3xtlt;ayp3xtlt; C:\Windows\system32\drivers\ayp3xtlt.sys []
S3 Nokia USB Generic;Nokia USB Generic; C:\Windows\system32\drivers\nmwcdcx64.sys [2006-10-10 12800]
S3 Nokia USB Modem;Nokia USB Modem; C:\Windows\system32\drivers\nmwcdcmx64.sys [2006-10-10 17408]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\Windows\system32\drivers\nmwcdx64.sys [2006-10-10 175104]
S3 Nokia USB Port;Nokia USB Port; C:\Windows\system32\drivers\nmwcdcjx64.sys [2006-10-10 17408]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-03-03 202752]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17424]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-03-16 159336]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2010-04-02 66872]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2007-05-14 272024]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2006-11-06 210432]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 654848]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-10-03 1255736]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
prosím o kontrolu logu (občas se padá firefox)
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 119426
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu logu (občas se padá firefox)
Log vypadá čistý. Zkuste reinstal FF pomocí utility MozBackup: http://www.slunecnice.cz/sw/mozbackup/ .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.