Hlásenia, ktorým nerozumiem

Niektoré sa mi zdajú, že patria ku tlačiarni HP a mám pocit ako keby si sa snažila preinštalovať hardvér, ktorý nebol korektne odinštalovaný. Odporúčam korektne (podľa odporúčaní v manuáli) odinštalovať tlačiareň, pre istotu vyčistiť registre a nainštalovať tlačiareň znovu.

Dakujem skusil som no i tak mi tlaciaren nejde, poslem vam sken z rsit x 64, pozrite sa prosim ci nemam neaky virus, dakujem

Logfile of random's system information tool 1.09 (written by random/random)

Run by jklôôlkj at 2012-05-22 22:39:43

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 181 GB (62%) free of 291 GB

Total RAM: 4091 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:40:05, on 22. 5. 2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files\trend micro\jklôôlkj.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.com/?cid={B9E012C5-2E89-483E-AAF9-7491A218840C}&mid=b60e8bfba51547d0890159e75b71ad94-b323a7bef4e7704289d7b16ce7887b9ead8b4355&lang=sk&ds=gm011&pr=sa&d=&v=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=041b&m=easynote_tk81&r=27360811i585l0454z185f47i2h39s
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: QpBHO Class - {1658D3A1-9E13-4196-A82A-D70D70880F36} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QuickPrintBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: PandoraTV Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) - Adobe Systems Incorporated - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9545 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe"
"C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2140
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Secunia\PSI\psi_tray.exe"
"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4972.5520e20.852227479 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll" Mozilla.Firefox.7.0 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.jar" 4972 "\\.\pipe\gecko-crash-server-pipe.4972" plugin
"C:\Program Files (x86)\Internet Explorer\IELowutil.exe" -embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
/QuitInfo:0000000000000220;00000000000004E4; /ManualLaunch
/loadhooks /Parent:0000000000000A50
"C:\Users\jklôôlkj\zBolo\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
taskeng.exe {1A1731DD-BE4C-443B-99BA-876F49E2943D}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\jklôôlkj\AppData\Roaming\Mozilla\Firefox\Profiles\kk0e8s43.default

prefs.js - "browser.search.suggest.enabled" -  false
prefs.js - "browser.search.useDBForOrder" -  true
prefs.js - "browser.startup.homepage" -  "about:home"
prefs.js - "extensions.enabledItems" -  "{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.5, smartwebprinting@hp.com:4.51, {9AA46F4F-4DC7-4c06-97AF-5035170634FE}:4.5, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.5.0.8013, {3112ca9c-de6d-4884-a869-9855de68056c}:7.1.20110512W, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.9, wrc@avast.com:6.0.1289, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.22"
prefs.js - "keyword.URL" -  "http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&invocationType=tb50-ff-winamp-ab-en-us&tb_uuid=20111026023827090&tb_oid=17-05-2012&tb_mrud=17-05-2012&query="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.235 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
npdnu.xpt
npdnupdater2.xpt
nppdf32.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
avg-secure-search.xml
azet-sk.xml
babylon.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Users\jklôôlkj\AppData\Roaming\Mozilla\Firefox\Profiles\kk0e8s43.default\extensions\
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

C:\Users\jklôôlkj\AppData\Roaming\Mozilla\Firefox\Profiles\kk0e8s43.default\searchplugins\
aol-web-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-03-24 253040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg64.dll [2012-01-12 346168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1658D3A1-9E13-4196-A82A-D70D70880F36}]
HP Smart Print BHO - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QuickPrintBHO.dll [2011-11-14 644696]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-24 192112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll [2012-01-12 1003576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
PandoraTV Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-07-26 1493160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-03-24 253040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - PandoraTV Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-07-26 1493160]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-24 192112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 649608]
"Acer ePower Management"=C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2010-06-11 861216]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-06-22 10920552]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-03-07 4081008]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-07-08 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnUpdater]
C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2011-07-26 397992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe /nosplash /minimized []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-21 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~2\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VideoWebCamera.exe.lnk]
C:\PROGRA~2\VIDEOW~1\VIDEOW~1.EXE [2010-08-20 12609352]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [2010-06-28 263936]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"Norton Online Backup"=C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-01 1155928]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Secunia PSI Tray.lnk - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.inf - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.inf - install - %SystemRoot%\SysWow64\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - %SystemRoot%\SysWow64\WScript.exe "%1" %*
.vbs - open - %SystemRoot%\SysWow64\WScript.exe "%1" %*
.cpl - cplopen - %SystemRoot%\SysWow64\control.exe "%1",%*

======List of files/folders created in the last 1 month======

2012-05-22 22:39:43 ----D---- C:\rsit
2012-05-22 22:39:43 ----D---- C:\Program Files\trend micro
2012-05-20 07:36:42 ----D---- C:\Program Files\Microsoft Silverlight
2012-05-20 07:36:42 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-05-19 05:10:00 ----D---- C:\$RECYCLE.BIN
2012-05-19 05:02:32 ----D---- C:\ComboFix
2012-05-18 22:45:52 ----D---- C:\hry
2012-05-18 22:34:02 ----D---- C:\Program Files\Fenix Team
2012-05-18 22:20:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-05-18 22:11:48 ----D---- C:\Program Files (x86)\Secunia
2012-05-18 03:02:30 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-05-18 03:02:30 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-05-18 03:02:30 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-05-18 03:02:30 ----A---- C:\Windows\system32\wmi.dll
2012-05-18 03:02:30 ----A---- C:\Windows\system32\wintrust.dll
2012-05-18 03:02:30 ----A---- C:\Windows\system32\imagehlp.dll
2012-05-18 03:02:30 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-05-18 00:33:13 ----A---- C:\Windows\zip.exe
2012-05-18 00:33:13 ----A---- C:\Windows\SWSC.exe
2012-05-18 00:33:13 ----A---- C:\Windows\SWREG.exe
2012-05-18 00:33:13 ----A---- C:\Windows\sed.exe
2012-05-18 00:33:13 ----A---- C:\Windows\PEV.exe
2012-05-18 00:33:13 ----A---- C:\Windows\NIRCMD.exe
2012-05-18 00:33:13 ----A---- C:\Windows\MBR.exe
2012-05-18 00:33:13 ----A---- C:\Windows\grep.exe
2012-05-18 00:33:10 ----D---- C:\Windows\ERDNT
2012-05-18 00:32:49 ----D---- C:\Qoobox
2012-05-17 23:13:49 ----D---- C:\Users\jklôôlkj\AppData\Roaming\ESET
2012-05-17 23:10:47 ----D---- C:\ProgramData\ESET
2012-05-17 23:10:47 ----D---- C:\Program Files\ESET
2012-05-17 23:06:08 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-05-17 23:06:08 ----A---- C:\Windows\system32\DWrite.dll
2012-05-17 23:06:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-05-17 23:05:58 ----A---- C:\Windows\system32\win32k.sys
2012-05-17 23:05:56 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-05-17 23:05:55 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-05-17 23:05:10 ----A---- C:\Windows\system32\mshtml.dll
2012-05-17 23:05:03 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-05-17 23:05:01 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-05-17 23:05:00 ----A---- C:\Windows\system32\ieframe.dll
2012-05-17 23:04:59 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-05-17 23:04:59 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-05-17 23:04:59 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-05-17 23:04:59 ----A---- C:\Windows\system32\wininet.dll
2012-05-17 23:04:59 ----A---- C:\Windows\system32\urlmon.dll
2012-05-17 23:04:59 ----A---- C:\Windows\system32\iertutil.dll
2012-05-17 23:04:58 ----A---- C:\Windows\SYSWOW64\url.dll
2012-05-17 23:04:58 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-05-17 23:04:58 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-05-17 23:04:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-05-17 23:04:58 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-05-17 23:04:58 ----A---- C:\Windows\system32\url.dll
2012-05-17 23:04:58 ----A---- C:\Windows\system32\mshtmled.dll
2012-05-17 23:04:58 ----A---- C:\Windows\system32\msfeeds.dll
2012-05-17 23:04:58 ----A---- C:\Windows\system32\jsproxy.dll
2012-05-17 23:04:58 ----A---- C:\Windows\system32\ieui.dll
2012-05-17 23:04:47 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-05-17 23:04:21 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-05-16 19:17:41 ----D---- C:\ProgramData\Symantec
2012-05-16 19:17:41 ----D---- C:\Program Files (x86)\Symantec
2012-05-16 18:48:47 ----D---- C:\Windows\SYSWOW64\RTCOM
2012-05-16 18:48:25 ----D---- C:\Program Files\Realtek
2012-05-16 18:48:22 ----A---- C:\Windows\system32\RtkHDM64.dll
2012-05-16 18:48:22 ----A---- C:\Windows\system32\RTEEP64H.dll
2012-05-16 18:48:22 ----A---- C:\Windows\system32\RTEEL64H.dll
2012-05-16 18:48:22 ----A---- C:\Windows\system32\drivers\RtHDMIVX.sys
2012-05-16 18:48:21 ----A---- C:\Windows\system32\RTEEG64H.dll
2012-05-16 18:48:21 ----A---- C:\Windows\system32\RTEED64H.dll
2012-05-16 18:48:21 ----A---- C:\Windows\system32\RHDMEx64.dll
2012-05-16 18:48:21 ----A---- C:\Windows\system32\RHCoInst64.dll
2012-05-16 18:48:21 ----A---- C:\Windows\system32\RH3DHT64.dll
2012-05-16 18:48:20 ----A---- C:\Windows\system32\RH3DAA64.dll
2012-05-16 18:48:19 ----A---- C:\Windows\system32\WavesGUILib.dll
2012-05-16 18:48:18 ----A---- C:\Windows\system32\SRSWOW64.dll
2012-05-16 18:48:18 ----A---- C:\Windows\system32\SRSTSX64.dll
2012-05-16 18:48:18 ----A---- C:\Windows\system32\SRSTSH64.dll
2012-05-16 18:48:18 ----A---- C:\Windows\system32\SRSHP64.dll
2012-05-16 18:48:17 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2012-05-16 18:48:17 ----A---- C:\Windows\system32\SFNHK64.dll
2012-05-16 18:48:17 ----A---- C:\Windows\system32\SFCOM64.dll
2012-05-16 18:48:16 ----A---- C:\Windows\system32\SFAPO64.dll
2012-05-16 18:48:16 ----A---- C:\Windows\system32\RtPgEx64.dll
2012-05-16 18:48:15 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2012-05-16 18:48:15 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2012-05-16 18:48:14 ----A---- C:\Windows\system32\RtkCfg64.dll
2012-05-16 18:48:13 ----A---- C:\Windows\system32\RtkAPO64.dll
2012-05-16 18:48:13 ----A---- C:\Windows\system32\RtkApi64.dll
2012-05-16 18:48:13 ----A---- C:\Windows\system32\RTEEP64A.dll
2012-05-16 18:48:13 ----A---- C:\Windows\system32\RTEEL64A.dll
2012-05-16 18:48:13 ----A---- C:\Windows\system32\RTEEG64A.dll
2012-05-16 18:48:13 ----A---- C:\Windows\system32\RTEED64A.dll
2012-05-16 18:48:12 ----A---- C:\Windows\system32\RTCOM64.dll
2012-05-16 18:48:12 ----A---- C:\Windows\system32\RP3DHT64.dll
2012-05-16 18:48:12 ----A---- C:\Windows\system32\RP3DAA64.dll
2012-05-16 18:48:12 ----A---- C:\Windows\system32\RCoRes64.dat
2012-05-16 18:48:12 ----A---- C:\Windows\system32\RCoInst64.dll
2012-05-16 18:48:09 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2012-05-16 18:48:09 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2012-05-16 18:48:08 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2012-05-16 18:48:08 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2012-05-16 18:48:08 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2012-05-16 18:48:05 ----A---- C:\Windows\system32\FMAPO64.dll
2012-05-16 18:48:05 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2012-05-16 18:48:05 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2012-05-16 18:48:05 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2012-05-16 18:48:04 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2012-05-16 18:48:04 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2012-05-16 18:48:04 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2012-05-16 18:48:04 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2012-05-16 18:48:04 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2012-05-16 18:48:03 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2012-05-16 18:48:03 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2012-05-16 18:48:03 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2012-05-16 18:48:03 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2012-05-16 18:48:01 ----A---- C:\Windows\system32\AERTAR64.dll
2012-05-16 18:48:01 ----A---- C:\Windows\system32\AERTAC64.dll
2012-05-16 18:47:48 ----R---- C:\Windows\RtlExUpd.dll
2012-05-16 18:45:12 ----R---- C:\Windows\system32\drivers\RtsUStor.sys
2012-05-16 18:42:10 ----D---- C:\Program Files\ATI Technologies
2012-05-16 18:36:54 ----D---- C:\Program Files (x86)\Atheros
2012-05-16 18:36:54 ----A---- C:\Windows\system32\athrx.sys
2012-05-16 18:36:20 ----D---- C:\ProgramData\Atheros
2012-05-16 18:36:19 ----D---- C:\Users\jklôôlkj\AppData\Roaming\InstallShield

======List of files/folders modified in the last 1 month======

2012-05-22 22:39:56 ----D---- C:\Windows\Prefetch
2012-05-22 22:39:43 ----RD---- C:\Program Files
2012-05-22 22:38:29 ----D---- C:\Windows\Temp
2012-05-22 22:06:05 ----D---- C:\ProgramData\boost_interprocess
2012-05-22 18:32:45 ----D---- C:\Windows
2012-05-22 18:31:36 ----D---- C:\Windows\system32\config
2012-05-22 06:27:32 ----D---- C:\Users\jklôôlkj\AppData\Roaming\vlc
2012-05-21 14:38:43 ----D---- C:\Windows\System32
2012-05-21 14:38:43 ----D---- C:\Windows\inf
2012-05-21 14:38:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-05-20 09:18:09 ----SHD---- C:\System Volume Information
2012-05-20 08:34:00 ----D---- C:\Windows\Microsoft.NET
2012-05-20 08:33:41 ----RSD---- C:\Windows\assembly
2012-05-20 07:38:19 ----D---- C:\Windows\winsxs
2012-05-20 07:38:09 ----SHD---- C:\Windows\Installer
2012-05-20 07:38:08 ----D---- C:\Config.Msi
2012-05-20 07:36:42 ----D---- C:\Program Files (x86)
2012-05-19 05:10:04 ----A---- C:\Windows\system.ini
2012-05-19 05:09:56 ----D---- C:\Windows\system32\drivers\etc
2012-05-19 05:06:01 ----D---- C:\Windows\SYSWOW64\drivers
2012-05-19 05:06:01 ----D---- C:\Windows\SysWOW64
2012-05-19 05:06:01 ----D---- C:\Windows\system32\drivers
2012-05-19 05:06:01 ----D---- C:\Windows\AppPatch
2012-05-19 05:05:59 ----D---- C:\Program Files\Common Files
2012-05-19 05:05:59 ----D---- C:\Program Files (x86)\Common Files
2012-05-18 22:49:12 ----D---- C:\Windows\debug
2012-05-18 22:33:33 ----D---- C:\Windows\system32\Tasks
2012-05-18 06:00:29 ----D---- C:\Windows\SYSWOW64\migration
2012-05-18 06:00:29 ----D---- C:\Windows\system32\migration
2012-05-18 06:00:29 ----D---- C:\Program Files\Internet Explorer
2012-05-18 06:00:29 ----D---- C:\Program Files (x86)\Internet Explorer
2012-05-18 03:11:03 ----D---- C:\Windows\system32\catroot
2012-05-18 03:03:36 ----D---- C:\Windows\system32\catroot2
2012-05-18 03:01:15 ----D---- C:\Program Files\Windows Journal
2012-05-17 23:12:27 ----D---- C:\Windows\system32\DriverStore
2012-05-17 23:10:47 ----D---- C:\ProgramData
2012-05-17 22:53:53 ----D---- C:\Windows\system32\NDF
2012-05-16 22:42:42 ----D---- C:\Windows\twain_32
2012-05-16 22:41:34 ----RSD---- C:\Windows\Fonts
2012-05-16 22:41:34 ----D---- C:\ProgramData\HP
2012-05-16 22:41:15 ----D---- C:\Program Files (x86)\HP
2012-05-16 18:53:08 ----HD---- C:\Program Files (x86)\Temp
2012-05-16 18:48:01 ----D---- C:\Program Files (x86)\Realtek
2012-05-16 18:48:00 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-05-16 18:42:50 ----SD---- C:\Users\jklôôlkj\AppData\Roaming\Microsoft
2012-05-16 18:22:11 ----D---- C:\ProgramData\AVAST Software
2012-04-26 20:03:14 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2012-03-14 62496]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2008-06-16 55024]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-03-14 38288]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2012-03-14 187632]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-21 188928]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-11 2229608]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-06-22 2399848]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 18432]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2010-09-01 17976]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 16896]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 k57nd60a;Broadcom NetLink ™ Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys []
S3 Pcouffin64;Low level access layer for CD devices; C:\Windows\System32\Drivers\pcouffin64a.sys [2012-02-14 55136]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8; c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-10-09 169312]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-21 202752]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-03-07 913144]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2010-06-11 868896]
R2 GREGService;GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [2010-01-08 23584]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2010-06-28 255744]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2011-10-14 994360]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2011-10-14 399416]
R2 Updater Service;Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2010-01-29 243232]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-03 135664]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-08-03 867080]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-03 135664]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-07-08 182768]
S3 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2010-01-15 935208]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-08-05 1255736]

-----------------EOF-----------------

Dakujem skusil som no i tak mi tlaciaren nejde, poslem vam sken z rsit x 64, pozrite sa prosim ci nemam neaky virus, dakujem

 

Logfile of random's system information tool 1.09 (written by random/random)

Run by jklôôlkj at 2012-05-22 22:39:43

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 181 GB (62%) free of 291 GB

Total RAM: 4091 MB (62% free)

 

 

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:40:05, on 22. 5. 2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
....
.....
-----------------EOF-----------------

Logy treba dávať do CODE nech sa automaticky neparsujú odkazy

prosim do akeho CODE ? porad som tu novy

Takto by si to mal dávať:

[code]text[/code]

lebo keď nedáš log do code, tak odkazy v logu sa spravia živými a skrátia sa a potom to analyzátor logu nemusí správne prečítať.

Možno to bude ťažšie na pochopenie, tak nerieš teraz. Podľa logu by tam problém nemal byť, stále to vidím tak, že bude treba úplne a korektne odinštalovať software a nainštalovať odznovu. Si na tom počítači ako administrátor alebo užívateľ? Mal by si byť admin, inak nemusíš mať povolenie odinštalovať soft.

úplne na samom konci Kategórií na prvej stránke Fóra je kategória Testovacie príspevky

odkaz je tu : http://forum.freespa...-prispevky-kos/

všetky ikonky pri písaní príspevkov, všetky tlačítka a všetko ohľadne písania si tam môžeš odskúšať, presne od toho tam táto možnosť je, možnosť otestovať a naučiť sa kdečo nedáva každé fórum :) využívame to všetci, po čase sa pokusné príspevky a pokusy premazávajú.

skús si to, preto to tam je :)

tu je obrázok, ktoré code a ako sa k nim dostaneš, v testovacích príspevkoch môžeš vyskúšať :

okrem toho, celý siahodlhý príspevok netreba citovať celý / je to aj v Pravidlách na Fóre / , lebo kým sa človek dostane na koniec, roluje a roluje a je to zbytočné , len keby si nejaký kúsok z neho citoval, to stačí, a odpovedal na jednu konkrétnu vec, napríklad ... ináč je jasné, že človek odpovedá na príspevok pred ním ... :)

Logfile of random's system information tool 1.09 (written by random/random)

Run by jklôôlkj at 2012-05-22 22:39:43

Microsoft Windows 7 Home Premium  Service Pack 1

System drive C: has 181 GB (62%) free of 291 GB

Total RAM: 4091 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 22:40:05, on 22. 5. 2012

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v8.00 (8.00.7601.17514)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe

C:\Program Files (x86)\Launch Manager\LManager.exe

C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files (x86)\Launch Manager\LMworker.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Program Files (x86)\Internet Explorer\IELowutil.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe

C:\Program Files\trend micro\jklôôlkj.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.com/?cid={B9E012C5-2E89-483E-AAF9-7491A218840C}&mid=b60e8bfba51547d0890159e75b71ad94-b323a7bef4e7704289d7b16ce7887b9ead8b4355&lang=sk&ds=gm011&pr=sa&d=&v=&sap=hp

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=041b&m=easynote_tk81&r=27360811i585l0454z185f47i2h39s

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: QpBHO Class - {1658D3A1-9E13-4196-A82A-D70D70880F36} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QuickPrintBHO.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Pomocník pri prihlasovaní v konte Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O3 - Toolbar: PandoraTV Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k

O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) - Adobe Systems Incorporated - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe

O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe

O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe

O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe

O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Updater Service - Acer Group - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 9545 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

winlogon.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

atieclxx

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe"

"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"

"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"

"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe"

"C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe"

C:\Windows\System32\svchost.exe -k HPZ12

"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE

"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe"

C:\Windows\System32\svchost.exe -k HPZ12

"C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service

"taskhost.exe"

"C:\Windows\system32\Dwm.exe"

C:\Windows\Explorer.EXE

C:\Windows\system32\svchost.exe -k imgsvc

"C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe"

"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"

WLIDSvcM.exe 2140

"C:\Program Files\Elantech\ETDCtrl.exe"

"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe"

"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice

"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun

"C:\Program Files (x86)\Secunia\PSI\psi_tray.exe"

"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k

"C:\Program Files (x86)\Launch Manager\LManager.exe"

"C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe"

"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"

"C:\Program Files (x86)\Launch Manager\LMworker.exe"

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\SearchIndexer.exe /Embedding

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\wbem\unsecapp.exe -Embedding

C:\Windows\system32\wbem\wmiprvse.exe

"C:\Program Files\Elantech\ETDCtrlHelper.exe"

"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe"

"C:\Program Files\Windows Media Player\wmpnetwk.exe"

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

"C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service

C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4972.5520e20.852227479 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll" Mozilla.Firefox.7.0 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.jar" 4972 "\\.\pipe\gecko-crash-server-pipe.4972" plugin

"C:\Program Files (x86)\Internet Explorer\IELowutil.exe" -embedding

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

/QuitInfo:0000000000000220;00000000000004E4; /ManualLaunch

/loadhooks /Parent:0000000000000A50

"C:\Users\jklôôlkj\zBolo\Desktop\RSITx64.exe"

C:\Windows\system32\wbem\wmiprvse.exe

taskeng.exe {1A1731DD-BE4C-443B-99BA-876F49E2943D}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\jklôôlkj\AppData\Roaming\Mozilla\Firefox\Profiles\kk0e8s43.default

prefs.js - "browser.search.suggest.enabled" -  false

prefs.js - "browser.search.useDBForOrder" -  true

prefs.js - "browser.startup.homepage" -  "about:home"

prefs.js - "extensions.enabledItems" -  "{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.5, smartwebprinting@hp.com:4.51, {9AA46F4F-4DC7-4c06-97AF-5035170634FE}:4.5, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.5.0.8013, {3112ca9c-de6d-4884-a869-9855de68056c}:7.1.20110512W, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.9, wrc@avast.com:6.0.1289, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.22"

prefs.js - "keyword.URL" -  "http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&invocationType=tb50-ff-winamp-ab-en-us&tb_uuid=20111026023827090&tb_oid=17-05-2012&tb_mrud=17-05-2012&query="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 11.2.202.235 Plugin

"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]

"Description"=WLPG Install MIME type

"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]

"Description"=WLPG Install MIME type

"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]

"Description"=Google Update

"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]

"Description"=Google Update

"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.0]

"Description"=VLC Multimedia Plugin

"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.1]

"Description"=VLC Multimedia Plugin

"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]

"Description"=WildTangent Games App Presence Detector Plugin

"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]

"Description"=Handles PDFs in-place in Firefox

"Path"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 10.1 Plugin

"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\

{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\

binary.manifest

browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\

npdnu.xpt

npdnupdater2.xpt

nppdf32.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\

atlas-sk.xml

avg-secure-search.xml

azet-sk.xml

babylon.xml

dunaj-sk.xml

eBay.xml

google.xml

slovnik-sk.xml

wikipedia-sk.xml

zoznam-sk.xml

C:\Users\jklôôlkj\AppData\Roaming\Mozilla\Firefox\Profiles\kk0e8s43.default\extensions\

{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

C:\Users\jklôôlkj\AppData\Roaming\Mozilla\Firefox\Profiles\kk0e8s43.default\searchplugins\

aol-web-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-03-24 253040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg64.dll [2012-01-12 346168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1658D3A1-9E13-4196-A82A-D70D70880F36}]

HP Smart Print BHO - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QuickPrintBHO.dll [2011-11-14 644696]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Pomocník pri prihlasovaní v konte Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-24 192112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll [2012-01-12 1003576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

PandoraTV Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-07-26 1493160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-03-24 253040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{D4027C7F-154A-4066-A1AD-4243D8127440} - PandoraTV Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-07-26 1493160]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-24 192112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 649608]

"Acer ePower Management"=C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2010-06-11 861216]

"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-06-22 10920552]

"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-03-07 4081008]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-07-08 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnUpdater]

C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2011-07-26 397992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]

C:\Program Files (x86)\Skype\Phone\Skype.exe /nosplash /minimized []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-21 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]

C:\PROGRA~2\MICROS~2\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VideoWebCamera.exe.lnk]

C:\PROGRA~2\VIDEOW~1\VIDEOW~1.EXE [2010-08-20 12609352]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [2010-06-28 263936]

"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]

"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

"Norton Online Backup"=C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-01 1155928]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

Secunia PSI Tray.lnk - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"MSVideo8"=VfWWDM32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

======File associations======

.inf - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1

.inf - install - %SystemRoot%\SysWow64\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - %SystemRoot%\SysWow64\WScript.exe "%1" %*

.vbs - open - %SystemRoot%\SysWow64\WScript.exe "%1" %*

.cpl - cplopen - %SystemRoot%\SysWow64\control.exe "%1",%*

======List of files/folders created in the last 1 month======

2012-05-22 22:39:43 ----D---- C:\rsit

2012-05-22 22:39:43 ----D---- C:\Program Files\trend micro

2012-05-20 07:36:42 ----D---- C:\Program Files\Microsoft Silverlight

2012-05-20 07:36:42 ----D---- C:\Program Files (x86)\Microsoft Silverlight

2012-05-19 05:10:00 ----D---- C:\$RECYCLE.BIN

2012-05-19 05:02:32 ----D---- C:\ComboFix

2012-05-18 22:45:52 ----D---- C:\hry

2012-05-18 22:34:02 ----D---- C:\Program Files\Fenix Team

2012-05-18 22:20:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

2012-05-18 22:11:48 ----D---- C:\Program Files (x86)\Secunia

2012-05-18 03:02:30 ----A---- C:\Windows\SYSWOW64\wmi.dll

2012-05-18 03:02:30 ----A---- C:\Windows\SYSWOW64\wintrust.dll

2012-05-18 03:02:30 ----A---- C:\Windows\SYSWOW64\imagehlp.dll

2012-05-18 03:02:30 ----A---- C:\Windows\system32\wmi.dll

2012-05-18 03:02:30 ----A---- C:\Windows\system32\wintrust.dll

2012-05-18 03:02:30 ----A---- C:\Windows\system32\imagehlp.dll

2012-05-18 03:02:30 ----A---- C:\Windows\system32\drivers\fs_rec.sys

2012-05-18 00:33:13 ----A---- C:\Windows\zip.exe

2012-05-18 00:33:13 ----A---- C:\Windows\SWSC.exe

2012-05-18 00:33:13 ----A---- C:\Windows\SWREG.exe

2012-05-18 00:33:13 ----A---- C:\Windows\sed.exe

2012-05-18 00:33:13 ----A---- C:\Windows\PEV.exe

2012-05-18 00:33:13 ----A---- C:\Windows\NIRCMD.exe

2012-05-18 00:33:13 ----A---- C:\Windows\MBR.exe

2012-05-18 00:33:13 ----A---- C:\Windows\grep.exe

2012-05-18 00:33:10 ----D---- C:\Windows\ERDNT

2012-05-18 00:32:49 ----D---- C:\Qoobox

2012-05-17 23:13:49 ----D---- C:\Users\jklôôlkj\AppData\Roaming\ESET

2012-05-17 23:10:47 ----D---- C:\ProgramData\ESET

2012-05-17 23:10:47 ----D---- C:\Program Files\ESET

2012-05-17 23:06:08 ----A---- C:\Windows\SYSWOW64\DWrite.dll

2012-05-17 23:06:08 ----A---- C:\Windows\system32\DWrite.dll

2012-05-17 23:06:00 ----A---- C:\Windows\system32\ntoskrnl.exe

2012-05-17 23:05:58 ----A---- C:\Windows\system32\win32k.sys

2012-05-17 23:05:56 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe

2012-05-17 23:05:55 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe

2012-05-17 23:05:10 ----A---- C:\Windows\system32\mshtml.dll

2012-05-17 23:05:03 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2012-05-17 23:05:01 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2012-05-17 23:05:00 ----A---- C:\Windows\system32\ieframe.dll

2012-05-17 23:04:59 ----A---- C:\Windows\SYSWOW64\wininet.dll

2012-05-17 23:04:59 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2012-05-17 23:04:59 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2012-05-17 23:04:59 ----A---- C:\Windows\system32\wininet.dll

2012-05-17 23:04:59 ----A---- C:\Windows\system32\urlmon.dll

2012-05-17 23:04:59 ----A---- C:\Windows\system32\iertutil.dll

2012-05-17 23:04:58 ----A---- C:\Windows\SYSWOW64\url.dll

2012-05-17 23:04:58 ----A---- C:\Windows\SYSWOW64\mshtmled.dll

2012-05-17 23:04:58 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2012-05-17 23:04:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2012-05-17 23:04:58 ----A---- C:\Windows\SYSWOW64\ieui.dll

2012-05-17 23:04:58 ----A---- C:\Windows\system32\url.dll

2012-05-17 23:04:58 ----A---- C:\Windows\system32\mshtmled.dll

2012-05-17 23:04:58 ----A---- C:\Windows\system32\msfeeds.dll

2012-05-17 23:04:58 ----A---- C:\Windows\system32\jsproxy.dll

2012-05-17 23:04:58 ----A---- C:\Windows\system32\ieui.dll

2012-05-17 23:04:47 ----A---- C:\Windows\system32\drivers\partmgr.sys

2012-05-17 23:04:21 ----A---- C:\Windows\system32\drivers\tcpip.sys

2012-05-16 19:17:41 ----D---- C:\ProgramData\Symantec

2012-05-16 19:17:41 ----D---- C:\Program Files (x86)\Symantec

2012-05-16 18:48:47 ----D---- C:\Windows\SYSWOW64\RTCOM

2012-05-16 18:48:25 ----D---- C:\Program Files\Realtek

2012-05-16 18:48:22 ----A---- C:\Windows\system32\RtkHDM64.dll

2012-05-16 18:48:22 ----A---- C:\Windows\system32\RTEEP64H.dll

2012-05-16 18:48:22 ----A---- C:\Windows\system32\RTEEL64H.dll

2012-05-16 18:48:22 ----A---- C:\Windows\system32\drivers\RtHDMIVX.sys

2012-05-16 18:48:21 ----A---- C:\Windows\system32\RTEEG64H.dll

2012-05-16 18:48:21 ----A---- C:\Windows\system32\RTEED64H.dll

2012-05-16 18:48:21 ----A---- C:\Windows\system32\RHDMEx64.dll

2012-05-16 18:48:21 ----A---- C:\Windows\system32\RHCoInst64.dll

2012-05-16 18:48:21 ----A---- C:\Windows\system32\RH3DHT64.dll

2012-05-16 18:48:20 ----A---- C:\Windows\system32\RH3DAA64.dll

2012-05-16 18:48:19 ----A---- C:\Windows\system32\WavesGUILib.dll

2012-05-16 18:48:18 ----A---- C:\Windows\system32\SRSWOW64.dll

2012-05-16 18:48:18 ----A---- C:\Windows\system32\SRSTSX64.dll

2012-05-16 18:48:18 ----A---- C:\Windows\system32\SRSTSH64.dll

2012-05-16 18:48:18 ----A---- C:\Windows\system32\SRSHP64.dll

2012-05-16 18:48:17 ----A---- C:\Windows\SYSWOW64\SFCOM.dll

2012-05-16 18:48:17 ----A---- C:\Windows\system32\SFNHK64.dll

2012-05-16 18:48:17 ----A---- C:\Windows\system32\SFCOM64.dll

2012-05-16 18:48:16 ----A---- C:\Windows\system32\SFAPO64.dll

2012-05-16 18:48:16 ----A---- C:\Windows\system32\RtPgEx64.dll

2012-05-16 18:48:15 ----A---- C:\Windows\system32\RtlCPAPI64.dll

2012-05-16 18:48:15 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys

2012-05-16 18:48:14 ----A---- C:\Windows\system32\RtkCfg64.dll

2012-05-16 18:48:13 ----A---- C:\Windows\system32\RtkAPO64.dll

2012-05-16 18:48:13 ----A---- C:\Windows\system32\RtkApi64.dll

2012-05-16 18:48:13 ----A---- C:\Windows\system32\RTEEP64A.dll

2012-05-16 18:48:13 ----A---- C:\Windows\system32\RTEEL64A.dll

2012-05-16 18:48:13 ----A---- C:\Windows\system32\RTEEG64A.dll

2012-05-16 18:48:13 ----A---- C:\Windows\system32\RTEED64A.dll

2012-05-16 18:48:12 ----A---- C:\Windows\system32\RTCOM64.dll

2012-05-16 18:48:12 ----A---- C:\Windows\system32\RP3DHT64.dll

2012-05-16 18:48:12 ----A---- C:\Windows\system32\RP3DAA64.dll

2012-05-16 18:48:12 ----A---- C:\Windows\system32\RCoRes64.dat

2012-05-16 18:48:12 ----A---- C:\Windows\system32\RCoInst64.dll

2012-05-16 18:48:09 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll

2012-05-16 18:48:09 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll

2012-05-16 18:48:08 ----A---- C:\Windows\system32\MaxxAudioEQ.dll

2012-05-16 18:48:08 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll

2012-05-16 18:48:08 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll

2012-05-16 18:48:05 ----A---- C:\Windows\system32\FMAPO64.dll

2012-05-16 18:48:05 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll

2012-05-16 18:48:05 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll

2012-05-16 18:48:05 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll

2012-05-16 18:48:04 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll

2012-05-16 18:48:04 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll

2012-05-16 18:48:04 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll

2012-05-16 18:48:04 ----A---- C:\Windows\system32\DTSLFXAPO64.dll

2012-05-16 18:48:04 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll

2012-05-16 18:48:03 ----A---- C:\Windows\system32\DTSGFXAPO64.dll

2012-05-16 18:48:03 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll

2012-05-16 18:48:03 ----A---- C:\Windows\system32\DTSBoostDLL64.dll

2012-05-16 18:48:03 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll

2012-05-16 18:48:01 ----A---- C:\Windows\system32\AERTAR64.dll

2012-05-16 18:48:01 ----A---- C:\Windows\system32\AERTAC64.dll

2012-05-16 18:47:48 ----R---- C:\Windows\RtlExUpd.dll

2012-05-16 18:45:12 ----R---- C:\Windows\system32\drivers\RtsUStor.sys

2012-05-16 18:42:10 ----D---- C:\Program Files\ATI Technologies

2012-05-16 18:36:54 ----D---- C:\Program Files (x86)\Atheros

2012-05-16 18:36:54 ----A---- C:\Windows\system32\athrx.sys

2012-05-16 18:36:20 ----D---- C:\ProgramData\Atheros

2012-05-16 18:36:19 ----D---- C:\Users\jklôôlkj\AppData\Roaming\InstallShield

======List of files/folders modified in the last 1 month======

2012-05-22 22:39:56 ----D---- C:\Windows\Prefetch

2012-05-22 22:39:43 ----RD---- C:\Program Files

2012-05-22 22:38:29 ----D---- C:\Windows\Temp

2012-05-22 22:06:05 ----D---- C:\ProgramData\boost_interprocess

2012-05-22 18:32:45 ----D---- C:\Windows

2012-05-22 18:31:36 ----D---- C:\Windows\system32\config

2012-05-22 06:27:32 ----D---- C:\Users\jklôôlkj\AppData\Roaming\vlc

2012-05-21 14:38:43 ----D---- C:\Windows\System32

2012-05-21 14:38:43 ----D---- C:\Windows\inf

2012-05-21 14:38:43 ----A---- C:\Windows\system32\PerfStringBackup.INI

2012-05-20 09:18:09 ----SHD---- C:\System Volume Information

2012-05-20 08:34:00 ----D---- C:\Windows\Microsoft.NET

2012-05-20 08:33:41 ----RSD---- C:\Windows\assembly

2012-05-20 07:38:19 ----D---- C:\Windows\winsxs

2012-05-20 07:38:09 ----SHD---- C:\Windows\Installer

2012-05-20 07:38:08 ----D---- C:\Config.Msi

2012-05-20 07:36:42 ----D---- C:\Program Files (x86)

2012-05-19 05:10:04 ----A---- C:\Windows\system.ini

2012-05-19 05:09:56 ----D---- C:\Windows\system32\drivers\etc

2012-05-19 05:06:01 ----D---- C:\Windows\SYSWOW64\drivers

2012-05-19 05:06:01 ----D---- C:\Windows\SysWOW64

2012-05-19 05:06:01 ----D---- C:\Windows\system32\drivers

2012-05-19 05:06:01 ----D---- C:\Windows\AppPatch

2012-05-19 05:05:59 ----D---- C:\Program Files\Common Files

2012-05-19 05:05:59 ----D---- C:\Program Files (x86)\Common Files

2012-05-18 22:49:12 ----D---- C:\Windows\debug

2012-05-18 22:33:33 ----D---- C:\Windows\system32\Tasks

2012-05-18 06:00:29 ----D---- C:\Windows\SYSWOW64\migration

2012-05-18 06:00:29 ----D---- C:\Windows\system32\migration

2012-05-18 06:00:29 ----D---- C:\Program Files\Internet Explorer

2012-05-18 06:00:29 ----D---- C:\Program Files (x86)\Internet Explorer

2012-05-18 03:11:03 ----D---- C:\Windows\system32\catroot

2012-05-18 03:03:36 ----D---- C:\Windows\system32\catroot2

2012-05-18 03:01:15 ----D---- C:\Program Files\Windows Journal

2012-05-17 23:12:27 ----D---- C:\Windows\system32\DriverStore

2012-05-17 23:10:47 ----D---- C:\ProgramData

2012-05-17 22:53:53 ----D---- C:\Windows\system32\NDF

2012-05-16 22:42:42 ----D---- C:\Windows\twain_32

2012-05-16 22:41:34 ----RSD---- C:\Windows\Fonts

2012-05-16 22:41:34 ----D---- C:\ProgramData\HP

2012-05-16 22:41:15 ----D---- C:\Program Files (x86)\HP

2012-05-16 18:53:08 ----HD---- C:\Program Files (x86)\Temp

2012-05-16 18:48:01 ----D---- C:\Program Files (x86)\Realtek

2012-05-16 18:48:00 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

2012-05-16 18:42:50 ----SD---- C:\Users\jklôôlkj\AppData\Roaming\Microsoft

2012-05-16 18:22:11 ----D---- C:\ProgramData\AVAST Software

2012-04-26 20:03:14 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2012-03-14 62496]

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2008-06-16 55024]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]

R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]

R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]

R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-03-14 38288]

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2012-03-14 187632]

R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]

R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-21 188928]

R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-11 2229608]

R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-06-22 2399848]

R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 18432]

R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2010-09-01 17976]

R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]

R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 16896]

S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]

S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []

S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]

S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 19968]

S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]

S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys []

S3 Pcouffin64;Low level access layer for CD devices; C:\Windows\System32\Drivers\pcouffin64a.sys [2012-02-14 55136]

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]

S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]

S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8; c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-10-09 169312]

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-21 202752]

R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-03-07 913144]

R2 ePowerSvc;Acer ePower Service; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2010-06-11 868896]

R2 GREGService;GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [2010-01-08 23584]

R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]

R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]

R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2010-06-28 255744]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]

R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2011-10-14 994360]

R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2011-10-14 399416]

R2 Updater Service;Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2010-01-29 243232]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-03 135664]

S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-08-03 867080]

S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]

S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-03 135664]

S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-07-08 182768]

S3 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2010-01-15 935208]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-08-05 1255736]

-----------------EOF-----------------

dakujem za radu phantom fsp